We're glad you're here, and we take data protection seriously. This page explains what personal data we collect when you use our website and the FlowMate platform, why we collect it, and what rights you have.
Last updated: 19 August 2026
This page belongs to FlowMate GmbH, a company under German law headquartered in Cologne.
Responsible body within the meaning of the GDPR:
If you have questions about data protection concerning our website or platform, contact us any time by phone or email.
When you access our website, information of a general nature is automatically collected (server log files): browser type, operating system, and the domain name of your internet service provider. This information does not allow conclusions about your identity. It's technically necessary to deliver the site correctly and is evaluated anonymously and statistically to help us improve the site.
We use state-of-the-art encryption (HTTPS/SSL) to protect your data in transit.
When you register for FlowMate (app.flowmate.ai), we collect account data such as name, work email, company name, and role. Registered users can view, change, or delete the data provided at registration at any time from their account settings.
While using the platform, we also process usage data, including the flows you configure, the apps you connect, and automation activity logs, needed to operate and troubleshoot the service. Depending on whether a flow is set to Automated, Assisted, or Supervised, some of this processing happens without a human reviewing each individual action; Supervised flows require your explicit approval before execution. We do not use your data to train third-party AI models beyond what's required to run the specific automation you've configured.
Paid plans are billed through Stripe. We do not store full card details ourselves. Stripe processes payment data under its own privacy policy: https://stripe.com/privacy
Claude, ChatGPT, and Gemini are the AI platforms FlowMate operates inside. When you use FlowMate through one of these platforms, the relevant provider (Anthropic, OpenAI, or Google) processes the prompts, context, and outputs involved in that session, under its own privacy terms. FlowMate's automation logic runs on top of this and receives only the data needed to execute the flow you've configured.
You can subscribe to our email newsletter. When you register, the data from the signup form is transmitted to us, along with your IP address and the date and time of registration. We use Brevo (Sendinblue SA, 7 rue de Madrid, 75008 Paris, France) to manage the mailing list and send newsletters.
The legal basis for this processing is your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time via the unsubscribe link in every newsletter, or by emailing privacy@flowmate.io.
We use "double opt-in": we log the signup request, the confirmation email sent, and your confirmation response, to make sure the person who requested the subscription is the actual owner of the email address.
For technical delivery purposes, we also track whether and when a recipient opened an email or clicked a link. We use this only to verify delivery, not to profile subscriber behavior.
If you contact us or book a demo, the information you provide is stored to process your request and any follow-up. This data is not passed to third parties without your consent, other than the scheduling and CRM tools used to manage the booking itself.
We use essential cookies to run the site. We also use Google Tag Manager and the LinkedIn Ads Insight Tag for analytics and advertising purposes; these are non-essential and require your consent before they load, in line with § 25 TDDDG.
Beyond the tools named above, we work with:
Webflow, Inc. (398 11th Street, 2nd Floor, San Francisco, CA 94103, USA) – website hosting
Brevo – newsletter and email marketing
Pipedrive (Pipedrive OÜ, Mustamäe tee 3a, 10615 Tallinn, Estonia) – customer relationship management, used to track leads, demo requests, and sales conversations
We don't sell personal data, and only disclose it beyond the above where legally required or with your consent.
Some providers, including Webflow (website hosting) and the US-based AI platforms named in Section 5, process data outside the EEA. Where this happens, we rely on the EU Commission's Standard Contractual Clauses, an adequacy decision, or another valid GDPR Chapter V transfer mechanism. Contact us for details of the specific safeguards in place for a given provider.
Where we rely on your consent, the legal basis is Art. 6(1)(a) GDPR. Where processing is necessary to perform a contract with you, it's Art. 6(1)(b). Where we're under a legal obligation, it's Art. 6(1)(c). Where processing serves a legitimate interest of ours or a third party, it's Art. 6(1)(f).
We store personal data only as long as necessary for the purposes stated here, or as required by statutory retention periods. After the purpose lapses or the retention period expires, data is routinely blocked or deleted.
We're active on LinkedIn: https://www.linkedin.com/company/flowmate. If you interact with us there, LinkedIn processes data under its own privacy policy: https://www.linkedin.com/legal/privacy-policy. Data collected on LinkedIn may be transferred outside the EEA under LinkedIn's own safeguards.
You have the right to:
Request access to the personal data we hold about you
Request correction of inaccurate data
Request deletion, unless a legal retention obligation applies (in which case we'll block rather than delete)
Object to or restrict certain processing
Withdraw consent at any time, without affecting processing carried out before withdrawal
Lodge a complaint with a supervisory authority
To exercise any of these rights, email privacy@flowmate.io. We aim to respond within one month, extendable by a further month in complex cases, per GDPR's statutory timeline.
We may update this policy to reflect current legal requirements or changes to our services, for example when we launch new integrations or platforms. The updated version applies from your next visit.
© 2026 FlowMate GmbH, Cologne. All rights reserved.
