Privacy policy

AwesomeFlows (awesomeflows.com) is operated by Awesome Flows, 319 Clematis St, Ste 300, West Palm Beach, Florida 33401, USA. Questions about this policy or your data: hello@awesomeflows.com.

• Account data. Your email address. We use passwordless sign-in links, so there is no password to store. Our auth provider (Supabase) also keeps standard sign-in metadata such as sign-in timestamps and IP addresses.
• Subscription data. Your plan tier and a Stripe customer reference. We never see or store your card number, payment details go directly to Stripe, our payment processor, and all we keep is the Stripe customer ID and your subscription status.
• Newsletter. If you subscribe to the digest, the email address you gave us for it.
• Technical logs. Standard server logs (IP address, user agent, requested pages) kept by our hosting provider for operations and abuse prevention.

Usage and advertising data. When you visit awesomeflows.com, our analytics tool (PostHog) and, where enabled, the Google Ads tag and Meta Pixel collect information about your visit: pages viewed, the referring page, approximate location derived from your IP address, browser and device type, and cookie or device identifiers. A first-time sign-up is sent as a Google Ads conversion when advertising tags are allowed. A purchase is included when that conversion is connected. See "Analytics and advertising" and "Cookies" below.

We do not collect card numbers, government IDs, or precise location.

The screenshots and videos in the library are captures of publicly accessible pages on third-party e-commerce storefronts. They are not data about you, and any brand names or logos visible in captures belong to their respective owners.

• Signing you in and keeping your session working (email, auth cookies).
• Charging and managing your subscription (Stripe records).
• Sending sign-in links and, if you opted in, the digest (email).
• Keeping the service secure and diagnosing problems (logs).
• Understanding how the site is used so we can improve it (analytics).
• Measuring whether our ads lead to sign-ups and purchases, and showing our ads to people who have visited our site, where an advertising tag is enabled (advertising).

We do not sell your personal data for money. When advertising tags are active, Google and, where the Meta Pixel is enabled, Meta receive information about your visit as described below. Some US state laws, including California's, treat that as "sharing" for cross-context behavioral advertising. You can opt out as described in "Your choices and opt-out".

• Supabase, authentication, database, and file storage.
• Stripe, payment processing and billing. Card data is collected and held by Stripe under its own privacy policy; it never touches our servers.
• Vercel, website hosting and server logs.
• Resend, delivery of sign-in and account emails.
• PostHog, product analytics (US-hosted).
• Google (Google Ads), ad conversion measurement and remarketing.
• Meta Platforms (Facebook and Instagram ads), ad conversion measurement and remarketing, when the pixel is enabled.

PostHog. We use PostHog to see which pages are used and where people get stuck. Where analytics cookies are not allowed, PostHog runs in memory and does not store a cookie, and we do not attach the visit to an account. Where they are allowed, we store the first page, the referrer, and the ad click (campaign parameters and gclid) on this site. When an account is created we record a sign-up, and when a Pro checkout finishes we record that purchase, both against the account id. We do not send your email address to PostHog.

Google Ads conversion tracking. We use the Google Ads tag (gtag.js) to learn whether someone who clicked one of our Google ads went on to sign up or buy a plan. Google receives the page you are on, your IP address, browser information, and identifiers stored in cookies, and may link this to your Google account if you are signed in to Google. Google's use of this data is governed by its own privacy policy: https://policies.google.com/privacy. How Google uses data from sites that use its services: https://policies.google.com/technologies/partner-sites.

Meta Pixel. When the Meta Pixel is enabled, we use it to measure whether our ads on Facebook and Instagram lead to sign-ups or purchases, and to show our ads to people who have visited our site. Meta receives the page you are on, your IP address, browser information, and identifiers stored in cookies, and may link this to your Facebook or Instagram account. We do not send Meta your email address or other account details. See Meta's privacy policy: https://www.facebook.com/privacy/policy.

We do not send either company your card details, your saved captures, or the contents of your account.

We use these cookies and similar technologies (such as local storage):

Analytics and advertising cookies stay off for visitors in the EU, the EEA, the UK, Switzerland, and Canada until they accept. Elsewhere they are on until a visitor declines. They stay off for advertising when a browser sends Global Privacy Control, and accepting the banner in that case allows analytics cookies only. You can block or delete cookies in your browser settings. Blocking essential cookies will sign you out. Blocking analytics or advertising cookies does not affect how the site works.

• Cookie banner. We ask every visitor to accept or decline cookies for analytics and ads. The two choices are shown the same way. In the EU, the EEA, the UK, Switzerland, and Canada, analytics and advertising cookies stay off until you accept. Elsewhere they stay on until you decline. Your choice is stored in a cookie on this site for 12 months, and you can change it from the Cookie settings link in the footer. Decline deletes Google click cookies already stored on this site. If your browser sends Global Privacy Control, accepting does not turn advertising cookies on.
• Google ads personalization: https://myadcenter.google.com (or https://adssettings.google.com).
• Meta ads: https://www.facebook.com/adpreferences and, to disconnect activity from other sites, https://www.facebook.com/off_facebook_activity.
• Industry opt-outs: https://optout.aboutads.info (DAA), https://optout.networkadvertising.org (NAI), and, in the EU/UK, https://www.youronlinechoices.eu.
• Browser controls: block third-party cookies, or use an extension or browser that blocks trackers.
• Global Privacy Control: if your browser sends a GPC signal (https://globalprivacycontrol.org), we treat it as a request to opt out of sharing for advertising, and we do not load the Google Ads tag or Meta Pixel for you. Accepting the banner does not turn those advertising tags on.
• Opt out by email: email hello@awesomeflows.com with the subject "Do not sell or share" and we will stop advertising use of your data that we control.

Account data is kept while your account exists and deleted within 30 days of a deletion request. Stripe billing records are retained as long as tax and accounting law requires. Server logs rotate on our providers' standard schedules. Analytics data is kept for the retention period configured in our PostHog project. Advertising data held by Google and Meta is kept under their own retention policies.

You can request a copy of your data, correct it, or delete your account and data by emailing hello@awesomeflows.com. If you are in the EEA, UK, or California, local law gives you these rights formally (access, correction, deletion, portability, and objection); we honor them for everyone regardless of location. California residents also have the right to opt out of the "sharing" of personal information for cross-context behavioral advertising (see "Your choices and opt-out"), and we will not treat you differently for using any of these rights. We do not knowingly collect data from children under 16.

If we change this policy, we will update the effective date above and, for material changes, email account holders. See also our Terms of Service.