Privacy policy

DataFlow is made by ARCED International LLC (“we”). This policy covers the DataFlow app, DataFlow accounts and this website. Questions go to hello@letdataflow.com.

The short version

Your survey data stays on your computer. We never receive it: not the interviews, not the answers, not the names in them. What we do receive is listed below, and most of it exists only once you have an account.

The app

The app keeps everything on the computer, encrypted, and talks only to the places listed on Security and privacy. From those, we receive:

• The licence check, once you sign in: your account, an install ID for the computer, the app's version and the operating system. It tells the app which plan you're on.
• Usage counts: how many times a day things like syncing, running checks or downloading were done, and how far setup got. Never survey data, names or values. They show us where people get stuck. They're on by default and one switch in Settings turns them off and deletes what's waiting to be sent.

The app also checks GitHub for updates and downloads models from Hugging Face or GitHub when you ask for them. Those services see the request, as any website does, and nothing else.

Your account

When you create a DataFlow account we keep:

• your name, email address and organisation, and how you sign in;
• your plan, seats and the team members you invite;
• if you start setting up a study here on the website, what you tell us about it (its name, country and interview languages, your side and role, your team's size and where its data comes from), until the app collects it to create the study;
• billing records: invoices, the plan paid for, and a tax ID if you give one.

Payments are handled by Stripe. We never see or store full card numbers. If you sign in with SurveyLoopr instead, SurveyLoopr tells the app your plan, and SurveyLoopr's own privacy policy covers that account.

If you choose Continue with Google, Google tells us your name, email address and profile picture. We use them only to sign you in and to address you, keep them with your account, and ask Google for nothing else: not your contacts, files, mail or calendar.

This website

To learn what helps people and what doesn't, this website measures how it's used, in two ways:

• Vercel Web Analytics counts visits and pages without cookies and without identifying anyone.
• Google Analytics records pages seen, buttons clicked (such as downloads and the plans), the steps of setting a study up here and the choices made in them (which side you're on, where your data is, never a study's name or an email address), and your browser, device and approximate country. Google shortens IP addresses before storing them. In the EEA, the UK and Switzerland it sets its cookies only after you click Allow; elsewhere it's on unless you click No thanks. Advertising features are off, and nothing is sold or used for ads.

Your choice is kept in this browser. To change it:

Our host also keeps standard server logs (such as IP addresses and pages requested) for security.

Who processes it for us

Only to run DataFlow, and only what each needs:

• Vercel hosts this website and the account service, and counts visits;
• Google measures how the website is used (Google Analytics), as above, and signs you in if you choose Continue with Google;
• Supabase stores accounts;
• Stripe takes payments and keeps billing records;
• Resend sends account emails;
• GitHub hosts the app's downloads and updates.

We don't sell personal information or share it for advertising.

How long we keep it

Account information for as long as the account is open, and afterwards only what tax and accounting law makes us keep. Usage counts are kept to see patterns across all users, not to follow one person.

Your choices

• Turn usage counts off in the app's Settings at any time.
• Ask to see, correct, export or delete what we hold about you by writing to hello@letdataflow.com. Deleting your account doesn't touch any survey data, which was never with us.
• If you think we've handled your information wrongly, tell us, and you can also complain to your data protection authority.

Children

DataFlow is for professionals and isn't meant for children under 16.

Changes

If this policy changes, the date above changes. If the change matters, account holders hear about it by email first.