Effective February 9, 2026 · FlowForge Systems
1. The short version
FlowForge keeps your workspace data in your browser. Account details (email, hashed password, plan) and workspace state (workflows, run history, settings) persist locally on your machine. We do not sell data and there is no advertising.
2. What is stored, and where
Account records: your email, a SHA-256 hash of your password (the password itself is never stored), the plan on your workspace, and the workspace name and role you set during setup.
Workspace state: your workflows' node graphs, connector toggles, notification settings, and execution run history.
All of this lives in your browser's local storage under flowforge.* keys. Clearing site data or using the reset control in workspace settings removes it entirely.
3. What is never collected
Card data: checkout does not collect or store card numbers, expiry dates, or CVC.
Plaintext passwords: only irreversible hashes are stored locally.
Contacts, message bodies, or record contents beyond the fields a workflow of yours references.
4. Connected third-party tools
When you enable a connector (Slack, HubSpot, Sheets, and so on), the workflows you authorize can act on that tool. Those tools are governed by their own terms and privacy policies; FlowForge acts strictly within the scopes you grant.
5. Retention
Run history retention maps to your plan (7 / 30 / 90 days). Anything beyond that window is removed from the log automatically. Your account and workspace persist until you delete them.
6. Contact
Privacy questions go through the contact form — a human reads the mailbox within one business day.