Privacy Policy

1. What We Collect

When you sign up for Flomisma services, we collect your email address, name, and billing information. We also collect usage data (API call counts, session volumes) for the sole purpose of metering and billing. We do not collect, store, or log message payloads transmitted through the relay service.

2. How We Use It

Your data is used to provision accounts, process payments, send service notifications, and improve platform stability. We never sell personal data or use it for advertising.

3. Data Retention

Account data is retained for the duration of your account plus 90 days after closure. Usage metrics are anonymized and retained for 13 months for capacity planning.

4. Cookies

We use essential cookies for authentication and session security. With your consent, we may use analytics cookies to understand site usage. You can accept or decline optional cookies via the banner on first visit. Your choice is stored locally and can be recorded for compliance audit via our consent API.

5. Third-Party Processors

We use Stripe for payment processing, Supabase for database hosting, and Resend for transactional email. Each processor is SOC2-compliant and contractually bound to your data protection.

7. Related entities

Flomisma operates flomisma.com and the developer portal described in this policy. Separate entities in the Flomisma portfolio group provide financial systems operations and infrastructure services. If you use their products or licensed field-of-use deploys, those services may process data under their own privacy terms — even when they integrate Flomisma protocol components.

For diligence requests about entity structure, custody boundaries, or licensee relationships, see also our Terms of Service — Related entities and evaluator memo.

8. Your Rights

You may request access, correction, or deletion of your personal data at any timethrough our contact page. We will respond within 30 days.