Privacy Policy

1. Who we are

Flowdemi ("we", "us") operates the website flowdemi.com, a platform that connects researchers and medical professionals with services, collaborators, datasets, mentorship and educational content. This policy applies to the website and the services offered through it.

2. Information we collect

Depending on how you use Flowdemi, we collect:

• Account information: your name, email address, and a hashed password if you register with email. We never store your password in readable form.
• Google sign-in information: if you choose to continue with Google, we receive your name, email address and whether Google has verified that address. We never receive your Google password.
• Content you submit: project requests, support tickets, messages, attachments, collaboration or mentorship applications, and any files you upload.
• Payment records: the amount, status and reference of a payment. Payments are processed by an external payment gateway; we do not see or store your card number.
• Technical data: basic server logs (such as IP address, browser type and the pages requested) and the cookies described below.

3. How we use your information

We do not sell your personal information and we do not use it for third-party advertising.

• To create and secure your account and let you sign in.
• To deliver the services you request, such as handling projects, tickets and collaboration requests.
• To send service emails: email verification, password resets and notifications about your projects and tickets.
• To prevent abuse, investigate security issues and keep the platform reliable.
• To meet legal obligations.

4. Signing in with Google

When you use "Continue with Google", we request only the basic scopes openid, email and profile. We use this information solely to create your account or sign you in, and to mark your email address as verified.

We do not access your Google contacts, Drive, Gmail, calendar or any other Google data, and we do not share Google user data with third parties. Flowdemi's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

You can remove Flowdemi's access at any time from your Google Account permissions page. To delete your account and the data we hold about you, contact us at the email below.

5. Who we share information with

We share information only where it is needed to provide the service:

• Specialists and collaborators assigned to your project, who see the details needed to do the work.
• Our payment gateway, to process payments you make.
• Our email delivery provider, to send service emails.
• Authorities, where we are legally required to do so.

6. Cookies

We use only essential cookies: a session cookie that keeps you signed in, security cookies that protect forms and sign-in, and a preference cookie that remembers your language and theme. We do not use advertising or third-party tracking cookies.

7. Retention and security

We keep your information for as long as your account is active and as needed to provide the service, resolve disputes and meet legal obligations. Passwords are stored as one-way hashes, traffic is encrypted over HTTPS, and access to personal data is limited to what is necessary. No system is perfectly secure, but we work to protect your data.

8. Your rights

You may ask us to show you the personal information we hold about you, correct it, or delete your account and associated data. Some records, such as payment history, may need to be kept for legal or accounting reasons. Contact us using the email below and we will respond as soon as we reasonably can.

9. Children

Flowdemi is intended for adults and professionals. We do not knowingly collect personal information from children under 16.

10. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. If a change is significant we will notify you on the site or by email.