Privacy Policy

Who we are

FlowGlance ("we") operates flowglance.com, a web analytics console. Contact: [email protected]. This policy covers both this website and the FlowGlance service.

What we collect when you use FlowGlance

Account data: your email address, handled by Clerk (our authentication provider). We never see or store a password — sign-in is by emailed verification code only. Billing data (Pro plan): processed by Stripe; we store subscription status and a Stripe customer reference, never card numbers. Usage analytics on our own pages: we run our own tracker (the same one customers install): page views, scroll behavior, time on page, clicks — tied to a random visitor ID. Cloudflare Web Analytics additionally collects aggregate, cookie-free performance metrics.

What we collect on customer websites

When a site owner installs the FlowGlance snippet, we process visitor behavior on their behalf: pages viewed, scroll and dwell patterns, clicks on links/buttons (never form contents or keystrokes), conversion events, and — only at the owner's highest privacy setting — a user reference the owner supplies to link sessions to their signed-in users. The owner controls a privacy dial (L0 collect nothing → L3 full journeys); we enforce it server-side. We act as a processor for this data: it belongs to the site owner, is never sold, never used for advertising, and is shown only to that owner.

AI features

The "fable 5" insight button sends aggregated statistics only(totals, rates, top pages) to Anthropic's API to generate advice. Raw events and visitor identifiers are never shared with the model.

Where data lives & who processes it

Data is stored in Neon (PostgreSQL, US) and served via Vercel and Cloudflare. Subprocessors: Clerk (authentication), Stripe (payments), Neon (database), Vercel (hosting), Cloudflare (DNS, proxy, email routing, aggregate analytics), Anthropic (AI insights, aggregates only), Google (Search Console data you explicitly connect, read-only).

Retention & your choices

Event data is retained while the owning account is active. Deleting a site stops collection immediately; deleting your account removes your sites and their data. You can email us to access or erase personal data. Visitors on customer sites should contact the site owner first — we support owners in fulfilling such requests.

Cookies

See the Cookie Policyfor the exact list — it is short: a visitor ID, a session ID, an operator-exclusion flag, and Clerk's session cookies.