FlowEdit Chrome Extension Privacy Policy

Information We Collect

When you use the extension, we may process and store:

• Your account information, such as your email address and user ID.
• Authentication/session information necessary to keep you signed in.
• Images you explicitly select and submit for editing or inspiration.
• A temporary selected-image context containing the selected image URL, source page URL, and timestamp.
• Prompts you enter when requesting an image generation or edit.
• Generated images returned from the AI service.
• Generation metadata, such as timestamps, generation mode, usage credits, and request identifiers.
• Subscription and billing status associated with your account.

We do not intentionally collect your general browsing history, unrelated page content, or images you have not explicitly chosen to process.

How Images Are Accessed

The extension only attempts to access an image after you explicitly interact with that image through the extension.

For example:

• Right-click an image.
• Choose Edit with AI.
• Enter a prompt.
• Press Generate.

The selected image's bytes are sent to our backend only with a generation request. The extension does not continuously scan or upload images from websites you visit, scrape web pages, or send source image URLs to the backend for server-side fetching.

How We Use Your Information

We use the information described above only as needed to:

• Provide image editing and image-generation functionality.
• Maintain your account.
• Track free and paid generation credits.
• Store your previous generated images and associated prompts.
• Process and manage your subscription.
• Prevent abuse, fraud, excessive automated usage, and unauthorized access.
• Maintain and improve the reliability of the service.

AI Processing

Images and prompts you submit are sent to third-party AI infrastructure used to generate or edit images. The current AI infrastructure may include fal.ai and Meta Muse image models.

These services process the submitted image and prompt in order to return the requested generated image. We only send information needed to perform the requested generation.

Data Storage

Account data, prompts, source images, generated images, and related generation metadata may be stored using our backend infrastructure and cloud database or storage providers. The current infrastructure may include Supabase and Railway.

Stored generations are associated with your authenticated account.

Local Extension Data

The extension stores a Supabase authentication session, one selected-image context containing the image URL, page URL, and timestamp, and temporary panel state in memory. The selected-image context expires after 30 minutes and is cleared when you sign out. Temporary panel state, including the current prompt and generated result, is not persisted by the extension.

The extension does not store browsing history, page HTML, lists of page images, generation history, or prompt history locally.

Payments

Paid subscriptions are processed by Stripe. Stripe Checkout and the Stripe Customer Portal open in normal browser tabs, and payment details are entered directly with Stripe.

We do not directly receive or store full payment-card details. We may store or process account-level subscription information such as subscription status, billing status, Stripe customer identifiers, and related payment metadata needed to operate FlowEdit.

Stripe processes payment information according to its own privacy practices.

Data Sharing

We do not sell your personal information.

We may share data only with service providers that are necessary to operate the extension, such as:

• authentication, database, and storage providers;
• backend hosting providers;
• AI inference providers; and
• payment processors.

These providers receive only the information reasonably required to perform their services.

Chrome Web Store User Data Policy

FlowEdit's use and transfer of user data complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

User data is used or transferred only as necessary to provide and improve FlowEdit's disclosed image-editing functionality, maintain account and subscription functionality, provide security and abuse prevention, and comply with applicable legal requirements.

FlowEdit does not sell user data, use user data for advertising, or use user data to determine creditworthiness or for lending purposes.

Data Security

We use reasonable technical safeguards designed to protect user data, including authenticated accounts, private backend storage, short-lived signed URLs for private images, server-side API credentials, rate limiting and abuse protections, and HTTPS communication.

No online system can guarantee absolute security.

Data Retention

We may retain account information, source images, prompts, generated images, and related generation records while your account is active or as reasonably necessary to provide the service.

Retention practices may change as the product develops. If account-deletion functionality is introduced, this policy will be updated accordingly.

Chrome Permissions

The extension may request permission to access website images so that it can retrieve an image you explicitly choose to edit. HTTP and HTTPS host access supports fetching the bytes of a selected image from arbitrary image websites without repeated per-site prompts.

The extension uses context-menu, side-panel, storage, and download permissions only to support its core image-editing workflow. It does not use these permissions to collect unrelated browsing activity, page content, or unselected images.

Children's Privacy

The extension is not intended for children under 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy as the extension changes. The latest version will be published on this page with an updated date.

Contact

For privacy questions or requests, contact: