{"platform":"FlowManual","slug":"flowmanual","category":"Workflow & Automation","website":"https://flowmanual.com","risk_rating":"low","verification":"partially_verified","verification_detail":{"tier":"partially_verified","partial_reason_code":"failed_or_contested","partial_reason_label":"Held for review","blocked_core_documents":[]},"rating":{"value":"low","unknown_reason_code":"none","unknown_reason_label":"Rated"},"corpus_status":"corpus_partial","canonical":"https://airinetwork.com/platform/flowmanual","machine_url":"https://airinetwork.com/api/machine/platform/flowmanual","last_reviewed":"2026-08-07","findings_count":23,"findings":[{"id":"training-use-0102bc5aa16904ce91a7","permalink":"https://airinetwork.com/platform/flowmanual/finding/training-use-0102bc5aa16904ce91a7","surface":"training_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" You can choose to let FlowManual use the documents you upload and the corrections you make to improve extraction quality for all customers. This is off by default and applies only if you turn it on from your account settings. You can turn it off at any time from the same setting, which immediately stops any future use of your data for this purpose; it does not undo improvements already made. Data used this way is never sold and never shared with third parties.","caution":null,"provenance":{"source_url":"https://flowmanual.com/privacy","snapshot_sha256":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb","wayback_url":null,"deep_link":"https://flowmanual.com/privacy#:~:text=%20You%20can%20choose,shared%20with%20third%20parties.","structural_citation":"Privacy Policy › “Service improvement (optional)”","citation_basis":"heading_path","char_start":2651,"char_end":3116,"retrieved_at":"2026-07-20T00:22:49.891278+00:00"}},{"id":"training-use-1a0ae32eacc0ef977e9c","permalink":"https://airinetwork.com/platform/flowmanual/finding/training-use-1a0ae32eacc0ef977e9c","surface":"training_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" When you run document analysis, extracted plain text from your documents is sent to Anthropic’s API. Anthropic operates under a zero-data-retention policy: prompts and responses are not stored and are not used to train models. Raw document files are never transmitted. See Anthropic’s Privacy Policy .","caution":null,"provenance":{"source_url":"https://flowmanual.com/privacy","snapshot_sha256":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb","wayback_url":null,"deep_link":"https://flowmanual.com/privacy#:~:text=%20When%20you%20run,Anthropic%E2%80%99s%20Privacy%20Policy%20.","structural_citation":"Privacy Policy › “Anthropic (Document Analysis)”","citation_basis":"heading_path","char_start":3569,"char_end":3871,"retrieved_at":"2026-07-20T00:22:49.891278+00:00"}},{"id":"training-use-559bb047b4e4a82c74a9","permalink":"https://airinetwork.com/platform/flowmanual/finding/training-use-559bb047b4e4a82c74a9","surface":"training_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Web search inside project chat is off by default and only available when we enable it on the hosted service. When you use it, the search query (which can include text from your conversation) is sent to Tavily to retrieve results. Queries are not used to train models. Web search stays off unless we enable it for the hosted service, and it is always off when redaction is active. See Tavily’s Privacy Policy .","caution":null,"provenance":{"source_url":"https://flowmanual.com/privacy","snapshot_sha256":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb","wayback_url":null,"deep_link":"https://flowmanual.com/privacy#:~:text=%20Web%20search%20inside,Tavily%E2%80%99s%20Privacy%20Policy%20.","structural_citation":"Privacy Policy › “Tavily (Chat Web Search, Optional)”","citation_basis":"heading_path","char_start":3919,"char_end":4329,"retrieved_at":"2026-07-20T00:22:49.891278+00:00"}},{"id":"privacy-data-use-8c545cab91a5c9cd373f","permalink":"https://airinetwork.com/platform/flowmanual/finding/privacy-data-use-8c545cab91a5c9cd373f","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" FlowManual (“FlowManual,” “we,” “us,” or “our”) provides a document analysis platform for construction contractors. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.\n By creating an account or using FlowManual, you agree to this Privacy Policy. If you are using FlowManual on behalf of an employer or other organization, you represent that you have authority to bind that organization to this policy.","caution":null,"provenance":{"source_url":"https://flowmanual.com/privacy","snapshot_sha256":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb","wayback_url":null,"deep_link":"https://flowmanual.com/privacy#:~:text=%20FlowManual%20(%E2%80%9CFlowManual%2C%E2%80%9D%20%E2%80%9Cwe%2C%E2%80%9D,organization%20to%20this%20policy.","structural_citation":"Privacy Policy › “Effective date: July 18, 2026”","citation_basis":"heading_path","char_start":106,"char_end":560,"retrieved_at":"2026-07-20T00:22:49.891278+00:00"}},{"id":"privacy-data-use-1e260e3e6cbd46913718","permalink":"https://airinetwork.com/platform/flowmanual/finding/privacy-data-use-1e260e3e6cbd46913718","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" When you register, we collect your name, email address, and a hashed (one-way encrypted) password. We never store your password in plaintext.","caution":null,"provenance":{"source_url":"https://flowmanual.com/privacy","snapshot_sha256":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb","wayback_url":null,"deep_link":"https://flowmanual.com/privacy#:~:text=%20When%20you%20register%2C,your%20password%20in%20plaintext.","structural_citation":"Privacy Policy › “Account Information”","citation_basis":"heading_path","char_start":621,"char_end":763,"retrieved_at":"2026-07-20T00:22:49.891278+00:00"}},{"id":"privacy-data-use-c18a64b805d9d3b24e75","permalink":"https://airinetwork.com/platform/flowmanual/finding/privacy-data-use-c18a64b805d9d3b24e75","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" FlowManual processes PDF documents you upload. Files are stored on DigitalOcean, on an encrypted volume, and are encrypted in transit (HTTPS). File bytes are also encrypted at the application layer with AES-256-GCM before they are written to disk. FlowManual staff do not access your document contents.","caution":null,"provenance":{"source_url":"https://flowmanual.com/privacy","snapshot_sha256":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb","wayback_url":null,"deep_link":"https://flowmanual.com/privacy#:~:text=%20FlowManual%20processes%20PDF,access%20your%20document%20contents.","structural_citation":"Privacy Policy › “Uploaded Documents”","citation_basis":"heading_path","char_start":792,"char_end":1095,"retrieved_at":"2026-07-20T00:22:49.891278+00:00"}},{"id":"privacy-data-use-a8c2031db1b13eb61b2d","permalink":"https://airinetwork.com/platform/flowmanual/finding/privacy-data-use-a8c2031db1b13eb61b2d","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" FlowManual extracts plain text from your uploaded documents. This text is stored encrypted in our database and is used to power document analysis features. Raw document files are never transmitted to the analysis provider. Only the extracted plain text is sent.","caution":null,"provenance":{"source_url":"https://flowmanual.com/privacy","snapshot_sha256":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb","wayback_url":null,"deep_link":"https://flowmanual.com/privacy#:~:text=%20FlowManual%20extracts%20plain,plain%20text%20is%20sent.","structural_citation":"Privacy Policy › “Extracted Text”","citation_basis":"heading_path","char_start":1120,"char_end":1382,"retrieved_at":"2026-07-20T00:22:49.891278+00:00"}},{"id":"privacy-data-use-3ef36303573fd9fd3ed5","permalink":"https://airinetwork.com/platform/flowmanual/finding/privacy-data-use-3ef36303573fd9fd3ed5","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Annotations, comparison discrepancies, scope gaps, cost estimates, RFI entries, equipment schedules, vendor price history, and GC pattern observations you generate are stored in our database, encrypted at the field level.","caution":null,"provenance":{"source_url":"https://flowmanual.com/privacy","snapshot_sha256":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb","wayback_url":null,"deep_link":"https://flowmanual.com/privacy#:~:text=%20Annotations%2C%20comparison%20discrepancies%2C,at%20the%20field%20level.","structural_citation":"Privacy Policy › “Analysis Results”","citation_basis":"heading_path","char_start":1409,"char_end":1631,"retrieved_at":"2026-07-20T00:22:49.891278+00:00"}},{"id":"privacy-data-use-da7844af0b1827bf9e83","permalink":"https://airinetwork.com/platform/flowmanual/finding/privacy-data-use-da7844af0b1827bf9e83","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" To perform automated document analysis using the Anthropic API (extracted text only)\n To store and display your annotations, comparisons, and analysis results\n To send service-related emails (account confirmation, material changes to this policy)","caution":null,"provenance":{"source_url":"https://flowmanual.com/privacy","snapshot_sha256":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb","wayback_url":null,"deep_link":"https://flowmanual.com/privacy#:~:text=%20To%20perform%20automated,changes%20to%20this%20policy)","structural_citation":"Privacy Policy › “To authenticate your account and maintain session security”","citation_basis":"heading_path","char_start":2167,"char_end":2414,"retrieved_at":"2026-07-20T00:22:49.891278+00:00"}},{"id":"privacy-data-use-d1c0616edec417e9faec","permalink":"https://airinetwork.com/platform/flowmanual/finding/privacy-data-use-d1c0616edec417e9faec","surface":"privacy_data_use","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" We