🔒 Privacy Policy

1. Introduction

Welcome to Auto Flow Pro ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Chrome extension.

2. Information We Collect

2.1 Information You Provide

When you create an account or use our Extension, we collect:

• Email address (required for account creation and authentication)
• Password (encrypted and securely stored)
• License key information (for PRO subscribers)

2.2 Automatically Collected Information

We automatically collect certain information when you use the Extension:

• Device information (browser type, version, operating system)
• Usage statistics (number of videos/images generated, processing times)
• Session data (login timestamps, active sessions)
• Extension version and installation ID
• IP address (for security and fraud prevention)

2.3 Content Data

We process but do not permanently store:

• Text prompts you submit to VEO Flow or Whisk
• Image uploads for Whisk processing
• Generated content metadata (for usage tracking only)

Note: Your actual generated videos and images are stored by Google's services, not on our servers. We only track usage counts for billing and limit enforcement.

3. How We Use Your Information

We use the collected information for the following purposes:

Purpose	Data Used
Account Management	Email, password, user ID
Authentication & Security	Email, password, device ID, IP address
Usage Tracking & Limits	Video/image counts, timestamps, tier status
License Validation	License key, activation date, device ID
Service Improvement	Usage patterns, feature usage, error logs
Customer Support	Email, usage history, error reports

4. Data Storage and Security

4.1 Data Storage

Your data is stored on secure servers with industry-standard encryption:

• Passwords are hashed using bcrypt with salt
• Session tokens are encrypted and expire after 7 days
• Database connections use SSL/TLS encryption
• API communications are secured with HTTPS

4.2 Data Retention

• Account Data: Retained while your account is active
• Usage Statistics: Retained for 90 days
• Session Tokens: Automatically deleted after 7 days
• Deleted Accounts: Data permanently removed within 30 days

4.3 Security Measures

We implement multiple layers of security to protect your data:

• End-to-end encryption for sensitive data
• Regular security audits and vulnerability assessments
• Secure authentication with OTP verification
• Rate limiting and DDoS protection
• Access controls and audit logging

5. Data Sharing and Disclosure

5.1 Third-Party Services

We integrate with the following third-party services:

• Google VEO Flow & Whisk: Your prompts and content are sent to Google's AI services for processing. This is governed by Google's privacy policy.
• Email Services: We use email service providers to send OTP codes and notifications.

5.2 We Do Not Sell Your Data

5.3 Legal Disclosure

We may disclose your information if required by law or in response to valid legal requests, such as:

• Compliance with legal obligations or court orders
• Protection of our rights, property, or safety
• Investigation of fraud or security issues
• Enforcement of our Terms of Service

6. Cookies and Tracking Technologies

The Extension uses local storage and cookies for:

• Session Management: Keeping you logged in across browser sessions
• Preferences: Storing your settings and preferences
• Security: Preventing CSRF attacks and unauthorized access

You can clear these cookies through your browser settings, but this will log you out of the Extension.

7. Your Privacy Rights

You have the following rights regarding your personal data:

7.1 Access and Portability

• Request a copy of your personal data
• Export your account information and usage history

7.2 Correction and Update

• Update your email address or password
• Correct any inaccurate information

7.3 Deletion

• Request permanent deletion of your account and data
• Data will be removed within 30 days of deletion request

7.4 Opt-Out

• Unsubscribe from promotional emails (account-related emails will still be sent)
• Disable usage analytics (may affect service quality)

To exercise these rights, contact us via WhatsApp or email.

8. Children's Privacy

The Extension is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and that your data remains protected.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes via:

• Email notification to your registered email address
• In-app notification within the Extension
• Updated "Last Modified" date at the top of this policy

Your continued use of the Extension after changes constitutes acceptance of the updated policy.

11. GDPR Compliance (EU Users)

If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to be informed about data collection
• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: support@autoflowpro.com
• WhatsApp: +92 320 7899686

We will respond to your inquiry within 48 hours.