Privacy Policy
Last updated: August 2026
This policy explains what FlavorFlow AI collects, why, and how your data is handled. We collect only what is needed to run the service.
What we collect
- Account details: your email address.
- Business profile: business name, type, location, goals, tone, order channel, social links, and the products you add.
- Generated content: the 30-day content systems, extra posts, edits, and feedback you create or mark.
- Performance data: the check-ins you submit about how your posts did.
- Technical data: session cookies required to keep you logged in, plus your language and theme preference.
How we use it
- To generate and improve your content plans and weekly reviews.
- To understand which content patterns work, so future recommendations fit your business better.
- To operate and secure the service. We do not sell your data and we do not run advertising trackers.
Where it lives
Your data is stored in our self-hosted Supabase (PostgreSQL) database, protected by row-level security so only you can read your business data.
AI processing
To generate content, your business profile, products, and check-in summaries are sent to our AI provider (OpenRouter) as part of the request. Business data belongs to you; we send only what is needed to produce your plan.
Your rights
This policy follows the principles of Indonesia's Personal Data Protection Law (UU PDP). Your business data belongs to your business. You can request a copy or deletion of your data at any time, and we will action reasonable requests promptly.
Contact
Questions or requests? Reach us at [contact email].