Privacy Policy

1. About AutoFlow

AutoFlow is a Chrome extension designed to automate and simplify bulk AI image and video generation workflows on Google Flow.

In this Privacy Policy, references to "AutoFlow", "we", "our" or "us" refer to the AutoFlow extension and the services used to operate it.

2. Information We Process

Account information

If you authenticate using Google, AutoFlow may receive basic profile information needed to identify your account, including:

• Your Google account email address
• Your display name
• Your profile image URL

Connection and device information

Certain technical information may be processed automatically for security, regional policy enforcement and abuse prevention. This may include:

• Your IP address
• Your approximate country derived from your IP address
• A hashed device identifier generated from browser and device characteristics

Device identification may use characteristics such as display information, canvas output, WebGL data and hardware-related browser information. Raw fingerprint components are not intended to be stored; the resulting identifier is hashed before server-side storage.

Usage information

AutoFlow may record operational and usage information needed to provide, protect and improve the service. Examples include:

• The number of image or video prompts used within a given period
• Your current subscription type, trial status and billing state
• Batch duration and success or failure statistics
• Error types and rate-limit events
• Features used within AutoFlow
• Subscription and upgrade interactions
• Onboarding and session events
• Generation configuration such as model, aspect ratio, quantity and quality settings
• Reference-image counts
• Extension version, browser locale and operating-system information
• Your Google account service tier where available to the extension

3. Abuse and Fraud Prevention

AutoFlow may use account information together with technical identifiers such as IP addresses, network ranges and hashed device identifiers to identify attempts to evade trials, free-plan limits, subscription restrictions or other service controls.

Accounts that intentionally bypass these restrictions may be limited, suspended or terminated.

4. Information Stored Only in Your Browser

AutoFlow uses Chrome's local storage capabilities for information required to operate the extension on your device. Depending on the features you use, this may include:

• Generation preferences such as model, quantity and aspect ratio
• Your prompt or batch queue
• Batch names and generation status
• Gallery history and media references
• Thumbnail references
• Your local reference-image library
• Google Flow media identifiers associated with reference content
• Interface preferences and onboarding state
• Your Google OAuth access token

5. Information We Do Not Use for Tracking or Advertising

AutoFlow does not intentionally:

• Store your prompt text on AutoFlow servers
• Store generated images or videos on AutoFlow servers
• Collect your general browsing history outside AutoFlow's required functionality
• Use advertising cookies to follow you across websites
• Sell or rent your personal information
• Share personal information with advertising networks for their independent use
• Use third-party behavioural advertising or tracking systems

6. Why We Use Information

Information processed by AutoFlow may be used to:

• Authenticate users
• Associate your extension usage with the correct account
• Determine which subscription or trial features are available
• Apply usage limits
• Process and maintain subscription status
• Identify abuse, fraud and attempts to bypass account restrictions
• Troubleshoot generation failures and technical problems
• Measure aggregate feature usage and improve AutoFlow
• Provide support when requested

7. Storage and Security

Server-side account, subscription and operational information may be stored using Supabase.

• Connections between AutoFlow and its backend services use HTTPS
• Google OAuth tokens are stored locally through Chrome storage
• OAuth tokens are used with Google's systems for authentication purposes
• Device identifiers are hashed before they are retained server-side
• Raw fingerprint components are not intended to be retained in the backend database

No internet-connected service can guarantee absolute security. AutoFlow nevertheless uses reasonable technical measures intended to protect the information required to operate the service.

8. Third-Party Services

AutoFlow relies on external providers to deliver certain parts of the service. These providers operate under their own terms and privacy policies.

• Google OAuth — account authentication
• Google Flow — image and video generation services used through the extension
• Supabase — backend database services
• Payment provider — subscription and payment processing
• Vercel — backend/API and web infrastructure
• api.country.is — IP-based country detection

AutoFlow only provides these services with information needed for the relevant operational purpose.

9. Google API Information

AutoFlow's use and transfer of information obtained through Google APIs is intended to comply with Google's API Services User Data Policy, including applicable Limited Use requirements.

AutoFlow may request basic Google identity scopes such as:

• userinfo.email — used to identify your account
• userinfo.profile — used to obtain your name and profile image

10. Limited Use of Google User Data

Google account information received by AutoFlow is used only for legitimate extension functionality.

• Permitted use: Google account information may be used for authentication, subscription management and usage-limit enforcement.
• Service providers: Information may be provided to infrastructure, database or payment providers only where required to operate AutoFlow, or where disclosure is legally required.
• No advertising: Google user information is not used for personalised, behavioural or retargeted advertising.
• Restricted human access: Human access to Google user data is limited to circumstances such as user-authorised support, security investigations, legal obligations, or aggregated and anonymised operational analysis.

11. Data Retention

• Account and operational information may be retained while an account remains active
• Locally stored information may be removed when you sign out, reset the extension or uninstall it
• Identifiers associated with suspended or abusive accounts may be retained where reasonably necessary to prevent repeated misuse of the service
• Users may request deletion of eligible server-side account information through AutoFlow's official support channel once available

12. Your Privacy Rights

Depending on where you live, applicable privacy law may give you rights concerning personal information AutoFlow holds about you.

These may include the right to:

• Request access to your personal information
• Correct inaccurate information
• Request deletion of eligible information
• Request a copy or export of information associated with your account
• Stop using the service and uninstall the extension

Certain security or fraud-prevention records may need to be retained where permitted or required by applicable law.

13. Children's Privacy

AutoFlow is not designed for children under the age of 13, and we do not knowingly seek to collect personal information from children under 13.

14. Changes to This Privacy Policy

This Privacy Policy may be revised as AutoFlow changes or as legal and technical requirements evolve. The "Last updated" date at the top of this page will be changed whenever a revised version is published.

Material changes may also be communicated through the extension or an official AutoFlow service page.

15. Contact

Privacy and support contact information will be provided through AutoFlow's official Chrome Web Store listing and other official AutoFlow channels when available.