Privacy Policy

1. Who is responsible

FLOWREAD Inc. (in formation) (“FLOWREAD”, “we”) is responsible for your personal data when you use flowread.app and scan.flowread.app. Contact: support@flowread.app.

2. What we collect

• Account details: email address, and anything you choose to give us such as a Telegram username or OKX UID.
• Payment details: plan, amount, the wallet address you paid from, transaction hashes and dates. We never receive card or bank details.
• Reward wallet: the Solana wallet address you connect and the signed message proving you own it. We never ask for your seed phrase or private key.
• OKX connection (12-month plan, optional): the OKX API key you connect, stored encrypted, and a record of the orders you send through FLOWREAD (coin, side, size, time and OKX order ID). We never accept keys with withdraw permission.
• Device and usage data: IP address, device and browser type, a device identifier, sign-in times and pages used — to run the 2-device limit, detect account sharing and fraud, and keep the Service secure.
• Identity verification: if we ask you to verify your identity, our verification provider collects your documents and selfie. We receive the result (verified or not) and basic details such as name, date of birth and country.
• Site visits: when anyone opens a flowread.app page we count the page, the country and city (from the network), the site you came from, campaign tags in the link, phone or desktop, and browser language. We do not store your IP address or set a cookie for this; a one-day code lets us count unique visitors and changes every day. Your browser also remembers for 30 days where you first came from (for example an ad campaign), so we can see which campaigns lead to sign-ups and payments.
• Heatmaps and session replays: on public pages (home, track record, sign-up, updates and legal pages) we use Microsoft Clarity to see where people click and scroll and to replay visits, so we can fix confusing parts of the site. Typed text is masked. Clarity is never used on your account, admin or device-approval pages. Microsoft processes this data under its own privacy statement (privacy.microsoft.com).
• Settings: your watchlist, pins, alert and calculator preferences, so they follow you between devices.
• Messages you send to support.

3. Why we use it

• To provide the Service and your plan (contract).
• To take payments, process refunds and pay rewards (contract).
• To prevent account sharing, fraud, reward abuse and sanctions breaches (legitimate interests and legal obligations).
• To send service emails such as payment confirmations and important changes (contract). Marketing emails only with your consent, and you can unsubscribe at any time.
• To keep records required by law (legal obligation).

4. Who we share it with

We do not sell your data. We share it only with service providers who help us run FLOWREAD, under contracts that protect it:

• Payment processor (crypto payments) and, if you pay by card, its card partner — the card partner checks your ID directly; we never see your card or ID
• Site analytics (Microsoft Clarity, public pages only)
• Identity verification provider
• Hosting and infrastructure (for example Netlify)
• Email delivery provider

We may also share data where the law requires it, or to protect our rights and members' safety.

5. Blockchain data is public

Payments and reward transfers happen on public blockchains. Wallet addresses, amounts and transaction details are visible to anyone and cannot be changed or deleted by us.

6. International transfers

Our providers may process data in other countries. Where required, we use appropriate safeguards for these transfers.

7. How long we keep it

• Account and settings: while your account is active, then up to 12 months.
• Payment and refund records: as long as tax and accounting laws require (usually 5–7 years).
• Identity verification results: as long as anti-money-laundering rules require.
• OKX API key: until you disconnect it or your account closes, then deleted straight away. Order records: up to 12 months.
• Site visit counts: up to 12 months.
• Device and sign-in logs: up to 90 days, longer if needed for an investigation.

8. Your rights

Depending on where you live, you can ask to access, correct, delete or receive a copy of your data, object to or restrict some uses, and withdraw consent. Email support@flowread.app. We may need to keep some data where the law requires it. You can also complain to your local data protection authority.

9. Cookies and local storage

We use one essential sign-in cookie and your browser's local storage to keep you signed in and remember your settings. We do not use advertising or cross-site tracking cookies.

10. Security

We use encryption in transit, signed session cookies, restricted admin access, optional two-step sign-in for members, encrypted storage of connected API keys and multi-signature controls for company funds. We will never ask for your API key, password or wallet seed phrase by email, Telegram or direct message. No system is completely secure, so please keep your devices and wallet safe.

11. Children

The Service is for adults (18+). We do not knowingly collect data from children.

12. Changes

We will post updates here with a new date and tell members about important changes.