Privacy policy
Draft, under review. Last updated [date].
Who we are
Ravenflows is operated by [company legal name], [registered address] ("we"). This policy covers this website (ravenflows.app) and the Ravenflows service we run: sign-in, workspaces and setup.
Your company's data stays in your company's cloud
Ravenflows is built to run in each customer's own cloud accounts. Designs, code, screenshots, recordings, test logs, conversations with the assistant and keys are kept in the customer's own Google Cloud and Railway accounts, under the customer's control. We do not store them. For that data, the customer is responsible under its own policies.
What we collect
- Account: your name, email address and account identifier from the sign-in provider (Google, or Figma when used to sign in).
- Workspace: your company's workspace, its apps, its members and their roles, invitations, and the setup state.
- Service metadata: the outline of each journey map (screen names, sections, links), check summaries (counts per screen), references to secrets in the customer's cloud, and one encrypted credential (the customer's Railway project token).
- Audit log: who did what in the service, and when.
- Requests you send us: what you write when you request access or email us.
This website
This website sets no cookies of its own, runs no analytics and loads nothing from third parties. Our hosting provider processes standard request data (such as IP address) to serve and protect the site.
Cookies in the service
The service uses only the cookies it needs to keep you signed in and to protect sign-in. They are not used for tracking or advertising.
Why we use it
To run the service you or your company signed up for, to keep it secure, to answer your requests, and to meet legal obligations. [legal bases, per jurisdiction]
Who processes it for us
[list of processors and their regions, to confirm at launch: hosting of the service, key management, website and DNS, email delivery]
How long we keep it
[retention periods for accounts, workspaces, audit logs and access requests]
Your rights
[rights of access, correction, deletion, objection and portability, and how to use them]
Contact
Questions about this policy: support@ravenflows.app.
Changes
We will post changes here and update the date above.