do not sell your data. We do not use your document content for advertising. We do not share your data with third parties except as described in Section 3.","caution":null,"provenance":{"source_url":"https://flowmanual.com/privacy","snapshot_sha256":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb","wayback_url":null,"deep_link":"https://flowmanual.com/privacy#:~:text=%20We%20do%20not,described%20in%20Section%203.","structural_citation":"Privacy Policy › “To respond to your support requests”","citation_basis":"heading_path","char_start":2452,"char_end":2610,"retrieved_at":"2026-07-20T00:22:49.891278+00:00"}},{"id":"privacy-data-use-e5aa15ff2afa13acbffc","permalink":"https://airinetwork.com/platform/flowmanual/finding/privacy-data-use-e5aa15ff2afa13acbffc","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" FlowManual uses strictly necessary session cookies to keep you authenticated. We do not use tracking, advertising, or analytics cookies. No cookie consent banner is required because we do not place any non-essential cookies.","caution":null,"provenance":{"source_url":"https://flowmanual.com/privacy","snapshot_sha256":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb","wayback_url":null,"deep_link":"https://flowmanual.com/privacy#:~:text=%20FlowManual%20uses%20strictly,place%20any%20non-essential%20cookies.","structural_citation":"§ 4 (Cookies)","citation_basis":"section_number","char_start":6556,"char_end":6781,"retrieved_at":"2026-07-20T00:22:49.891278+00:00"}},{"id":"privacy-data-use-0861ebf8bcda7aec37d8","permalink":"https://airinetwork.com/platform/flowmanual/finding/privacy-data-use-0861ebf8bcda7aec37d8","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" We implement industry-standard safeguards including AES-256-GCM encryption for sensitive data, HTTPS-only transport, hashed passwords (scrypt, memory-hard), and no plaintext storage of credentials. No security measure is perfect; please notify us immediately if you suspect unauthorized access to your account.\n For a technical overview of how we protect your data, see our Security page .","caution":null,"provenance":{"source_url":"https://flowmanual.com/privacy","snapshot_sha256":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb","wayback_url":null,"deep_link":"https://flowmanual.com/privacy#:~:text=%20We%20implement%20industry-standard,our%20Security%20page%20.","structural_citation":"§ 6 (Security)","citation_basis":"section_number","char_start":6948,"char_end":7338,"retrieved_at":"2026-07-20T00:22:49.891278+00:00"}},{"id":"privacy-data-use-57dd6c5558d7092c5f92","permalink":"https://airinetwork.com/platform/flowmanual/finding/privacy-data-use-57dd6c5558d7092c5f92","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" You have the right to:\n Access: Request a copy of the data we hold about you.\n Correction: Request correction of inaccurate data.\n Deletion: Request deletion of your account and associated data. We will complete the deletion within 30 days.\n Portability: Request an export of your data in a machine-readable format.\n To exercise any of these rights, email us at legal@flowmanual.com .","caution":null,"provenance":{"source_url":"https://flowmanual.com/privacy","snapshot_sha256":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb","wayback_url":null,"deep_link":"https://flowmanual.com/privacy#:~:text=%20You%20have%20the,us%20at%20legal%40flowmanual.com%20.","structural_citation":"§ 7 (Your Rights)","citation_basis":"section_number","char_start":7366,"char_end":7751,"retrieved_at":"2026-07-20T00:22:49.891278+00:00"}},{"id":"privacy-data-use-cbf2ad2029c9349bff07","permalink":"https://airinetwork.com/platform/flowmanual/finding/privacy-data-use-cbf2ad2029c9349bff07","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" FlowManual is intended for professional use by adults. We do not knowingly collect personal data from anyone under 18. If we learn we have collected data from a minor, we will delete it promptly.","caution":null,"provenance":{"source_url":"https://flowmanual.com/privacy","snapshot_sha256":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb","wayback_url":null,"deep_link":"https://flowmanual.com/privacy#:~:text=%20FlowManual%20is%20intended,will%20delete%20it%20promptly.","structural_citation":"§ 8 (Children’s Privacy)","citation_basis":"section_number","char_start":7786,"char_end":7982,"retrieved_at":"2026-07-20T00:22:49.891278+00:00"}},{"id":"privacy-data-use-5a6d19928e8468503d75","permalink":"https://airinetwork.com/platform/flowmanual/finding/privacy-data-use-5a6d19928e8468503d75","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" We may update this Privacy Policy from time to time. For material changes, we will notify you by email at least 30 days before the new policy takes effect. Continued use of FlowManual after the effective date constitutes acceptance of the updated policy.","caution":null,"provenance":{"source_url":"https://flowmanual.com/privacy","snapshot_sha256":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb","wayback_url":null,"deep_link":"https://flowmanual.com/privacy#:~:text=%20We%20may%20update,of%20the%20updated%20policy.","structural_citation":"§ 9 (Changes to This Policy)","citation_basis":"section_number","char_start":8021,"char_end":8276,"retrieved_at":"2026-07-20T00:22:49.891278+00:00"}},{"id":"data-retention-290c8e4f97d7916facf4","permalink":"https://airinetwork.com/platform/flowmanual/finding/data-retention-290c8e4f97d7916facf4","surface":"data_retention","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Your data is retained until you delete it or request account deletion. Deleted data is removed within 30 days.","caution":null,"provenance":{"source_url":"https://flowmanual.com/privacy","snapshot_sha256":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb","wayback_url":null,"deep_link":"https://flowmanual.com/privacy#:~:text=%20Your%20data%20is,removed%20within%2030%20days.","structural_citation":"§ 5 (Data Retention)","citation_basis":"section_number","char_start":6812,"char_end":6923,"retrieved_at":"2026-07-20T00:22:49.891278+00:00"}},{"id":"data-retention-c9ab82f3c80267918c64","permalink":"https://airinetwork.com/platform/flowmanual/finding/data-retention-c9ab82f3c80267918c64","surface":"data_retention","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" We maintain an audit log of document analysis calls that includes: timestamp, user ID, document ID, operation type, bytes transmitted, and a keyed HMAC-SHA-256 hash of the prompt (when an audit key is configured). Full prompt text is never stored. This log is visible only to you at /admin/security and is used to maintain an audit trail of analysis usage.","caution":null,"provenance":{"source_url":"https://flowmanual.com/privacy","snapshot_sha256":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb","wayback_url":null,"deep_link":"https://flowmanual.com/privacy#:~:text=%20We%20maintain%20an,trail%20of%20analysis%20usage.","structural_citation":"Privacy Policy › “Usage Metadata”","citation_basis":"heading_path","char_start":1656,"char_end":2013,"retrieved_at":"2026-07-20T00:22:49.891278+00:00"}},{"id":"subprocessors-data-sharing-c4500659ce47fdd5056f","permalink":"https://airinetwork.com/platform/flowmanual/finding/subprocessors-data-sharing-c4500659ce47fdd5056f","surface":"subprocessors_data_sharing","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" We share data with the following processors only as necessary to provide the service:","caution":null,"provenance":{"source_url":"https://flowmanual.com/privacy","snapshot_sha256":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb","wayback_url":null,"deep_link":"https://flowmanual.com/privacy#:~:text=%20We%20share%20data,to%20provide%20the%20service%3A","structural_citation":"§ 3 (Third-Party Service Providers)","citation_basis":"section_number","char_start":3162,"char_end":3248,"retrieved_at":"2026-07-20T00:22:49.891278+00:00"}},{"id":"subprocessors-data-sharing-5356f57d48709fb17915","permalink":"https://airinetwork.com/platform/flowmanual/finding/subprocessors-data-sharing-5356f57d48709fb17915","surface":"subprocessors_data_sharing","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" For accounts on flowmanual.com, the application, the database, and uploaded files are hosted on DigitalOcean. Files are kept on an encrypted volume. DigitalOcean processes this data on our behalf under a data processing agreement.","caution":null,"provenance":{"source_url":"https://flowmanual.com/privacy","snapshot_sha256":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb","wayback_url":null,"deep_link":"https://flowmanual.com/privacy#:~:text=%20For%20accounts%20on,a%20data%20processing%20agreement.","structural_citation":"Privacy Policy › “DigitalOcean (Hosting and Storage)”","citation_basis":"heading_path","char_start":3295,"char_end":3526,"retrieved_at":"2026-07-20T00:22:49.891278+00:00"}},{"id":"subprocessors-data-sharing-41528e8d0565de7f3a6a","permalink":"https://airinetwork.com/platform/flowmanual/finding/subprocessors-data-sharing-41528e8d0565de7f3a6a","surface":"subprocessors_data_sharing","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" We use Resend to send service-related emails such as account confirmation, sign-in verification codes, and material changes to this policy. Resend processes the recipient email address and message contents on our behalf under a data processing agreement.","caution":null,"provenance":{"source_url":"https://flowmanual.com/privacy","snapshot_sha256":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb","wayback_url":null,"deep_link":"https://flowmanual.com/privacy#:~:text=%20We%20use%20Resend,a%20data%20processing%20agreement.","structural_citation":"Privacy Policy › “Resend (Email)”","citation_basis":"heading_path","char_start":4357,"char_end":4612,"retrieved_at":"2026-07-20T00:22:49.891278+00:00"}},{"id":"subprocessors-data-sharing-798ada13bcb34ec3c92d","permalink":"https://airinetwork.com/platform/flowmanual/finding/subprocessors-data-sharing-798ada13bcb34ec3c92d","surface":"subprocessors_data_sharing","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" If you sign in with Google, Google authenticates you and shares your name and email address with us. This is governed by Google’s Privacy Policy .","caution":null,"provenance":{"source_url":"https://flowmanual.com/privacy","snapshot_sha256":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb","wayback_url":null,"deep_link":"https://flowmanual.com/privacy#:~:text=%20If%20you%20sign,Google%E2%80%99s%20Privacy%20Policy%20.","structural_citation":"Privacy Policy › “Google (Sign-In)”","citation_basis":"heading_path","char_start":4642,"char_end":4789,"retrieved_at":"2026-07-20T00:22:49.891278+00:00"}},{"id":"subprocessors-data-sharing-9297622211b581dee5ad","permalink":"https://airinetwork.com/platform/flowmanual/finding/subprocessors-data-sharing-9297622211b581dee5ad","surface":"subprocessors_data_sharing","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" You can connect accounts you already hold with third-party services (Microsoft OneDrive and SharePoint, Google Drive, Procore, Dropbox, Egnyte, Docusign, and Autodesk Construction Cloud) to import PDF documents into your projects. Connectors are off by default, and connections go through each provider’s own sign-in and consent screen, so we never see or store your password for that service. The provider issues access tokens, which we store encrypted with AES-256-GCM and use only to list the folders, files, or completed agreements you browse and to download the specific files you choose to import. Imported files are then stored and protected exactly like files you upload directly. We request read-only access wherever the provider supports it, we never change or delete anything in your connected account, and nothing is scanned in the background: browsing, importing, and manual re-scans run only when you start them. You can disconnect a provider at any time, which deletes the stored tokens, and you can also revoke FlowManual’s access from the provider’s own security settings. Our use of data received from Google APIs adheres to the Google API Services User Data Policy , including the Limited Use requirements.","caution":null,"provenance":{"source_url":"https://flowmanual.com/privacy","snapshot_sha256":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb","wayback_url":null,"deep_link":"https://flowmanual.com/privacy#:~:text=%20You%20can%20connect,the%20Limited%20Use%20requirements.","structural_citation":"Privacy Policy › “Import Connectors (Optional)”","citation_basis":"heading_path","char_start":4831,"char_end":6057,"retrieved_at":"2026-07-20T00:22:49.891278+00:00"}},{"id":"subprocessors-data-sharing-4e217fef297f9ba8e1a9","permalink":"https://airinetwork.com/platform/flowmanual/finding/subprocessors-data-sharing-4e217fef297f9ba8e1a9","surface":"subprocessors_data_sharing","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" We have no marketing or advertising vendors. The hosted service at flowmanual.com uses one privacy-preserving analytics provider (PostHog) to understand product usage: which features are used, how far new accounts get in setup, and where errors happen. These are server-side event counts tied to an account identifier. They never include document content, filenames, or client and vendor names, and we do not use analytics cookies or session recording (see Cookies below).","caution":null,"provenance":{"source_url":"https://flowmanual.com/privacy","snapshot_sha256":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb","wayback_url":null,"deep_link":"https://flowmanual.com/privacy#:~:text=%20We%20have%20no,recording%20(see%20Cookies%20below).","structural_citation":"Privacy Policy › “Import Connectors (Optional)”","citation_basis":"heading_path","char_start":6059,"char_end":6532,"retrieved_at":"2026-07-20T00:22:49.891278+00:00"}}],"documents":[{"doc_type":"privacy","pdf_page_count":null,"extraction_method":null,"page_level_citations":false,"last_captured":"2026-08-07","last_verified_scan":"2026-08-07","verified_scan_count":3},{"doc_type":"terms","pdf_page_count":null,"extraction_method":null,"page_level_citations":false,"last_captured":"2026-07-28","last_verified_scan":null,"verified_scan_count":0}],"clause_intelligence":{"clauses_count":59,"risk_patterns_count":17,"stance_events_count":17,"patterns_by_family":{"data_retention":3,"privacy_sharing":6,"training_use":8},"risk_summary":{"low":11,"high":3,"medium":3},"evidence":[{"pattern_key":"deletion_or_bounded_retention","pattern_family":"data_retention","risk_rating":"low","confidence":"high","stance_key":"retention","stance_value":"deletion_or_time_bound","evidence":"Your data is retained until you delete it or request account deletion. Deleted data is removed within 30 days.","reason":"The clause provides a deletion or time-bounded retention path.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"data_retention","quote":"Your data is retained until you delete it or request account deletion. Deleted data is removed within 30 days.","source_url":"https://flowmanual.com/privacy","deep_link":"https://flowmanual.com/privacy#:~:text=%20Your%20data%20is,removed%20within%2030%20days.","structural_citation":"§ 5 (Data Retention)","citation_basis":"section_number","char_start":6812,"char_end":6923}},{"pattern_key":"deletion_or_bounded_retention","pattern_family":"data_retention","risk_rating":"low","confidence":"medium","stance_key":"retention","stance_value":"deletion_or_time_bound","evidence":"Your data is retained until you delete it or request account deletion. Deleted data is removed within 30 days.","reason":"The clause provides a deletion or time-bounded retention path.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"data_retention","quote":"Your data is retained until you delete it or request account deletion. Deleted data is removed within 30 days.","source_url":"https://flowmanual.com/privacy","deep_link":"https://flowmanual.com/privacy#:~:text=%20Your%20data%20is,removed%20within%2030%20days.","structural_citation":"§ 5 (Data Retention)","citation_basis":"section_number","char_start":9054,"char_end":9165}},{"pattern_key":"deletion_or_bounded_retention","pattern_family":"data_retention","risk_rating":"low","confidence":"medium","stance_key":"retention","stance_value":"deletion_or_time_bound","evidence":"Your data is retained until you delete it or request account deletion. Deleted data is removed within 30 days.","reason":"The clause provides a deletion or time-bounded retention path.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"data_retention","quote":"Your data is retained until you delete it or request account deletion. Deleted data is removed within 30 days.","source_url":"https://flowmanual.com/privacy","deep_link":"https://flowmanual.com/privacy#:~:text=%20Your%20data%20is,removed%20within%2030%20days.","structural_citation":"§ 5 (Data Retention)","citation_basis":"section_number","char_start":9504,"char_end":9615}},{"pattern_key":"personal_data_sale","pattern_family":"privacy_sharing","risk_rating":"high","confidence":"high","stance_key":"data_sharing","stance_value":"sale_or_sell","evidence":"We do not sell your data. We do not use your document content for advertising. We do not share your data with third parties except as described in Section 3.","reason":"The clause permits sale of personal data or information.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"privacy_data_use","quote":"We do not sell your data. We do not use your document content for advertising. We do not share your data with third parties except as described in Section 3.","source_url":"https://flowmanual.com/privacy","deep_link":"https://flowmanual.com/privacy#:~:text=%20We%20do%20not,described%20in%20Section%203.","structural_citation":"Privacy Policy › “To respond to your support requests”","citation_basis":"heading_path","char_start":2452,"char_end":2610}},{"pattern_key":"personal_data_sale","pattern_family":"privacy_sharing","risk_rating":"high","confidence":"medium","stance_key":"data_sharing","stance_value":"sale_or_sell","evidence":"We do not sell your data. We do not use your document content for advertising. We do not share your data with third parties except as described in Section 3.","reason":"The clause permits sale of personal data or information.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"subprocessors_data_sharing","quote":"We do not sell your data. We do not use your document content for advertising. We do not share your data with third parties except as described in Section 3.","source_url":"https://flowmanual.com/privacy","deep_link":"https://flowmanual.com/privacy#:~:text=%20We%20do%20not,described%20in%20Section%203.","structural_citation":"Privacy Policy › “To respond to your support requests”","citation_basis":"heading_path","char_start":2689,"char_end":2847}},{"pattern_key":"personal_data_sale","pattern_family":"privacy_sharing","risk_rating":"high","confidence":"medium","stance_key":"data_sharing","stance_value":"sale_or_sell","evidence":"We do not sell your data. We do not use your document content for advertising. We do not share your data with third parties except as described in Section 3.","reason":"The clause permits sale of personal data or information.