Privacy

This page explains, plainly, what Support Flow Guide stores and why.

Account details. We keep your username, name, email, role, security settings, and timestamps like signup and last sign-in.

During a case. While a run is open, what you type is stored encrypted and deleted when it ends. Our server can't read it without your browser session.

Cookies. They keep you signed in and carry a key for your run. They're Secure and HttpOnly, 30-minute idle limit, 12-hour maximum. Choosing "remember this device" adds one more cookie.

No analytics of our own. We don't run visitor-tracking or advertising analytics.

Error monitoring. Optional error monitoring helps us find and fix bugs, using error categories and application code locations. Error messages, personal data, and database parameters are excluded.

Hosting. We host this site on Replit and manage domain and email through Cloudflare.

Retention. By default, we anonymize accounts 90 days after deactivation, keep audit records 1 to 2 years, and delete case records 180 days after completion, via a scheduled weekly job, except under legal hold.

Questions about your data? Email info@supportflowguide.com.