Privacy Policy
Last updated: September 28, 2026
Flowa is the professional-services practice of Adapty. This policy explains what personal data we collect through flowa.agency (the “Site”), why we collect it, who we share it with and what rights you have. It applies to visitors worldwide, including the European Economic Area, the United Kingdom, Switzerland and the United States.
1. Who we are
The controller of your personal data is Adapty Tech Inc., a company registered in the state of Delaware, 2093 Philadelphia Pike #9181, Claymont, DE 19703, USA (“Flowa”, “we”, “us”). For any privacy question or request, write to hello@flowa.agency.
2. What we collect
What you give us. When you use the booking form, we collect your name, work email, company or app link, and the message you write. When you book a call, the scheduling tool collects the time slot you pick and any answers you add.
What is collected automatically. With your request we record the page you sent it from, the page that referred you, campaign tags in the link you followed (UTM parameters) and an approximate country derived from your IP address. We do not store the IP address itself. To keep spam out, Cloudflare Turnstile checks that the form is sent by a person; it processes technical signals such as your IP address and browser characteristics. Our hosting provider also processes standard technical data, such as IP address and browser type, to deliver and protect the Site.
We do not ask for, and ask you not to send us, sensitive data such as health, financial or government ID information.
3. Why we use it
- To answer your request and hold the call you booked. Legal basis under the GDPR: steps taken at your request before entering into a contract (Art. 6(1)(b)).
- To follow up about our services in connection with your request and keep a record of our conversation. Legal basis: our legitimate interest in developing business relationships (Art. 6(1)(f)). You can object at any time.
- To protect the Site and the form from spam and abuse. Legal basis: our legitimate interest in security (Art. 6(1)(f)).
- To meet legal obligations, where they apply (Art. 6(1)(c)).
We do not add you to marketing mailing lists without your consent, and we do not make decisions about you based solely on automated processing.
4. Who we share it with
We share personal data only with the team members who handle your request and with service providers that process it on our behalf, under contracts that require them to protect it:
- Cloudflare, Inc. — hosting, content delivery and bot protection (Turnstile);
- Google LLC — Google Workspace, where booking requests are stored;
- Slack Technologies, LLC — internal notification to our team;
- Calendly LLC — scheduling, when you book a call.
We may also disclose data when the law requires it, to protect our rights, or to a successor in a merger or acquisition. We do not sell your personal information and do not share it for cross-context behavioural advertising.
5. International transfers
Adapty Tech Inc. and several of our service providers are located in the United States. For data transferred from the EEA, the UK or Switzerland, Adapty Tech Inc. relies on its certification under the EU-U.S. Data Privacy Framework, the UK Extension to it and the Swiss-U.S. Data Privacy Framework, described inAdapty’s Privacy Policy, and, where needed, on the European Commission’s Standard Contractual Clauses.
6. How long we keep it
We keep booking requests and related correspondence for up to 24 months after our last contact with you. If you become a client, we keep what is needed for the engagement for as long as our agreement requires. You can ask us to delete your data sooner at any time.
7. Your rights
If you are in the EEA, the UK or Switzerland, you have the right to access your data, correct it, have it deleted, restrict or object to its processing, receive it in a portable format, and withdraw any consent you gave. You may also complain to your local data protection authority.
If you are in the United States, depending on your state (including California under the CCPA/CPRA), you have the right to know what personal information we collect and how we use it, to access it, correct it and have it deleted, and to opt out of its sale or sharing. We do not sell or share personal information, and we honour Global Privacy Control signals as an opt-out request. We will not treat you differently for exercising your rights. You may use an authorised agent to make a request on your behalf.
To exercise any right, email hello@flowa.agency. We may ask you to confirm your identity from the email address you used with us, and we reply within one month, or sooner where the law requires.
8. Cookies
The Site sets no cookies of its own and uses no analytics or advertising cookies or pixels. Cloudflare Turnstile may use strictly necessary cookies or similar storage to run its security check. When you open the booking calendar, Calendly may set cookies as described in its own cookie policy.
9. Security
The Site is served only over an encrypted connection, access to booking requests is limited to the team members who need it, and the form is protected against automated abuse. No method of transmission or storage is completely secure, but we work to protect your data and to act quickly if something goes wrong.
10. Children
The Site is meant for businesses and is not directed to children. We do not knowingly collect personal data from anyone under 16.
11. Changes to this policy
We may update this policy as the Site changes. The date at the top shows the latest version.
12. Contact
Adapty Tech Inc. (Flowa), 2093 Philadelphia Pike #9181, Claymont, DE 19703, USA ·hello@flowa.agency