Privacy Policy

1. Who We Are

FlowMonkey LLC (“FlowMonkey,” “we,” “us,” or “our”) is an Oregon limited liability company that operates an informational and educational website providing options-market data, analytics, and visualizations. This Privacy Policy explains what personal information we collect, how we use and share it, and the choices you have. It applies to the FlowMonkey website, applications, and related services (the “Service”) and should be read together with our Terms of Service.

2. Information We Collect

We collect the following categories of information:

• Account information: your email address and authentication credentials (passwords are stored only in salted, hashed form — we never store them in plain text).
• Billing information: your subscription tier and status and Stripe customer and subscription identifiers. Card and bank details are handled directly by Stripe; we do not collect or store full payment card numbers, CVV data, or bank-account details.
• Session information: an authentication token stored in your browser's local storage to maintain your login session.
• Agreement records: when you accept our Terms of Service, we record the version accepted, a timestamp, and your IP address to evidence your agreement.
• Communications: messages you send us (for example, support requests) and your preferences for receiving alerts and service messages.

3. How We Collect Information

We collect information directly from you when you register, subscribe, accept our Terms, or contact us; through your browser when local storage is used to maintain your login session; and from Stripe when you purchase or manage a subscription.

4. How We Use Information

We use personal information to:

• Provide, operate, secure, and maintain the Service and your account;
• Process subscriptions, billing, and renewals, and enforce plan access;
• Authenticate you and protect against fraud, abuse, and unauthorized access;
• Send you account, transactional, and service-related messages, and — where you have them enabled — alerts;
• Record and evidence your acceptance of our Terms of Service;
• Maintain, troubleshoot, and improve security, reliability, and performance; and
• Comply with legal obligations and enforce our agreements.

5. How We Share Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share personal information only as follows:

• Service providers: with vendors that perform services for us, including payment processing (Stripe), hosting and infrastructure (Vercel and Hetzner), and business email (Google Workspace/Gmail). These providers may process your information only to provide services to us and are bound to protect it.
• Market-data providers: our third-party market-data providers supply data to us; we do not disclose your personal account information to them.
• Legal and safety: when we believe disclosure is required by law, regulation, legal process, or governmental request, or is necessary to protect the rights, property, or safety of FlowMonkey, our users, or others.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor this Privacy Policy or provide notice of any change.

6. Cookies and Local Storage

We use browser local storage to store an authentication token needed to keep you signed in. We do not use web analytics, third-party advertising cookies, or cross-site tracking cookies. You can clear local storage through your browser settings, but doing so may sign you out or prevent certain features from working properly.

7. Data Retention

We retain account and subscription information while your account is active and for a reasonable period thereafter as needed to provide the Service. We retain agreement and billing records as reasonably necessary for legal, tax, accounting, dispute-resolution, and enforcement purposes. Communications and session information are retained only as reasonably necessary for support, security, and operations. When information is no longer needed, we delete or de-identify it.

8. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information, including encryption in transit, hashed credential storage, and access controls. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

9. Your Choices and Rights

You may access or update your account information, adjust your alert and communication preferences, and cancel your subscription at any time through your account or by contacting us. Subject to applicable law, you may request access to or a copy of, correction or deletion of, and, where applicable, portability of your personal information. Where applicable, you may also request information about certain third parties to which we have disclosed personal information, and you may opt out of processing for targeted advertising, the sale of personal information, or profiling in furtherance of decisions that produce legal or similarly significant effects. FlowMonkey does not currently sell personal information, use personal information for targeted advertising, or engage in such profiling. If applicable law gives you a right to appeal a denial of a privacy request, you may appeal by contacting us using the details below and stating that you are appealing the decision. We will respond to verifiable requests as required by law. Note that we may retain certain information where we have a legal basis or obligation to do so.

10. California Privacy Rights

If you are a California resident and the California Consumer Privacy Act, as amended (the “CCPA”), applies to FlowMonkey's processing of your personal information, you may have the right to know what personal information we collect and how we use and disclose it; to request access to, deletion of, or correction of your personal information; and to be free from discrimination for exercising applicable rights. We do not sell your personal information and do not share it for cross-context behavioral advertising, so there is currently no sale or sharing activity to opt out of. To make a request, contact us using the details below; we will verify your request before responding as required by applicable law.

11. Children's Privacy

The Service is intended only for adults 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a person under 18, we will delete it. If you believe a minor has provided us with information, please contact us.

12. United States Processing

FlowMonkey is based in the United States, and we process and store information in the United States. If you access the Service from outside the United States, you understand that your information will be processed in the United States, where data-protection laws may differ from those of your jurisdiction.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the version date above and, where appropriate, provide additional notice. Your continued use of the Service after an update takes effect constitutes your acknowledgment of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or wish to appeal a privacy-request decision where applicable, contact FlowMonkey LLC at [email protected] or FlowMonkey LLC, 6077 Waconda Rd NE, Salem, OR 97305.