Privacy, without the guesswork

Flowvya Privacy Policy: Your workflow stays yours.

Flowvya processes your recordings locally in the browser, keeps your data under your control, and doesn't track you across the web.

Chrome Web Store CompliantEffective October 28, 2026 • Version 1.0.0
Shield with a lock inside a browser window, marked local only

Privacy at a glance

The key ways Flowvya protects your data.

Local-first processing

Recordings are processed and stored in your browser.

No background tracking

No analytics, cookies, or remote trackers.

Sensitive data masking

Password fields are omitted automatically; blur anything else.

You control your exports

Export, share, or delete your guides anytime.

1

User Data Collection

Flowvya is an on-demand workflow documentation tool that activates only when explicitly initiated by the user (by clicking “Start Recording” in the extension popup or pressing Alt + Shift + S). Outside of an active recording session, Flowvya is completely dormant and collects zero data.

Data Collected During Active Recording:

  • Visible Viewport Screenshots: When you click or type during a recording session, Flowvya captures an image of the current visible browser tab to document the step.
  • DOM Element Interaction Metadata: Element tag name, button or link text, accessibility label, and bounding box coordinates to automatically generate instructional step titles (e.g., “Click button 'Save Changes'”).
  • User-Authored Edits & Annotations: Any custom descriptions, highlight rectangles, arrows, step re-ordering, or chapter titles created within Flowvya Studio.

What Flowvya never collects

  • Browsing history, search queries, or visited URLs outside active recording sessions.
  • Passwords, credit card numbers, or authentication tokens (inputs with type="password" are automatically detected and omitted from capture).
  • Personal identification information such as names, emails, physical addresses, or phone numbers.
  • Background keystroke logging, microphone surveillance, or any audio/video recording.
Browser window with a padlock

Processed on your device

All screenshot capture, redaction, and guide generation happens locally in your browser. Nothing is sent to our servers for processing unless you choose to create an encrypted share link.

2

User Data Handling & Processing

All captured workflow data is handled and processed entirely on the client device inside your browser. Flowvya does not transmit your raw recording data to external servers for processing, indexing, OCR, or transcription.

  • Client-Side Image Processing: High-resolution screenshot cropping, canvas rendering, vector annotations, and blur redactions are executed in-memory using browser HTML5 Canvas APIs.
  • Irreversible Pixel Redaction: When you use the Sensitive Information Blur tool, underlying pixels are permanently replaced and destroyed directly on canvas prior to export.
  • Client-Side Export Generation: PDF training manuals and standalone offline HTML simulations are compiled locally on your computer via jspdf and bundled script generators without communicating with remote servers.
  • No AI Model Training: Your workflows, screenshots, and internal processes are never used to train, evaluate, or fine-tune artificial intelligence or machine learning models.

In-Memory Canvas

Image transforms and crop buffers execute strictly in your RAM.

Permanent Redaction

Blurred pixels are destroyed; no inspection tool can recover them.

Zero AI Scraping

Your business IP is never fed to LLMs or training datasets.

3

User Data Storage & Retention

Flowvya stores all guide sessions, screenshot assets, and user preferences in Chrome's isolated, sandboxed local storage:

Storage Engine

chrome.storage.local

Sandboxed strictly to Flowvya extension ID; other sites cannot access it.

Storage Location

Physical Local Device Only

Lives on your machine's local drive. Zero automatic cloud sync.

Retention Policy

User-Controlled Lifecycle

Retained locally until explicitly deleted by you or on extension removal.

How Users Can Delete Their Data:

1. Delete Individual Guides

Open the Local Guide Library inside Flowvya Studio, click the trash icon next to any guide, and confirm deletion to permanently erase it from local storage.

2. Complete Wipe of All Data

Uninstalling Flowvya from Chrome (right-click icon → “Remove from Chrome”) or clearing extension site data in Chrome Settings instantly deletes all guides, screenshots, and settings.

4

User Data Sharing & Third-Party Disclosure

Zero Sale of User Data

Flowvya does NOT sell, rent, trade, lease, or transfer user data to third parties, data brokers, advertising networks, or marketing firms under any circumstances.

Zero Third-Party Trackers

The extension does not embed third-party advertising SDKs, Google Analytics, social media trackers, or advertising beacons.

Optional Zero-Knowledge Cloud Sharing:

Flowvya includes an optional cloud sharing feature to share view-only web guides with teammates or clients. If and only if you explicitly click “Generate Share Link”:

  • Client-Side AES-256-GCM Encryption: The guide data and screenshots are encrypted on your local computer before any data leaves your browser.
  • Zero-Knowledge Key Architecture: The cryptographic key is stored exclusively in the URL hash fragment (#key=...). By internet standard RFC 3986, hash fragments are strictly client-side and are never transmitted in HTTP headers to web servers.
  • Cloud Host Storage: The cloud database stores only unintelligible encrypted ciphertext blobs without access to the decryption keys.
RFC 3986 Hash Fragment ArchitectureClient-Side Only
https://flowvya.com/g/8f2k#key=e8d1a3f0c97b2046

The highlighted hash fragment (#key=...) is processed exclusively by your recipient's browser. Our cloud servers never see or log this key.

5

Chrome Extension Permissions Justification

In adherence to the Chrome Web Store Minimum Permissions Policy, Flowvya requests only the permissions strictly necessary for its documented features:

PermissionTypeTechnical Purpose
storageAPISaves draft guides, settings, and Guide Library records locally in your browser sandbox.
unlimitedStorageAPIAllows saving multi-step guides with high-resolution screenshot imagery without hitting browser storage caps.
tabsAPIDetects active tab switches during recording to maintain workflow sequence and opens Flowvya Studio upon finishing.
activeTabAPICaptures visible viewport screenshots only when you click or interact with an element during an active recording session.
scriptingAPIInjects the interactive guided tour overlay and the 1-Step Re-Snap recapture helper into target pages.
<all_urls>Host PermissionAllows documenting workflows across any web application, CRM, internal dashboard, or SaaS tool you choose to record.
Permissions We Explicitly Do NOT Request:We do not request webRequest, cookies, management, bookmarks, history, or geolocation. Your private browsing profile remains inaccessible.
6

Chrome Web Store Limited Use & Regulatory Compliance

Flowvya complies fully with the Chrome Web Store User Data Policy, including the Limited Use requirements:

The use of information received from Chrome APIs adheres strictly to the Chrome Web Store User Data Policy.
Data is accessed solely to provide and improve the single-purpose SOP workflow documentation experience.
We do not transfer user data to third parties, except as strictly required to provide core user-initiated features.
We do not use or transfer user data for serving personalized, retargeted, or interest-based advertisements.

Children's Online Privacy Protection Act (COPPA):

Flowvya is an enterprise and business productivity tool designed for adult professionals. We do not knowingly collect or solicit personal information from children under the age of 13.

GDPR & CCPA Readiness:

Because data is stored on your device, you possess total sovereignty over your information. You can exercise your rights to access, portable export, and irreversible erasure at any time via 1-click in-app controls.

7

Contact Privacy Team

If you have any questions, feedback, security assessments, or privacy concerns regarding Flowvya's architecture, our dedicated team is here to assist:

Primary Support
hello.flowvya@gmail.com

Product inquiries, feature feedback, and general support.

Privacy & Compliance Officer
contact.flowvya@gmail.com

Security audits, vendor questionnaires, and compliance reviews.

SLA Commitment: Response Within 48 Business Hours

Our privacy engineers review all inbound security notices promptly.

Contact Support Page