← Back to FlowKit

Privacy Policy

Last updated: May 24, 2026

1. Overview

FlowKit ("we", "our", "us") is a browser automation tool developed by Digital Ad Expert. This Privacy Policy explains what data we collect through the FlowKit Chrome Extension and website, how we use it, and your rights regarding that data.

2. Data We Collect

Account data

When you create an account, we collect your email address and a hashed version of your password. We never store passwords in plain text.

Workflow data

When you record a workflow, the extension captures the sequence of interactions you perform (clicks, text inputs, page navigations). This data is stored locally on your device and, if you are signed in with a Pro account, synced to our servers in encrypted form.

We never record password fields. Any input field of type password is automatically excluded from recording.

Usage analytics

We collect aggregate, non-identifiable usage data such as workflow count and replay count to improve the product.

3. How We Use Your Data

  • To provide and maintain the FlowKit service
  • To sync your workflows across devices (Pro plan)
  • To authenticate your account securely
  • To improve the product based on aggregate usage patterns

We do not sell, rent, or transfer your personal data to third parties. We do not use your data for advertising or creditworthiness purposes.

4. Data Storage & Security

Workflow data is stored locally in chrome.storage.local on your device. Cloud-synced data is stored in encrypted form in our PostgreSQL database hosted on a private server. All data is transmitted over HTTPS (TLS 1.2+).

5. Chrome Extension Permissions

  • storage — saves workflows and auth tokens locally
  • tabs — sends recording commands to the active tab
  • activeTab — injects recorder only when user starts recording
  • scripting — executes replay steps on demand
  • host permissions (<all_urls>) — allows recording and replay on any site chosen by the user

The extension only activates recording when you explicitly press "Start Recording". It does not monitor your browsing activity passively.

6. Data Retention

Local workflow data remains on your device until you delete it. Cloud data is retained while your account is active. You can delete your account and all associated data at any time by contacting us at [email protected].

7. Third Parties

We do not share your personal data with third parties except as required by law. We do not use third-party analytics SDKs that track individual users.

8. Your Rights

You have the right to access, correct, or delete your personal data at any time. To exercise these rights, contact us at [email protected].

9. Contact

Digital Ad Expert
[email protected]
flowkit.digitaladexpert.de