OneFlow Legal

Privacy Policy

Last updated: October 2026.
Hey there! We value your privacy as much as you do. When you use OneFlow to build, host, and scale your apps, you trust us with some of your data. We don't take that lightly. This Privacy Policy is written in plain language to explain exactly what information we collect, why we collect it, how we keep it safe, and what your rights are.

1. Information We Collect

We only collect the data we absolutely need to provide and improve our service. This generally falls into two categories:

Data you give us directly: When you sign up, we collect your email address, name, and profile information. If you sign up for a paid plan, our payment processor (like Stripe) collects your billing details (we never store your full credit card number on our servers).
Data we collect automatically: When you interact with OneFlow, our systems automatically log information like your IP address, browser type, device details, and how you navigate the platform. This helps us debug issues, understand how the product is used, and stop malicious bots.
Content and Code: The prompts you write, the code the AI generates, and the assets you upload are stored on our servers so we can host and serve your applications.

2. How We Use Your Data

We use the information we collect to:

Provide, maintain, and improve the OneFlow platform.
Process your payments and manage your subscription.
Send you important account updates, security alerts, and support messages.
Analyze usage trends so we can figure out which features to build next.
Keep the platform secure by detecting and preventing fraud, spam, or abuse.

3. Who Do We Share Your Data With?

We are not data brokers. We never sell your personal information to third parties. However, we do share data with trusted third-party services that help us run our business:

Infrastructure providers: Companies that provide our cloud hosting and databases (like AWS, Vercel, or Supabase).
AI Providers: We send the prompts and code context to our AI partners (like OpenAI, Anthropic, or DeepMind) to generate the responses you ask for. Our agreements with these providers strictly prohibit them from using your private code to train their public models.
Payment processors: Secure services (like Stripe) that handle billing and subscriptions.
Legal requests: If we receive a valid, legally binding request from law enforcement or a court, we may be required to disclose certain information. We will always try to notify you first if legally permitted.

4. Cookies and Tracking

Like almost every website on the internet, we use cookies. These are small text files stored on your device that help us remember who you are so you don't have to log in every five minutes. We also use cookies for basic analytics (to see which pages are most popular) and security. You can control cookie preferences in your browser settings, but blocking essential cookies will break the login system.

5. Data Security

We take security very seriously. We use industry-standard encryption (like TLS/SSL) to protect data in transit, and we encrypt sensitive data at rest. While we do our absolute best to protect your information, no system is 100% hack-proof. If we ever experience a data breach that compromises your personal information, we will notify you promptly and transparently.

6. Your Rights

Depending on where you live (like the EU under GDPR, or California under CCPA), you have specific rights regarding your data. Regardless of where you live, we believe these are basic user rights, so we offer them to everyone:

Access and Export: You can request a copy of the personal data we hold about you.
Correction: You can update your account information at any time from your settings.
Deletion: You can delete your account and all associated projects. When you hit delete, we remove your data from our active servers immediately (though it may briefly remain in encrypted backups until they cycle out).

7. Changes to This Policy

We may update this Privacy Policy from time to time as our business practices change or legal requirements shift. If we make significant changes, we'll let you know via email or a prominent notice on the platform.

8. Contact Us

If you have any questions, concerns, or feedback about how we handle your privacy, please don't hesitate to reach out. We are real people and we're here to help!

1. Information We Collect

We only collect the data we absolutely need to provide and improve our service. This generally falls into two categories:

Data you give us directly: When you sign up, we collect your email address, name, and profile information. If you sign up for a paid plan, our payment processor (like Stripe) collects your billing details (we never store your full credit card number on our servers).

Data we collect automatically: When you interact with OneFlow, our systems automatically log information like your IP address, browser type, device details, and how you navigate the platform. This helps us debug issues, understand how the product is used, and stop malicious bots.

Content and Code: The prompts you write, the code the AI generates, and the assets you upload are stored on our servers so we can host and serve your applications.

2. How We Use Your Data

We use the information we collect to:

Provide, maintain, and improve the OneFlow platform.

Process your payments and manage your subscription.

Send you important account updates, security alerts, and support messages.

Analyze usage trends so we can figure out which features to build next.

Keep the platform secure by detecting and preventing fraud, spam, or abuse.

3. Who Do We Share Your Data With?

We are not data brokers. We never sell your personal information to third parties. However, we do share data with trusted third-party services that help us run our business:

Infrastructure providers: Companies that provide our cloud hosting and databases (like AWS, Vercel, or Supabase).

AI Providers: We send the prompts and code context to our AI partners (like OpenAI, Anthropic, or DeepMind) to generate the responses you ask for. Our agreements with these providers strictly prohibit them from using your private code to train their public models.

Payment processors: Secure services (like Stripe) that handle billing and subscriptions.

Legal requests: If we receive a valid, legally binding request from law enforcement or a court, we may be required to disclose certain information. We will always try to notify you first if legally permitted.

4. Cookies and Tracking

5. Data Security

6. Your Rights

Access and Export: You can request a copy of the personal data we hold about you.

Correction: You can update your account information at any time from your settings.

Deletion: You can delete your account and all associated projects. When you hit delete, we remove your data from our active servers immediately (though it may briefly remain in encrypted backups until they cycle out).