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"subprocessors_data_sharing","quote":"We do not sell your data. We do not use your document content for advertising. We do not share your data with third parties except as described in Section 3.","source_url":"https://flowmanual.com/privacy","deep_link":"https://flowmanual.com/privacy#:~:text=%20We%20do%20not,described%20in%20Section%203.","structural_citation":"Privacy Policy › “To respond to your support requests”","citation_basis":"heading_path","char_start":2689,"char_end":2847}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"high","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"We do not sell your data. We do not use your document content for advertising. We do not share your data with third parties except as described in Section 3.","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"privacy_data_use","quote":"We do not sell your data. We do not use your document content for advertising. We do not share your data with third parties except as described in Section 3.","source_url":"https://flowmanual.com/privacy","deep_link":"https://flowmanual.com/privacy#:~:text=%20We%20do%20not,described%20in%20Section%203.","structural_citation":"Privacy Policy › “To respond to your support requests”","citation_basis":"heading_path","char_start":2452,"char_end":2610}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"medium","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"We do not sell your data. We do not use your document content for advertising. We do not share your data with third parties except as described in Section 3.","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"subprocessors_data_sharing","quote":"We do not sell your data. We do not use your document content for advertising. We do not share your data with third parties except as described in Section 3.","source_url":"https://flowmanual.com/privacy","deep_link":"https://flowmanual.com/privacy#:~:text=%20We%20do%20not,described%20in%20Section%203.","structural_citation":"Privacy Policy › “To respond to your support requests”","citation_basis":"heading_path","char_start":2689,"char_end":2847}},{"pattern_key":"third_party_sharing","pattern_family":"privacy_sharing","risk_rating":"medium","confidence":"medium","stance_key":"data_sharing","stance_value":"third_party_or_vendor_sharing","evidence":"We do not sell your data. We do not use your document content for advertising. We do not share your data with third parties except as described in Section 3.","reason":"The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"subprocessors_data_sharing","quote":"We do not sell your data. We do not use your document content for advertising. We do not share your data with third parties except as described in Section 3.","source_url":"https://flowmanual.com/privacy","deep_link":"https://flowmanual.com/privacy#:~:text=%20We%20do%20not,described%20in%20Section%203.","structural_citation":"Privacy Policy › “To respond to your support requests”","citation_basis":"heading_path","char_start":2689,"char_end":2847}},{"pattern_key":"training_no_use","pattern_family":"training_use","risk_rating":"low","confidence":"high","stance_key":"model_training","stance_value":"no_training_claim","evidence":"When you run document analysis, extracted plain text from your documents is sent to Anthropic’s API. Anthropic operates under a zero-data-retention policy: prompts and responses are not stored and are not used to train models. Raw document files are never transmitted. See Anthropic’s Privacy Policy .","reason":"The clause says submitted content is not used for model training or model/service improvement.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"When you run document analysis, extracted plain text from your documents is sent to Anthropic’s API. Anthropic operates under a zero-data-retention policy: prompts and responses are not stored and are not used to train models. Raw document files are never transmitted. See Anthropic’s Privacy Policy .","source_url":"https://flowmanual.com/privacy","deep_link":"https://flowmanual.com/privacy#:~:text=%20When%20you%20run,Anthropic%E2%80%99s%20Privacy%20Policy%20.","structural_citation":"Privacy Policy › “Anthropic (Document Analysis)”","citation_basis":"heading_path","char_start":3569,"char_end":3871}},{"pattern_key":"training_no_use","pattern_family":"training_use","risk_rating":"low","confidence":"high","stance_key":"model_training","stance_value":"no_training_claim","evidence":"Web search inside project chat is off by default and only available when we enable it on the hosted service. When you use it, the search query (which can include text from your conversation) is sent to Tavily to retrieve results. Queries are not used to train models. Web search stays off unless we enable it for the hosted service, and it is always off when redaction is active. See Tavily’s Privacy Policy .","reason":"The clause says submitted content is not used for model training or model/service improvement.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"Web search inside project chat is off by default and only available when we enable it on the hosted service. When you use it, the search query (which can include text from your conversation) is sent to Tavily to retrieve results. Queries are not used to train models. Web search stays off unless we enable it for the hosted service, and it is always off when redaction is active. See Tavily’s Privacy Policy .","source_url":"https://flowmanual.com/privacy","deep_link":"https://flowmanual.com/privacy#:~:text=%20Web%20search%20inside,Tavily%E2%80%99s%20Privacy%20Policy%20.","structural_citation":"Privacy Policy › “Tavily (Chat Web Search, Optional)”","citation_basis":"heading_path","char_start":3919,"char_end":4329}},{"pattern_key":"training_no_use","pattern_family":"training_use","risk_rating":"low","confidence":"medium","stance_key":"model_training","stance_value":"no_training_claim","evidence":"When you run document analysis, extracted plain text from your documents is sent to Anthropic’s API. Anthropic operates under a zero-data-retention policy: prompts and responses are not stored and are not used to train models. Raw document files are never transmitted. See Anthropic’s Privacy Policy .","reason":"The clause says submitted content is not used for model training or model/service improvement.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"When you run document analysis, extracted plain text from your documents is sent to Anthropic’s API. Anthropic operates under a zero-data-retention policy: prompts and responses are not stored and are not used to train models. Raw document files are never transmitted. See Anthropic’s Privacy Policy .","source_url":"https://flowmanual.com/privacy","deep_link":"https://flowmanual.com/privacy#:~:text=%20When%20you%20run,Anthropic%E2%80%99s%20Privacy%20Policy%20.","structural_citation":"Privacy Policy › “Anthropic (Document Analysis)”","citation_basis":"heading_path","char_start":4630,"char_end":4932}},{"pattern_key":"training_no_use","pattern_family":"training_use","risk_rating":"low","confidence":"medium","stance_key":"model_training","stance_value":"no_training_claim","evidence":"When you upload a document, the PDF may be sent to Microsoft Azure Document Intelligence (United States region) to read its layout, tables, and text. Azure processes the file for that purpose only: it does not use your documents to train models, and analysis data is deleted within 24 hours. You can ask us to turn this off for your account, in which case parsing runs only on our own servers. See Microsoft’s data an...","reason":"The clause says submitted content is not used for model training or model/service improvement.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"When you upload a document, the PDF may be sent to Microsoft Azure Document Intelligence (United States region) to read its layout, tables, and text. Azure processes the file for that purpose only: it does not use your documents to train models, and analysis data is deleted within 24 hours. You can ask us to turn this off for your account, in which case parsing runs only on our own servers. See Microsoft’s data and privacy documentation .","source_url":"https://flowmanual.com/privacy","deep_link":"https://flowmanual.com/privacy#:~:text=%20When%20you%20upload,and%20privacy%20documentation%20.","structural_citation":"Privacy Policy › “Microsoft Azure (Document Parsing)”","citation_basis":"heading_path","char_start":4980,"char_end":5423}},{"pattern_key":"training_no_use","pattern_family":"training_use","risk_rating":"low","confidence":"medium","stance_key":"model_training","stance_value":"no_training_claim","evidence":"Web search inside project chat is off by default and only available when we enable it on the hosted service. When you use it, the search query (which can include text from your conversation) is sent to Tavily to retrieve results. Queries are not used to train models. Web search stays off unless we enable it for the hosted service, and it is always off when redaction is active. See Tavily’s Privacy Policy .","reason":"The clause says submitted content is not used for model training or model/service improvement.