Privacy Policy

At Beaver Flow, we are deeply committed to protecting your privacy. We understand that your personal information and the content you process through our service are sensitive. This Privacy Policy explains how we handle your information, focusing on our commitment to minimizing data collection and maximizing your control.

Please read this policy carefully. By using Beaver Flow, you agree to the terms outlined below.

Information We Collect

We collect the absolute minimum information necessary to provide and maintain our service.

Account Information

When you create an account, we collect your email address. This is necessary to manage your account, authenticate you, and communicate with you about the service.

Subscription and Payment Information

We use Stripe, a third-party payment processor, to handle subscriptions and payments. When you subscribe, you provide your payment information directly to Stripe. We do not collect, store, or have access to your full payment card details or other sensitive payment information on our servers. Your payment information is handled solely by Stripe, subject to their privacy policy.

Third-Party Service Credentials (e.g., TickTick OAuth)

If you choose to connect your Beaver Flow account with third-party services like TickTick to sync tasks, we collect and store the necessary OAuth tokens or credentials provided by those services. These credentials are encrypted to protect your access to these third-party services. This information is collected only when you explicitly authorize the connection.

User Input and AI-Generated Task Data

This is a core privacy feature of our service. When you use our task splitting feature by providing voice or text input, this input is sent directly to the selected AI provider's API (e.g., OpenAI, Google Gemini) for processing. The AI's response (the list of generated tasks) is sent directly back to your browser and is stored only in your browser's local storage. We do not store your input content or the AI-generated task list on our servers at any point.

  • The input content is processed by the AI provider immediately and is not retained by us.
  • The task list stored in your browser's local storage is temporary. It is deleted from local storage when you successfully send the tasks to a connected service (like TickTick), or when you clear your browser's cache.

Non-Personally Identifiable Usage Data

We may collect aggregated, anonymized data about how the service is used (e.g., frequency of feature use, general traffic patterns). This data does not identify you personally and is used solely for analyzing service performance and improving the user experience.

How We Use Your Information

We use the information we collect solely for the purposes described below:

  • To Provide and Maintain the Service: We use your account information to manage your access to Beaver Flow and provide the core functionality.
  • To Process Subscriptions and Payments: We use the information processed by Stripe to manage your subscription status and provide access to paid features.
  • To Enable Third-Party Integrations: We use your encrypted OAuth credentials to facilitate the sending of tasks from your browser's local storage to connected services like TickTick, only when you initiate this action.
  • To Process Task Splitting Requests: Your input content is used solely to generate tasks via the AI API for your immediate use. The AI-generated task list is used only within your browser for editing and sending to connected services. We do not use your input or the generated tasks for any other purpose, such as training AI models, marketing, or analysis.
  • To Improve the Service: We use non-personally identifiable usage data to understand how our service is used and make improvements.
  • To Communicate with You: We use your email address to send you important service-related notifications (e.g., account updates, service changes). We do not use your email for marketing purposes without your explicit consent.

Information Sharing

We share your information only in limited circumstances as described below:

  • With AI Providers: We share your input content with the AI provider (e.g., OpenAI, Google Gemini) to process your task splitting request. Crucially, we do not share your personal identity information with the AI provider. Please refer to the AI provider's privacy policy for details on how they handle the data they receive.
  • With Payment Processor: Your payment information is shared directly with Stripe for processing subscriptions. We do not handle or store this sensitive data ourselves.
  • With Third-Party Task Services: When you choose to send tasks to a connected service like TickTick, the task data from your browser's local storage is sent to that service using your stored OAuth credentials. This action is initiated by you. Your use of these third-party services is governed by their respective privacy policies.
  • With Other Service Providers: We may use other third-party service providers (e.g., hosting providers, email delivery services) to operate and maintain our service. These providers are given access to information only as necessary to perform their services and are bound by confidentiality obligations.
  • For Legal Reasons: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government request).

We do not sell, rent, or otherwise share your personal identity information with third parties for their marketing purposes.

Data Storage and Security

  • Server Storage: Your account information (email) and encrypted OAuth credentials are stored securely on our servers. We implement technical and organizational measures designed to protect this data from unauthorized access, use, or disclosure.
  • Local Browser Storage: Your input and AI-generated task lists are stored only in your browser's local storage. We do not have access to this data stored in your browser. The security of this data depends on the security of your device and browser.
  • Overall Security: We are committed to protecting your information and take reasonable steps to ensure its security. However, please be aware that no method of transmission over the internet or method of electronic storage is 100% secure.

Data Retention

We retain your account information and encrypted OAuth credentials for as long as your account is active to provide you with the service. Non-personally identifiable usage data may be retained for analytical purposes.

As stated, your input and AI-generated task lists are not stored on our servers and are temporary in your browser's local storage, deleted as described in Section Information We Collect.

Note: At this time, we do not offer a self-service account deletion feature. If you wish to have your account information removed, please contact us at support@thebeaverflow.com.

Your Rights

Given the limited personal information we store, your primary rights relate to accessing or correcting your account information. For data stored locally in your browser (your task lists), you can manage this data by clearing your browser's cache or by using the service's functionality to send tasks to a connected service, which deletes the local data.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. We encourage you to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions or concerns about this Privacy Policy or our data handling practices, please feel free to contact us at:

support@thebeaverflow.com

Agreement

By using Beaver Flow, you signify your acceptance of this Privacy Policy. If you do not agree to this policy, please do not use our service.