01 · Scope
What this policy covers
This Privacy Policy applies to the Flowcrafts website, Flowcrafts integrations, and Flowcrafts tools made available to users, including the Dotloop Contact Exporter.
Third-party services that you connect to Flowcrafts, including Dotloop, are governed by their own terms and privacy policies.
02 · Data we process
Information involved when you use Flowcrafts
- Website and inquiry information
- If you contact Flowcrafts, we may receive information you choose to provide, such as your name, email address, company name, and the contents of your message.
- Connected account information
- When you connect a supported third-party account, Flowcrafts may process authorization information required to establish and maintain that connection, such as OAuth authorization codes, access tokens, refresh tokens, account identifiers, and connection status.
- Contact Exporter data
- When you request a Dotloop contact export, Flowcrafts receives the contact information returned by the authorized Dotloop API request so that it can generate the CSV file you requested.
- Technical information
- Our hosting and infrastructure providers may automatically process standard technical information such as request timestamps, IP addresses, browser or user-agent information, request paths, status codes, and diagnostic logs.
03 · Use
How we use information
Flowcrafts processes information only as needed to provide, secure, maintain, and improve the requested service. This may include:
- authenticating a connected account;
- requesting data that you explicitly ask the tool to retrieve;
- generating and delivering a requested CSV export;
- maintaining temporary session state and connection status;
- detecting errors, abuse, or security problems;
- responding to support, privacy, or business inquiries.
04 · Storage & retention
We aim to retain as little customer data as practical
The Dotloop Contact Exporter is designed so that contact records are processed transiently to generate the requested CSV and are not intentionally written to a persistent Flowcrafts contact database or stored as retained export files.
Authorization and session information may be held temporarily as needed to complete authentication, maintain a short-lived session, refresh an authorized connection, or complete a requested operation. Temporary session data may expire automatically or be removed when the connection is ended.
Infrastructure and security logs may be retained by our hosting providers for their standard operational periods. Flowcrafts is designed not to intentionally place contact payloads, CSV contents, passwords, OAuth tokens, or authorization codes into application logs.
05 · Infrastructure
Service providers
Flowcrafts may use third-party infrastructure providers to host and operate its services. At launch, the Contact Exporter backend may be hosted on Vercel or similar infrastructure. These providers may process limited technical information as necessary to deliver hosting, networking, security, and logging services.
Connected services such as Dotloop process data under their own terms and privacy policies.
06 · Sharing
When information may be shared
Flowcrafts does not sell personal information. Information may be disclosed only when reasonably necessary to:
- operate the service through infrastructure or service providers;
- comply with applicable law, legal process, or a valid government request;
- protect the security, rights, or integrity of Flowcrafts, its users, or others;
- complete a business transaction such as a merger, acquisition, or transfer of substantially all relevant assets, subject to applicable law.
07 · Security
Security practices
Flowcrafts uses reasonable technical and organizational safeguards appropriate to the service. Sensitive API credentials and client secrets are intended to remain on the server side and are not intentionally embedded in public browser-extension code.
No internet service can guarantee absolute security. Users should protect their own account credentials and should not send passwords, access tokens, or other secrets to Flowcrafts support.
08 · Your choices
Access, deletion, and connection control
You can stop using a Flowcrafts tool at any time. Where supported, you may disconnect a connected third-party account or revoke the integration's authorization through that provider.
Because the Contact Exporter is designed not to intentionally persist exported contact records, there is ordinarily no stored export file or contact database entry for Flowcrafts to delete after delivery. If you have a privacy or deletion question, contact us and we will review the information, if any, that Flowcrafts controls.
09 · Changes
Updates to this policy
We may update this Privacy Policy as Flowcrafts tools, integrations, or legal requirements change. The effective date at the top of this page will be updated when the policy changes materially.
10 · Contact
Questions about privacy?
For privacy, security, or data-handling questions, contact Flowcrafts at hello@flowcrafts.work.
Practical workflow tools and integrations for real estate teams.