Privacy Policy

1. About Flokzy

Flokzy is a project-management workspace for small teams: tasks, boards, cycles, roadmaps, an inbox, comments, and team ownership. It optionally connects to GitHub, Telegram, Discord, Google (calendar and mail), and AI coding assistants so your work stays in one place. This policy explains what we collect and how we use it.

2. What We Collect

We collect your email address, name, and the identifiers from the providers you connect (for example your GitHub, Telegram, or Discord account). We store the content you create in the workspace — tasks, projects, comments, and activity. When you connect an integration we process the related metadata (for GitHub: event types, PR and issue titles, authors, labels, and CI statuses). We never read your source code or repository file contents.

3. How We Use Your Data

We use your data to operate the workspace, sync your connected tools, display dashboard analytics, process payments, and improve the service. We do not sell, rent, or share your data with third parties for marketing purposes.

4. Legal Bases for Processing

Where the GDPR applies, we process personal data on these legal bases: contract (to provide the workspace you signed up for), legitimate interests (to secure, maintain, and improve the service), legal obligation (for tax and accounting records), and consent (for optional product analytics, which you can decline in the cookie banner).

5. Data Storage and Security

Data is encrypted at rest (AES-256) and in transit (TLS 1.3). Integration access tokens are stored encrypted. We use PostgreSQL with daily encrypted backups retained for 30 days.

6. Subprocessors

We rely on the following third-party processors. Each has its own privacy policy and processes data only to provide its service:

• Paddle — Merchant of Record for billing, payments, and tax.
• PostHog — product analytics (only if you opt in).
• Sentry — error and performance monitoring.
• GitHub, Telegram, Discord — when you connect those integrations.
• Google — calendar and mail integration, when you connect a Google account.
• Anthropic — AI features (for example assistant and MCP integrations), when you use them.

7. Data Retention

Workspace activity history is retained according to your current plan: 14 days on Free and 90 days on Team. Cancelling a paid subscription does not delete your workspace; after the cancellation takes effect, data and retention follow the resulting plan. Permanent account deletion removes live account data and sole-member workspaces, but requires you to transfer ownership of shared workspaces and resolve any active paid subscription first. Limited copies may remain temporarily in backups or security logs, and billing records may be retained where required by law.

8. Your Rights (GDPR & CCPA)

Depending on where you live, you have the right to access the personal data we hold about you, correct inaccurate data, request deletion ("right to be forgotten"), obtain a portable copy of your data, restrict or object to certain processing, and withdraw consent at any time. California residents may request disclosure of the categories of data collected and opt out of any "sale" of personal information — we do not sell personal information.

You can export your data as JSON at any time from the dashboard, and request deletion in-app or by emailing privacy@flokzy.com. We respond to all requests within 30 days and never charge for exercising these rights.

9. Cookies

We use an essential session cookie for authentication. Optional product analytics (PostHog) are loaded only if you accept them in the cookie banner; you can change your choice at any time.

10. Contact

Questions about privacy or to exercise your rights? Email privacy@flokzy.com.