Privacy Policy

1. Data Controller

Controller: Flowmarket
Address: 11 chemin du bray, 74940 Annecy
Email : contact@flowmarket.pro

2. Data We Process

Depending on your use of FlowMarket, we may process the following categories of data:

2.1 Account and Profile Data

Name or username
Email address
Password stored as a hash, never in plain text
Photo, banner, bio, professional links, and profile information you choose to publish

2.2 Transaction and Marketplace Data

Purchases, sales, orders, and service requests
Messages exchanged between users
Reviews, ratings, and workflow interactions
Stripe identifiers required for payments or payouts

2.3 Technical and Security Data

Technical cookies and session data
Account last-activity date, used to apply the inactive-account retention period
Minimum information required for authentication, abuse prevention, and platform security
Technical logs and application errors when necessary

2.4 Payment Data

Card details are not stored by FlowMarket. They are processed directly by Stripe. We retain only the references needed to track payments, refunds, payouts, or disputes.

3. Purposes and Legal Bases

Purpose	Legal basis
Creating and managing the user account	Performance of contract
Connecting buyers, sellers, and service providers	Performance of contract
Managing orders, payments, and payouts	Performance of contract
Support and password reset	Performance of contract
Service security, fraud prevention, and defence of our rights	Legitimate interest
Compliance with accounting, tax, and legal obligations	Legal obligation
Analytics cookies if we activate an audience measurement tool	Consent

4. Recipients and Sub-processors

Your data may be shared, to the extent necessary, with the following categories of recipients:

Stripe for payment processing, refunds, seller accounts, and payouts.
Vercel for technical hosting and application runtime.
Other platform users where necessary to fulfil an order, service request, or message exchange.
Competent authorities where required by a legal obligation.

5. Transfers Outside the European Union

Some of our service providers, including Stripe and Vercel, may process certain data outside the European Union, in particular in the United States. Such transfers are governed by the contractual or regulatory mechanisms applicable to those providers.

6. Data Security

We implement reasonable measures to protect data processed by the platform. These include:

Encryption of communications via HTTPS / TLS
Password hashing
Application access control and permission checks
Application-level encryption of certain sensitive content, such as workflow files stored by the platform
Technical logging of errors and incidents
Security updates and patches when necessary

We do not claim that all platform data is uniformly encrypted at rest. The level of protection depends on the nature of the data and the technical service concerned.

7. Retention, Deletion, and Anonymisation

We retain data for as long as necessary to operate the service, then in accordance with security requirements, legal obligations, and the defence of our rights. The durations below correspond to the behaviour currently implemented in the application.

Data or processing	Retention period / applied behaviour
Active account and profile	Retained while the account remains active
Inactive account	Anonymisation when the account has had no activity for 2 years, except where legal obligations, transactions, or services are still active
Session cookies	Up to 7 days depending on session activity
Expired sessions stored in the database	Automatically deleted during maintenance
Password reset tokens	Valid for 1 hour, then automatically deleted after expiry; already-used tokens are purged within 24 h
Cookie consent choice	Up to 13 months
Account deletion request	Immediate deactivation of access, then final anonymisation within 90 days maximum after the request is validated
Orders, payments, accounting obligations, or data useful for the defence of our rights	Retained for as long as necessary to comply with our legal, contractual, or evidentiary obligations; this data may persist in our databases or with our providers even after account anonymisation

Account Deletion

You can request account deletion from your profile settings or by email. When the request is accepted, access to the account is immediately cut off and the seller's workflows are removed from publication. A daily maintenance job then finalises anonymisation within 90 days maximum.

The request may be refused or deferred as long as there is a positive seller balance, pending orders, active services, active installations, or pending payouts.

Accounts with no activity for 2 years are also anonymised by daily maintenance, except where retention remains necessary for a legal obligation, transaction, active service, or defence of our rights.

When anonymisation is triggered, profile data is replaced with anonymous values and certain content data is cleaned where compatible with platform integrity – for example, sent messages, some service requests, and some solution requests.

8. Your Rights

In accordance with the GDPR, you may exercise your rights of access, rectification, erasure, objection, restriction and, where applicable, portability. You may also withdraw your consent for optional cookies at any time.

To exercise your rights, write to contact@flowmarket.pro. We may ask for reasonable proof of identity to verify your identity.

9. Complaint to the CNIL

If you believe that the processing of your personal data does not comply with applicable regulations, you may lodge a complaint with the CNIL:

Website: www.cnil.fr
Address: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07

10. Cookies

For details on the cookies and local storage used by the site, please consult our Cookie Policy.

11. Policy Updates

This policy may be updated to reflect changes to our service, providers, or legal requirements. The date of the last update is shown at the top of this page.

12. Contact

Email : contact@flowmarket.pro
Address: Flowmarket - 11 chemin du bray, 74940 Annecy