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"Web search inside project chat is off by default and only available when we enable it on the hosted service. When you use it, the search query (which can include text from your conversation) is sent to Tavily to retrieve results. Queries are not used to train models. Web search stays off unless we enable it for the hosted service, and it is always off when redaction is active. See Tavily’s Privacy Policy .","source_url":"https://flowmanual.com/privacy","deep_link":"https://flowmanual.com/privacy#:~:text=%20Web%20search%20inside,Tavily%E2%80%99s%20Privacy%20Policy%20.","structural_citation":"Privacy Policy › “Tavily (Chat Web Search, Optional)”","citation_basis":"heading_path","char_start":5471,"char_end":5881}},{"pattern_key":"training_no_use","pattern_family":"training_use","risk_rating":"low","confidence":"medium","stance_key":"model_training","stance_value":"no_training_claim","evidence":"When you run document analysis, extracted plain text from your documents is sent to Anthropic’s API. Anthropic operates under a zero-data-retention policy: prompts and responses are not stored and are not used to train models. Raw document files are never transmitted. See Anthropic’s Privacy Policy .","reason":"The clause says submitted content is not used for model training or model/service improvement.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"When you run document analysis, extracted plain text from your documents is sent to Anthropic’s API. Anthropic operates under a zero-data-retention policy: prompts and responses are not stored and are not used to train models. Raw document files are never transmitted. See Anthropic’s Privacy Policy .","source_url":"https://flowmanual.com/privacy","deep_link":"https://flowmanual.com/privacy#:~:text=%20When%20you%20run,Anthropic%E2%80%99s%20Privacy%20Policy%20.","structural_citation":"Privacy Policy › “Anthropic (Document Analysis)”","citation_basis":"heading_path","char_start":4630,"char_end":4932}},{"pattern_key":"training_no_use","pattern_family":"training_use","risk_rating":"low","confidence":"medium","stance_key":"model_training","stance_value":"no_training_claim","evidence":"When you upload a document, the PDF may be sent to Microsoft Azure Document Intelligence (United States region) to read its layout, tables, and text. Azure processes the file for that purpose only: it does not use your documents to train models, and analysis data is deleted within 24 hours. You can ask us to turn this off for your account, in which case parsing runs only on our own servers. See Microsoft’s data an...","reason":"The clause says submitted content is not used for model training or model/service improvement.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"When you upload a document, the PDF may be sent to Microsoft Azure Document Intelligence (United States region) to read its layout, tables, and text. Azure processes the file for that purpose only: it does not use your documents to train models, and analysis data is deleted within 24 hours. You can ask us to turn this off for your account, in which case parsing runs only on our own servers. See Microsoft’s data and privacy documentation .","source_url":"https://flowmanual.com/privacy","deep_link":"https://flowmanual.com/privacy#:~:text=%20When%20you%20upload,and%20privacy%20documentation%20.","structural_citation":"Privacy Policy › “Microsoft Azure (Document Parsing)”","citation_basis":"heading_path","char_start":4980,"char_end":5423}},{"pattern_key":"training_no_use","pattern_family":"training_use","risk_rating":"low","confidence":"medium","stance_key":"model_training","stance_value":"no_training_claim","evidence":"Web search inside project chat is off by default and only available when we enable it on the hosted service. When you use it, the search query (which can include text from your conversation) is sent to Tavily to retrieve results. Queries are not used to train models. Web search stays off unless we enable it for the hosted service, and it is always off when redaction is active. See Tavily’s Privacy Policy .","reason":"The clause says submitted content is not used for model training or model/service improvement.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"training_use","quote":"Web search inside project chat is off by default and only available when we enable it on the hosted service. When you use it, the search query (which can include text from your conversation) is sent to Tavily to retrieve results. Queries are not used to train models. Web search stays off unless we enable it for the hosted service, and it is always off when redaction is active. See Tavily’s Privacy Policy .","source_url":"https://flowmanual.com/privacy","deep_link":"https://flowmanual.com/privacy#:~:text=%20Web%20search%20inside,Tavily%E2%80%99s%20Privacy%20Policy%20.","structural_citation":"Privacy Policy › “Tavily (Chat Web Search, Optional)”","citation_basis":"heading_path","char_start":5471,"char_end":5881}}]},"tier_conditions":[{"tier":"Api","surface":"privacy_data_use","verdict":"unknown","confidence":"high","citation_count":1,"citations":[{"finding_id":"14f05cda-8aed-4f84-be41-d42456c26bc7","quote":" To perform automated document analysis using the Anthropic API (extracted text only)\n To store and display your annotations, comparisons, and analysis results\n To send service-related emails (account confirmation, material changes to this policy)","source_url":"https://flowmanual.com/privacy","deep_link":"https://flowmanual.com/privacy#:~:text=%20To%20perform%20automated,changes%20to%20this%20policy)","structural_citation":"Privacy Policy › “To authenticate your account and maintain session security”"}]},{"tier":"Api","surface":"subprocessors_data_sharing","verdict":"unknown","confidence":"high","citation_count":1,"citations":[{"finding_id":"61535d09-78f8-4762-871b-eed122864729","quote":" You can connect accounts you already hold with third-party services (Microsoft OneDrive and SharePoint, Google Drive, Procore, Dropbox, Egnyte, Docusign, and Autodesk Construction Cloud) to import PDF documents into your projects. Connectors are off by default, and connections go through each provider’s own sign-in and consent screen, so we never see or store your password for that service. The provider issues access tokens, which we store encrypted with AES-256-GCM and use only to list the folders, files, or completed agreements you browse and to download the specific files you choose to import. Imported files are then stored and protected exactly like files you upload directly. We request read-only access wherever the provider supports it, we never change or delete anything in your connected account, and nothing is scanned in the background: browsing, importing, and manual re-scans run only when you start them. You can disconnect a provider at any time, which deletes the stored tokens, and you can also revoke FlowManual’s access from the provider’s own security settings. Our use of data received from Google APIs adheres to the Google API Services User Data Policy , including the Limited Use requirements.","source_url":"https://flowmanual.com/privacy","deep_link":"https://flowmanual.com/privacy#:~:text=%20You%20can%20connect,the%20Limited%20Use%20requirements.","structural_citation":"Privacy Policy › “Import Connectors (Optional)”"}]},{"tier":"Api","surface":"training_use","verdict":"improves","confidence":"high","citation_count":1,"citations":[{"finding_id":"140b4924-d167-4b63-b16f-f6e591219b26","quote":" When you run document analysis, extracted plain text from your documents is sent to Anthropic’s API. Anthropic operates under a zero-data-retention policy: prompts and responses are not stored and are not used to train models. Raw document files are never transmitted. See Anthropic’s Privacy Policy .","source_url":"https://flowmanual.com/privacy","deep_link":"https://flowmanual.com/privacy#:~:text=%20When%20you%20run,Anthropic%E2%80%99s%20Privacy%20Policy%20.","structural_citation":"Privacy Policy › “Anthropic (Document Analysis)”"}]},{"tier":"Standard","surface":"privacy_data_use","verdict":"conditional","confidence":"high","citation_count":1,"citations":[{"finding_id":"cd52a57b-436b-4953-beb8-14102edfd6c0","quote":" We implement industry-standard safeguards including AES-256-GCM encryption for sensitive data, HTTPS-only transport, hashed passwords (scrypt, memory-hard), and no plaintext storage of credentials. No security measure is perfect; please notify us immediately if you suspect unauthorized access to your account.\n For a technical overview of how we protect your data, see our Security page .","source_url":"https://flowmanual.com/privacy","deep_link":"https://flowmanual.com/privacy#:~:text=%20We%20implement%20industry-standard,our%20Security%20page%20.","structural_citation":"§ 6 (Security)"}]}],"disclaimer":"Informational only, not legal advice. Every finding is a verbatim quote from a fully-read, gate-verified document; verify via snapshot_sha256 + wayback_url. Partially-verified platforms show findings only from their verified document(s).","benchmark":{"disclaimer":"Automated assessment against a published rubric — not legal advice.","bands":[]},"@jsonld":{"@context":"https://schema.org","@type":"Dataset","name":"FlowManual — AI policy risk findings","description":"Verified, cited policy findings for FlowManual across 13 risk surfaces.","url":"https://airinetwork.com/platform/flowmanual","creator":{"@type":"Organization","name":"AIRIN","url":"https://airinetwork.com"},"isAccessibleForFree":true,"license":"https://airinetwork.com/terms","additionalProperty":[{"@type":"PropertyValue","name":"verification","value":"partially_verified"},{"@type":"PropertyValue","name":"tier_condition_count","value":4}],"hasPart":[{"@type":"Quotation","@id":"https://airinetwork.com/platform/flowmanual/finding/training-use-0102bc5aa16904ce91a7","text":" You can choose to let FlowManual use the documents you upload and the corrections you make to improve extraction quality for all customers. This is off by default and applies only if you turn it on from your account settings. You can turn it off at