Privacy Policy

Effective Date: October 14, 2026 • Flowvya Version 1.0.0

Our Zero-Trust Privacy Commitments

100% Local Processing: Recording, screenshot capture, annotations, and document compilation (PDF/HTML) happen entirely inside your local Chrome browser.
Zero Telemetry & Tracking: We do not track your browsing history, run analytics scripts, or collect diagnostic telemetry.
Automatic Sensitive Field Masking: Password inputs and payment card fields are automatically detected and omitted from step capture.
Opt-In Zero-Knowledge Cloud Sharing: Web sharing links are encrypted on your device with AES-256-GCM. The decryption key lives exclusively in the URL fragment (#key=...) and never touches server logs.

1. Single Purpose & Scope

Flowvya is a specialized browser productivity extension designed to turn software workflows into step-by-step Standard Operating Procedures (SOPs), interactive guided tours, and training manuals.

Flowvya only activates when explicitly initiated by you clicking "Start Recording" or using keyboard shortcut Alt + Shift + S. It does not monitor, analyze, or intercept web browsing activity outside of an active recording session.

2. User Data Collection

Flowvya collects information strictly on-demand during active user-initiated recording sessions. Outside of an active recording session, the extension is dormant and collects zero data.

Data Collected During Active Recording:

Visible Viewport Screenshots: High-resolution screenshots of the visible browser area at the exact moment you click or interact with an element to document the workflow step.
DOM Element Interaction Metadata: Tag name, button or link text, accessibility label, and bounding box coordinates to automatically draft instructional step descriptions (e.g., "Click button 'Save Changes'").
User-Authored Content: Custom step descriptions, annotations (arrows, badges, text notes), guide titles, and branding you add in Flowvya Studio.

        What Flowvya NEVER Collects:
        Your general browsing history, search history, visited URLs outside recording, bookmarks, or cookies.
Passwords, API keys, or credit card inputs (fields with type="password" or credit card
            attributes are automatically masked at the DOM level).
Personally Identifiable Information (PII) such as legal names, personal emails, physical addresses, or
            phone numbers.
Keystroke logging outside targeted input steps or background audio/video recordings.

      

3. User Data Handling & Processing

All captured workflow data is handled and processed 100% locally on the user's client machine inside the browser runtime.

In-Memory Image Processing: Screenshot cropping, smart zoom focusing, vector annotation rendering, and redactions are processed directly in your browser using HTML5 Canvas APIs.
Irreversible Pixel Redaction: When a user draws a redaction box in Flowvya Studio, underlying pixel data is permanently destroyed in-canvas before exporting documents or sharing guides.
Client-Side Document Compilation: PDF training manuals and standalone offline HTML simulations are compiled locally on your device via jspdf and bundled offline templates with zero remote server calls.
Zero AI Model Training: Your workflow data, screenshots, and internal company procedures are never used to train, test, or fine-tune artificial intelligence models or machine learning algorithms.

4. User Data Storage & Retention

All guide data, screenshots, and drafts are saved directly to your local computer via Chrome's isolated storage sandbox:

Storage Mechanism: chrome.storage.local (sandboxed to the Flowvya extension origin).
Storage Location: Stored locally on the user's physical machine only. No data is stored on remote servers by default.
Retention Period: Data is retained locally on the device for as long as the user chooses to keep it.

        How Users Can Delete Their Data:
        Delete Individual Guides: You can delete any saved guide at any time from the Local Guide
            Library inside Flowvya Studio.
Complete Wipe of All Data: Uninstalling the Flowvya extension from Chrome (or clearing
            extension site data in Chrome Settings) immediately and permanently removes all stored guides, screenshots,
            and preferences from your system.

      

5. User Data Sharing & Third-Party Disclosure

Zero Sale of User Data: Flowvya does NOT sell, rent, lease, trade, or transfer user data to third parties, advertising networks, data brokers, or marketing companies under any circumstances.

Zero Third-Party Trackers: Flowvya includes zero third-party advertising SDKs, Google Analytics, social media trackers, or telemetry scripts.

Optional Zero-Knowledge Cloud Sharing: Flowvya includes an optional cloud sharing feature to share view-only web guides with teammates or clients. If and only if you explicitly click "Generate Share Link":

Client-Side Encryption: The guide data and screenshots are encrypted on your local computer before leaving your browser using the native Web Crypto API with AES-256-GCM.
Zero-Knowledge Key Storage: The 256-bit encryption key is placed exclusively in the URL hash fragment (#key=...). Under internet standard RFC 3986, the URL hash is processed strictly on the client device and is never transmitted over HTTP to web servers.
Cloud Storage: The cloud database stores only unintelligible encrypted ciphertext blobs with zero access to decryption keys.

6. Chrome Extension Permissions Justification

In accordance with Chrome Web Store Minimum Permissions Policies, Flowvya requests only the permissions strictly required for its core functionality:

Permission	Type	Technical Purpose
`storage`	API	Saves draft guides, settings, and Guide Library records locally in your browser.
`unlimitedStorage`	API	Allows saving multi-step workflows with high-DPI screenshots without hitting Chrome's 5MB quota.
`tabs`	API	Detects active tab switches during recording to avoid mismatches and opens Flowvya Studio upon finishing.
`activeTab`	API	Captures visible viewport screenshots when you click or interact with an element during recording.
`scripting`	API	Injects the interactive live tour spotlight overlay and the 1-Step Re-Snap recapture helper into target pages.
`<all_urls>`	Host	Enables capturing workflows on any web application, internal dashboard, or SaaS tool the user records.

7. Chrome Web Store Limited Use & Regulatory Compliance

Flowvya adheres strictly to the Chrome Web Store User Data Policy, including the Limited Use requirements:

The use of information received from Chrome APIs adheres to Chrome Web Store User Data Policy.
Data is accessed solely to provide and improve the single-purpose SOP documentation experience.
Data is not transferred to third parties, except as necessary to provide core features or comply with applicable laws.
Data is not used or transferred for serving personalized, retargeted, or interest-based advertisements.

Children's Privacy (COPPA): Flowvya is a workplace documentation tool for professionals and does not knowingly collect personal data from children under 13.

8. Contact Privacy Team

We may update this Privacy Policy as new features are added to Flowvya. Any updates will be reflected on this page with a revised "Effective Date".

If you have questions, feedback, security assessments, or privacy inquiries regarding Flowvya's architecture, please contact our team directly:

Primary Support Email: hello.flowvya@gmail.com

Privacy Inquiries & Compliance: contact.flowvya@gmail.com

Chrome Web Store: You can also submit inquiries or support tickets directly through the Support tab on Flowvya's official Chrome Web Store listing. Our team responds within 48 business hours.