Privacy notice
Information and purposes
We use the member ID, email and display name received through sign-in to identify accounts. Saved inquiries, attachments, reviews, credit records and payment identifiers support the requested service, usage accounting, refunds and disputes. The public contact form collects a reply email, topic and message. Submission is not consent to marketing.
Service providers and visibility
Sites uses Cloudflare-based hosting and storage. OpenAI API processes paid reviews and PayPal handles payment authorization and billing. Requesting a paid review sends the selected inquiry and extracted conditions to OpenAI with response storage disabled; this setting does not mean all providers discard operational or security records. Inquiries, files and reports are protected by account permissions and are not public to other members. Flow.kr does not store card numbers or PayPal passwords.
Cookies and browser storage
Authentication uses the sign-in provider’s session handling. A language preference cookie lasts up to one year; currency preference is stored in your browser. An unfinished inquiry is temporarily kept in tab session storage so it can survive sign-in or a language switch. The site’s sign-out button clears that draft. Advertising and analytics tracking scripts are not currently loaded.
If Google advertising is introduced
Google and advertising providers may use cookies to serve ads based on prior visits. Google advertising cookies may use visits to this and other sites for personalization. Before introducing advertising, we will provide provider details, consent and withdrawal controls, and apply regional requirements. Personalized ads in the EEA, UK and Switzerland will require the appropriate Google-certified CMP setup first.
- Google ad personalization controls
- How Google uses data from partner sites
- Third-party advertising choices
Retention, deletion and requests
Service records are kept while needed for account access, billing or inquiry handling. You can request access, correction, deletion or cessation of processing. Transaction records required by law and records needed for ongoing disputes may be retained until those obligations end. Credit expiry does not delete reports. Access to public contact emails and messages is limited to inquiry handling.