any time from the same setting, which immediately stops any future use of your data for this purpose; it does not undo improvements already made. Data used this way is never sold and never shared with third parties.","isBasedOn":"https://flowmanual.com/privacy","dateCreated":"2026-07-20T00:22:49.891278+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/flowmanual/finding/training-use-1a0ae32eacc0ef977e9c","text":" When you run document analysis, extracted plain text from your documents is sent to Anthropic’s API. Anthropic operates under a zero-data-retention policy: prompts and responses are not stored and are not used to train models. Raw document files are never transmitted. See Anthropic’s Privacy Policy .","isBasedOn":"https://flowmanual.com/privacy","dateCreated":"2026-07-20T00:22:49.891278+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/flowmanual/finding/training-use-559bb047b4e4a82c74a9","text":" Web search inside project chat is off by default and only available when we enable it on the hosted service. When you use it, the search query (which can include text from your conversation) is sent to Tavily to retrieve results. Queries are not used to train models. Web search stays off unless we enable it for the hosted service, and it is always off when redaction is active. See Tavily’s Privacy Policy .","isBasedOn":"https://flowmanual.com/privacy","dateCreated":"2026-07-20T00:22:49.891278+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/flowmanual/finding/privacy-data-use-8c545cab91a5c9cd373f","text":" FlowManual (“FlowManual,” “we,” “us,” or “our”) provides a document analysis platform for construction contractors. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.\n By creating an account or using FlowManual, you agree to this Privacy Policy. If you are using FlowManual on behalf of an employer or other organization, you represent that you have authority to bind that organization to this policy.","isBasedOn":"https://flowmanual.com/privacy","dateCreated":"2026-07-20T00:22:49.891278+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/flowmanual/finding/privacy-data-use-1e260e3e6cbd46913718","text":" When you register, we collect your name, email address, and a hashed (one-way encrypted) password. We never store your password in plaintext.","isBasedOn":"https://flowmanual.com/privacy","dateCreated":"2026-07-20T00:22:49.891278+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/flowmanual/finding/privacy-data-use-c18a64b805d9d3b24e75","text":" FlowManual processes PDF documents you upload. Files are stored on DigitalOcean, on an encrypted volume, and are encrypted in transit (HTTPS). File bytes are also encrypted at the application layer with AES-256-GCM before they are written to disk. FlowManual staff do not access your document contents.","isBasedOn":"https://flowmanual.com/privacy","dateCreated":"2026-07-20T00:22:49.891278+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/flowmanual/finding/privacy-data-use-a8c2031db1b13eb61b2d","text":" FlowManual extracts plain text from your uploaded documents. This text is stored encrypted in our database and is used to power document analysis features. Raw document files are never transmitted to the analysis provider. Only the extracted plain text is sent.","isBasedOn":"https://flowmanual.com/privacy","dateCreated":"2026-07-20T00:22:49.891278+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/flowmanual/finding/privacy-data-use-3ef36303573fd9fd3ed5","text":" Annotations, comparison discrepancies, scope gaps, cost estimates, RFI entries, equipment schedules, vendor price history, and GC pattern observations you generate are stored in our database, encrypted at the field level.","isBasedOn":"https://flowmanual.com/privacy","dateCreated":"2026-07-20T00:22:49.891278+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/flowmanual/finding/privacy-data-use-da7844af0b1827bf9e83","text":" To perform automated document analysis using the Anthropic API (extracted text only)\n To store and display your annotations, comparisons, and analysis results\n To send service-related emails (account confirmation, material changes to this policy)","isBasedOn":"https://flowmanual.com/privacy","dateCreated":"2026-07-20T00:22:49.891278+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/flowmanual/finding/privacy-data-use-d1c0616edec417e9faec","text":" We do not sell your data. We do not use your document content for advertising. We do not share your data with third parties except as described in Section 3.","isBasedOn":"https://flowmanual.com/privacy","dateCreated":"2026-07-20T00:22:49.891278+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/flowmanual/finding/privacy-data-use-e5aa15ff2afa13acbffc","text":" FlowManual uses strictly necessary session cookies to keep you authenticated. We do not use tracking, advertising, or analytics cookies. No cookie consent banner is required because we do not place any non-essential cookies.","isBasedOn":"https://flowmanual.com/privacy","dateCreated":"2026-07-20T00:22:49.891278+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/flowmanual/finding/privacy-data-use-0861ebf8bcda7aec37d8","text":" We implement industry-standard safeguards including AES-256-GCM encryption for sensitive data, HTTPS-only transport, hashed passwords (scrypt, memory-hard), and no plaintext storage of credentials. No security measure is perfect; please notify us immediately if you suspect unauthorized access to your account.\n For a technical overview of how we protect your data, see our Security page .","isBasedOn":"https://flowmanual.com/privacy","dateCreated":"2026-07-20T00:22:49.891278+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/flowmanual/finding/privacy-data-use-57dd6c5558d7092c5f92","text":" You have the right to:\n Access: Request a copy of the data we hold about you.\n Correction: Request correction of inaccurate data.\n Deletion: Request deletion of your account and associated data. We will complete the deletion within 30 days.\n Portability: Request an export of your data in a machine-readable format.\n To exercise any of these rights, email us at legal@flowmanual.com .","isBasedOn":"https://flowmanual.com/privacy","dateCreated":"2026-07-20T00:22:49.891278+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/flowmanual/finding/privacy-data-use-cbf2ad2029c9349bff07","text":" FlowManual is intended for professional use by adults. We do not knowingly collect personal data from anyone under 18. If we learn we have collected data from a minor, we will delete it promptly.","isBasedOn":"https://flowmanual.com/privacy","dateCreated":"2026-07-20T00:22:49.891278+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/flowmanual/finding/privacy-data-use-5a6d19928e8468503d75","text":" We may update this Privacy Policy from time to time. For material changes, we will notify you by email at least 30 days before the new policy takes effect. Continued use of FlowManual after the effective date constitutes acceptance of the updated policy.","isBasedOn":"https://flowmanual.com/privacy","dateCreated":"2026-07-20T00:22:49.891278+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/flowmanual/finding/data-retention-290c8e4f97d7916facf4","text":" Your data is retained until you delete it or request account deletion. Deleted data is removed within 30 days.","isBasedOn":"https://flowmanual.com/privacy","dateCreated":"2026-07-20T00:22:49.891278+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/flowmanual/finding/data-retention-c9ab82f3c80267918c64","text":" We maintain an audit log of document analysis calls that includes: timestamp, user ID, document ID, operation type, bytes transmitted, and a keyed HMAC-SHA-256 hash of the prompt (when an audit key is configured). Full prompt text is never stored. This log is visible only to you at /admin/security and is used to maintain an audit trail of analysis usage.","isBasedOn":"https://flowmanual.com/privacy","dateCreated":"2026-07-20T00:22:49.891278+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/flowmanual/finding/subprocessors-data-sharing-c4500659ce47fdd5056f","text":" We share data with the following processors only as necessary to provide the service:","isBasedOn":"https://flowmanual.com/privacy","dateCreated":"2026-07-20T00:22:49.891278+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/flowmanual/finding/subprocessors-data-sharing-5356f57d48709fb17915","text":" For accounts on flowmanual.com, the application, the database, and uploaded files are hosted on DigitalOcean. Files are kept on an encrypted volume. DigitalOcean processes this data on our behalf under a data processing agreement.","isBasedOn":"https://flowmanual.com/privacy","dateCreated":"2026-07-20T00:22:49.891278+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/flowmanual/finding/subprocessors-data-sharing-41528e8d0565de7f3a6a","text":" We use Resend to send service-related emails such as account confirmation, sign-in verification codes, and material changes to this policy. Resend processes the recipient email address and message contents on our behalf under a data processing agreement.","isBasedOn":"https://flowmanual.com/privacy","dateCreated":"2026-07-20T00:22:49.891278+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/flowmanual/finding/subprocessors-data-sharing-798ada13bcb34ec3c92d","text":" If you sign in with Google, Google authenticates you and shares your name and email address with us. This is governed by Google’s Privacy Policy .","isBasedOn":"https://flowmanual.com/privacy","dateCreated":"2026-07-20T00:22:49.891278+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/flowmanual/finding/subprocessors-data-sharing-9297622211b581dee5ad","text":" You