Privacy Policy

• Your Flownyx account: name, email address, password (stored only as a hash by our authentication service), organization and team membership.
• Connected accounts: when you connect Meta, Pinterest, Google Ads, Instagram, Facebook or YouTube, we store the account identifiers, the structure and settings of what you manage there, performance metrics, creative assets, and the OAuth tokens that let Flownyx act for you. Tokens are encrypted at rest.
• Content you create in Flownyx: uploads, drafts, schedules, notes and approvals.
• Tracking pixel:if a site owner installs the Flownyx pixel, it records page views and conversion events (URL, referrer, click identifiers and a first-party device identifier) on that site owner's behalf.

Flownyx uses YouTube API Services to provide its YouTube features. By using those features you agree to the YouTube Terms of Service, and Google's use of data is governed by the Google Privacy Policy.

Depending on the YouTube features you use and the permissions you grant on Google's consent screen, Flownyx can access:

• Your channel's profile, settings, playlists, videos and their metadata (titles, descriptions, tags, thumbnails, captions, visibility and schedule).
• Comments on your videos, so you can read, reply to and moderate them in Flownyx.
• YouTube Analytics and Reporting data for your channel, such as views, watch time, audience retention, impressions, click-through rate, subscribers and traffic sources.
• If you grant the revenue permission, estimated revenue and ad performance for your channel.

We use this data only to provide the YouTube features you use in Flownyx:

• Showing your channel, videos and analytics in your dashboard and in reports you request.
• Uploading, scheduling and editing videos, thumbnails, playlists, captions and channel settings when you (or an agent you have authorized) take that action. You choose each video's visibility, and Flownyx never changes it unless you instruct it to.
• Running title, thumbnail and description tests that you set up, and comparing their results.
• Storing analytics history so you can analyze trends over time.

Flownyx's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Google user data only to provide and improve the user-facing features described above.
• We do not sell Google user data, and we do not use it for advertising, retargeting or to determine creditworthiness.
• We do not use Google user data to train generalized artificial-intelligence or machine-learning models.
• We transfer it to others only to provide the features you use, to comply with law, for security, or as part of a merger or acquisition with your consent.
• Our staff do not read your Google user data unless you ask us to (for example, for support), it is needed for security or to comply with law, or it has been aggregated and anonymized for internal operations.

We use the information above to operate Flownyx for you: performance analysis, budget and delivery management, creative testing, scheduling, publishing and attribution. We do not sell personal information.

We share it only with:

• The platform it came from, when you take an action there (for example, publishing a video to YouTube, or sending conversion events to Meta's Conversions API at the account owner's direction).
• Members of your Flownyx organization and AI agents you have authorized, limited to the brands and platforms you grant them.
• Service providers that host and run Flownyx for us under confidentiality and security obligations: DigitalOcean (servers, database and file storage), and AI model providers (Anthropic, OpenAI) that generate analysis you request. AI providers receive only the data needed for that request and may not use it to train their models.
• Authorities, when required by law.

Flownyx uses cookies that are needed to keep you signed in and to protect sign-in flows. We do not use advertising cookies on flownyx.ai and we do not serve third-party ads. The tracking pixel described above stores a first-party identifier on the site owner's own domain.

Data is stored on access-controlled DigitalOcean infrastructure in the United States, scoped to your organization with row-level security, encrypted in transit (HTTPS/TLS) and, for OAuth tokens, encrypted at rest.

• We keep connected-account data while the account stays connected and you keep using it.
• YouTube video titles, descriptions, comment text and other non-statistical YouTube data are refreshed from YouTube or deleted at least every 30 days.
• YouTube analytics statistics are kept for your historical analysis while you remain connected; we re-check your authorization at least every 30 days.
• When you disconnect YouTube in Flownyx, we revoke Flownyx's access with Google immediately and delete the YouTube data we stored within 7 days.
• If you remove Flownyx's access from your Google account instead, we detect it on the next refresh attempt and delete your YouTube data within 30 days.
• If you ask us to delete your data or your Flownyx account, we delete it within 7 days, except where the law requires us to keep it.
• Raw tracking-pixel events are archived after their attribution window.

Deleting data in Flownyx does not delete your videos or other content on YouTube or any other platform.

• Disconnect YouTube from its connection card in Flownyx at any time. For other platforms, remove access in that platform's settings or email us and we will disconnect it.
• Revoke Flownyx's access to your Google account, including YouTube, at https://security.google.com/settings/security/permissions.
• Request a copy of your data, a correction, or deletion by emailing us.

Flownyx is a business tool and is not directed to children under 16.

We will post any change to this policy here with a new effective date. Before we use data in a new way, we will update this policy and ask for your consent where required.

Privacy questions and requests: MRT Productions LLC · matt@matthewtims.com