can connect accounts you already hold with third-party services (Microsoft OneDrive and SharePoint, Google Drive, Procore, Dropbox, Egnyte, Docusign, and Autodesk Construction Cloud) to import PDF documents into your projects. Connectors are off by default, and connections go through each provider’s own sign-in and consent screen, so we never see or store your password for that service. The provider issues access tokens, which we store encrypted with AES-256-GCM and use only to list the folders, files, or completed agreements you browse and to download the specific files you choose to import. Imported files are then stored and protected exactly like files you upload directly. We request read-only access wherever the provider supports it, we never change or delete anything in your connected account, and nothing is scanned in the background: browsing, importing, and manual re-scans run only when you start them. You can disconnect a provider at any time, which deletes the stored tokens, and you can also revoke FlowManual’s access from the provider’s own security settings. Our use of data received from Google APIs adheres to the Google API Services User Data Policy , including the Limited Use requirements.","isBasedOn":"https://flowmanual.com/privacy","dateCreated":"2026-07-20T00:22:49.891278+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/flowmanual/finding/subprocessors-data-sharing-4e217fef297f9ba8e1a9","text":" We have no marketing or advertising vendors. The hosted service at flowmanual.com uses one privacy-preserving analytics provider (PostHog) to understand product usage: which features are used, how far new accounts get in setup, and where errors happen. These are server-side event counts tied to an account identifier. They never include document content, filenames, or client and vendor names, and we do not use analytics cookies or session recording (see Cookies below).","isBasedOn":"https://flowmanual.com/privacy","dateCreated":"2026-07-20T00:22:49.891278+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"}}],"variableMeasured":[{"@type":"PropertyValue","name":"training_use","value":"unknown","description":" You can choose to let FlowManual use the documents you upload and the corrections you make to improve extraction quality for all customers. This is off by default and applies only if you turn it on from your account settings. You can turn it off at any time from the same setting, which immediately stops any future use of your data for this purpose; it does not undo improvements already made. Data used this way is never sold and never shared with third parties.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://flowmanual.com/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Service improvement (optional)”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://flowmanual.com/privacy#:~:text=%20You%20can%20choose,shared%20with%20third%20parties."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:22:49.891278+00:00"}]},{"@type":"PropertyValue","name":"training_use","value":"low","description":" When you run document analysis, extracted plain text from your documents is sent to Anthropic’s API. Anthropic operates under a zero-data-retention policy: prompts and responses are not stored and are not used to train models. Raw document files are never transmitted. See Anthropic’s Privacy Policy .","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://flowmanual.com/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Anthropic (Document Analysis)”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://flowmanual.com/privacy#:~:text=%20When%20you%20run,Anthropic%E2%80%99s%20Privacy%20Policy%20."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:22:49.891278+00:00"}]},{"@type":"PropertyValue","name":"training_use","value":"low","description":" Web search inside project chat is off by default and only available when we enable it on the hosted service. When you use it, the search query (which can include text from your conversation) is sent to Tavily to retrieve results. Queries are not used to train models. Web search stays off unless we enable it for the hosted service, and it is always off when redaction is active. See Tavily’s Privacy Policy .","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://flowmanual.com/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Tavily (Chat Web Search, Optional)”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://flowmanual.com/privacy#:~:text=%20Web%20search%20inside,Tavily%E2%80%99s%20Privacy%20Policy%20."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:22:49.891278+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" FlowManual (“FlowManual,” “we,” “us,” or “our”) provides a document analysis platform for construction contractors. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.\n By creating an account or using FlowManual, you agree to this Privacy Policy. If you are using FlowManual on behalf of an employer or other organization, you represent that you have authority to bind that organization to this policy.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://flowmanual.com/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Effective date: July 18, 2026”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://flowmanual.com/privacy#:~:text=%20FlowManual%20(%E2%80%9CFlowManual%2C%E2%80%9D%20%E2%80%9Cwe%2C%E2%80%9D,organization%20to%20this%20policy."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:22:49.891278+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" When you register, we collect your name, email address, and a hashed (one-way encrypted) password. We never store your password in plaintext.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://flowmanual.com/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Account Information”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://flowmanual.com/privacy#:~:text=%20When%20you%20register%2C,your%20password%20in%20plaintext."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:22:49.891278+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" FlowManual processes PDF documents you upload. Files are stored on DigitalOcean, on an encrypted volume, and are encrypted in transit (HTTPS). File bytes are also encrypted at the application layer with AES-256-GCM before they are written to disk. FlowManual staff do not access your document contents.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://flowmanual.com/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Uploaded Documents”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://flowmanual.com/privacy#:~:text=%20FlowManual%20processes%20PDF,access%20your%20document%20contents."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:22:49.891278+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" FlowManual extracts plain text from your uploaded documents. This text is stored encrypted in our database and is used to power document analysis features. Raw document files are never transmitted to the analysis provider. Only the extracted plain text is sent.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://flowmanual.com/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Extracted Text”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://flowmanual.com/privacy#:~:text=%20FlowManual%20extracts%20plain,plain%20text%20is%20sent."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:22:49.891278+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" Annotations, comparison discrepancies, scope gaps, cost estimates, RFI entries, equipment schedules, vendor price history, and GC pattern observations you generate are stored in our database, encrypted at the field level.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://flowmanual.com/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Analysis Results”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://flowmanual.com/privacy#:~:text=%20Annotations%2C%20comparison%20discrepancies%2C,at%20the%20field%20level."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:22:49.891278+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" To perform automated document analysis using the Anthropic API (extracted text only)\n To store and display your annotations, comparisons, and analysis results\n To send service-related emails (account confirmation, material changes to this policy)","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://flowmanual.com/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “To authenticate your account and maintain session security”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://flowmanual.com/privacy#:~:text=%20To%20perform%20automated,changes%20to%20this%20policy)"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:22:49.891278+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"low","description":" We do not sell your data. We do not use your document content for advertising. We do not share your data with third parties except as described in Section 3.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://flowmanual.com/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “To respond to your support requests”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://flowmanual.com/privacy#:~:text=%20We%20do%20not,described%20in%20Section%203."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:22:49.891278+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" FlowManual uses strictly necessary session cookies to keep you authenticated. We do not use tracking, advertising, or analytics cookies. No cookie consent banner is required because we do not place any non-essential cookies.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://flowmanual.com/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 4 (Cookies)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://flowmanual.com/privacy#:~:text=%20FlowManual%20uses%20strictly,place%20any%20non-essential%20cookies."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:22:49.891278+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" We implement industry-standard safeguards including AES-256-GCM encryption for sensitive data, HTTPS-only transport, hashed passwords (scrypt, memory-hard), and no plaintext storage of credentials. No security measure is perfect; please notify us immediately if you suspect unauthorized access to your account.\n For a technical overview of how we protect your data, see our Security page .","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://flowmanual.com/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 6 (Security)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://flowmanual.com/privacy#:~:text=%20We%20implement%20industry-standard,our%20Security%20page%20."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:22:49.891278+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" You have the right to:\n Access: Request a copy of the data we hold about you.\n Correction: Request correction of inaccurate data.\n Deletion: Request deletion of your account and associated data. We will complete the deletion within 30 days.\n Portability: Request an export of your data in a machine-readable format.\n To exercise any of these rights, email us at legal@flowmanual.com .","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://flowmanual.com/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 7 (Your Rights)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://flowmanual.com/privacy#:~:text=%20You%20have%20the,us%20at%20legal%40flowmanual.com%20."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:22:49.891278+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" FlowManual is intended for professional use by adults. We do not knowingly collect personal data from anyone under 18. If we learn we have collected data from a minor, we will delete it promptly.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://flowmanual.com/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 8 (Children’s Privacy)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://flowmanual.com/privacy#:~:text=%20FlowManual%20is%20intended,will%20delete%20it%20promptly."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:22:49.891278+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" We may update this Privacy Policy from time to time. For material changes, we will notify you by email at least 30 days before the new policy takes effect. Continued use of FlowManual after the effective date constitutes acceptance of the updated policy.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://flowmanual.com/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 9 (Changes to This Policy)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://flowmanual.com/privacy#:~:text=%20We%20may%20update,of%20the%20updated%20policy."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:22:49.891278+00:00"}]},{"@type":"PropertyValue","name":"data_retention","value":"low","description":" Your data is retained until you delete it or request account deletion. Deleted data is removed within 30 days.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://flowmanual.com/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 5 (Data Retention)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://flowmanual.com/privacy#:~:text=%20Your%20data%20is,removed%20within%2030%20days."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:22:49.891278+00:00"}]},{"@type":"PropertyValue","name":"data_retention","value":"unknown","description":" We maintain an audit log of document analysis calls that includes: timestamp, user ID, document ID, operation type, bytes transmitted, and a keyed HMAC-SHA-256 hash of the prompt (when an audit key is configured). Full prompt text is never stored. This log is visible only to you at /admin/security and is used to maintain an audit trail of analysis usage.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://flowmanual.com/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Usage Metadata”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://flowmanual.com/privacy#:~:text=%20We%20maintain%20an,trail%20of%20analysis%20usage."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:22:49.891278+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"unknown","description":" We share data with the following processors only as necessary to provide the service:","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://flowmanual.com/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 3 (Third-Party Service Providers)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://flowmanual.com/privacy#:~:text=%20We%20share%20data,to%20provide%20the%20service%3A"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:22:49.891278+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"unknown","description":" For accounts on flowmanual.com, the application, the database, and uploaded files are hosted on DigitalOcean. Files are kept on an encrypted volume. DigitalOcean processes this data on our behalf under a data processing agreement.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://flowmanual.com/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “DigitalOcean (Hosting and Storage)”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://flowmanual.com/privacy#:~:text=%20For%20accounts%20on,a%20data%20processing%20agreement."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:22:49.891278+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"unknown","description":" We use Resend to send service-related emails such as account confirmation, sign-in verification codes, and material changes to this policy. Resend processes the recipient email address and message contents on our behalf under a data processing agreement.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://flowmanual.com/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Resend (Email)”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://flowmanual.com/privacy#:~:text=%20We%20use%20Resend,a%20data%20processing%20agreement."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:22:49.891278+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"unknown","description":" If you sign in with Google, Google authenticates you and shares your name and email address with us. This is governed by Google’s Privacy Policy .","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://flowmanual.com/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Google (Sign-In)”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://flowmanual.com/privacy#:~:text=%20If%20you%20sign,Google%E2%80%99s%20Privacy%20Policy%20."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:22:49.891278+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"unknown","description":" You can connect accounts you already hold with third-party services (Microsoft OneDrive and SharePoint, Google Drive, Procore, Dropbox, Egnyte, Docusign, and Autodesk Construction Cloud) to import PDF documents into your projects. Connectors are off by default, and connections go through each provider’s own sign-in and consent screen, so we never see or store your password for that service. The provider issues access tokens, which we store encrypted with AES-256-GCM and use only to list the folders, files, or completed agreements you browse and to download the specific files you choose to import. Imported files are then stored and protected exactly like files you upload directly. We request read-only access wherever the provider supports it, we never change or delete anything in your connected account, and nothing is scanned in the background: browsing, importing, and manual re-scans run only when you start them. You can disconnect a provider at any time, which deletes the stored tokens, and you can also revoke FlowManual’s access from the provider’s own security settings. Our use of data received from Google APIs adheres to the Google API Services User Data Policy , including the Limited Use requirements.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://flowmanual.com/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Import Connectors (Optional)”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://flowmanual.com/privacy#:~:text=%20You%20can%20connect,the%20Limited%20Use%20requirements."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:22:49.891278+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"unknown","description":" We have no marketing or advertising vendors. The hosted service at flowmanual.com uses one privacy-preserving analytics provider (PostHog) to understand product usage: which features are used, how far new accounts get in setup, and where errors happen. These are server-side event counts tied to an account identifier. They never include document content, filenames, or client and vendor names, and we do not use analytics cookies or session recording (see Cookies below).","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"828d2e5f7a6e8dc5807197a1039158431ceeb75d4e97e5ce2794d878a7b66cbb"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://flowmanual.com/privacy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Import Connectors (Optional)”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://flowmanual.com/privacy#:~:text=%20We%20have%20no,recording%20(see%20Cookies%20below)."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-20T00:22:49.891278+00:00"}]}]}}