Flowframe Terms of Service

---

IMPORTANT BETA NOTICE

YOU ARE ACCESSING A BETA VERSION OF FLOWFRAME.

Flowframe is currently operating in public beta testing. By using the Service, you acknowledge and accept:

• ✅ The Service is functional and available for production use
• ⚠️ Some features are experimental and may change without notice
• ⚠️ Bugs and errors may occur; we provide best-effort support
• ⚠️ Service-level guarantees are not yet formalized (SLA planned for GA release)
• ⚠️ Legal entity incorporation is pending (currently operating as unincorporated business)
• ✅ Enterprise-grade security and GDPR compliance are fully implemented
• ⚠️ We may discontinue the beta at any time with 90 days notice

Beta participants benefit from:

• Early access to innovative features
• Opportunity to shape product direction
• Grandfathered pricing upon general availability
• Direct communication with founding team

Upon incorporation, these Terms will automatically transfer to the successor legal entity without requiring re-acceptance.

---

TABLE OF CONTENTS

1. Agreement to Terms
2. Description of Service
3. Account Registration and Security
4. Subscription Plans and Pricing
5. Your Responsibilities and Acceptable Use
6. Your Data and Intellectual Property
7. Flowframe's Intellectual Property
8. Service Availability and Support
9. Data Processing and Privacy
10. Third-Party Services and Integrations
11. Warranties and Disclaimers
12. Limitation of Liability
13. Indemnification
14. Termination
15. Changes to Terms
16. Dispute Resolution
17. General Provisions
18. Beta-Specific Provisions
19. Contact Information

---

1. AGREEMENT TO TERMS

1.1 Binding Agreement

By accessing or using Flowframe (the "Service", "Platform", "we", "us", "our"), you ("User", "you", "your") agree to be bound by these Terms of Service ("Terms", "Agreement").

If you disagree with any part of these Terms, you may not access the Service.

1.2 Who We Are

What Flowframe Does: Flowframe is a collaborative data analytics platform that enables teams to analyze data using SQL queries, visual query builders, and real-time collaboration features.

1.3 Acceptance of Terms

You accept these Terms by:

• Creating a Flowframe account
• Clicking "I Agree" or "Accept" during signup
• Accessing or using any part of the Service
• Purchasing a paid subscription

1.4 Eligibility

To use Flowframe, you must:

• Have legal capacity to enter into binding contracts
• Not be prohibited from using the Service by any applicable laws
• Not have had a previous account terminated for violating these Terms

If you are using Flowframe on behalf of an organization:

• You represent that you have authority to bind that organization
• "You" refers to both you as an individual and the organization

1.5 Modifications to Terms

We reserve the right to modify these Terms at any time. See Section 15 (Changes to Terms) for details.

---

2. DESCRIPTION OF SERVICE

2.1 What Flowframe Provides

Flowframe is a web-based analytics platform offering:

Core Features:

• ✅ SQL Editor: Write and execute SQL queries directly
• ✅ Visual Query Builder: Build analyses without writing code
• ✅ Real-Time Collaboration: Multiple users edit simultaneously (Pro/Enterprise tiers)
• ✅ Data Visualizations: Create charts, graphs, and dashboards
• ✅ Data Connectors: Connect to databases (PostgreSQL, MySQL, MongoDB, CSV files, etc.)
• ✅ Project Sharing: Share analyses publicly or with team members
• ✅ Version Control: Rollback to previous versions of analyses
• ✅ Workspace Management: Organize projects and teams

Planned Features (Beta Roadmap):

• 🚧 AI Natural Language Queries: Ask data questions in plain English (launching Q2 2026)
• 🚧 Advanced Collaboration: Comments, annotations, notifications
• 🚧 API Access: Programmatic access to Flowframe (Enterprise)
• 🚧 Custom Connectors: Build your own data source integrations

2.2 Data Processing Architecture

How Flowframe Works (Dual Architecture):

Flowframe uses two distinct data processing architectures depending on your data source:

Architecture 1: Cloud Database Connections

When you connect to cloud databases (PostgreSQL, MySQL, SQL Server, etc.):

Data Flow:

1. You provide database credentials (encrypted in browser, sent encrypted to servers)
2. Queries are routed through Flowframe servers for security and connection management
3. Flowframe servers connect to your database and execute queries
4. Query results are sent directly to your browser
5. Results are cached in your browser only (not on Flowframe servers)
6. Database credentials stored encrypted at rest on Flowframe servers (AES-256)

Why Through Servers:

• ✅ Enhanced security: Secure tunneling and connection management
• ✅ Firewall compatibility: Easier to whitelist Flowframe IPs
• ✅ Connection pooling: Better performance for team collaboration
• ✅ Credential management: Secure credential storage and rotation

What Flowframe Servers Process:

• Database connection requests
• SQL queries execution
• Results transmission (transient, not stored)

Architecture 2: File Uploads

When you upload files (CSV, Parquet, JSON):

Data Flow:

1. Files are processed client-side in your browser using DuckDB WASM
2. Encrypted file contents are stored in DigitalOcean Spaces (S3-compatible storage)
3. Files are encrypted using AES-256 server-side encryption at rest
4. Files remain in storage until you delete them or your account is deleted
5. No backups are created - files exist only in primary storage

What This Means:

• ✅ Client-side processing: Initial analysis happens in your browser
• ✅ Encrypted storage: Files protected with industry-standard encryption
• ⚠️ Flowframe has access: We can technically access encrypted files (as Data Processor)
• ✅ Immediate deletion: Files deleted instantly when you request deletion
• ⚠️ No backups: Deleted files cannot be recovered

What Flowframe Stores on Servers:

• Account information and settings
• Database credentials (encrypted)
• SQL query text (for version history and session persistency)
• Metadata descriptions and annotations
• Project configurations and canvas layouts
• Collaboration state (for real-time editing)
• Uploaded file contents (encrypted in DigitalOcean Spaces)

What Stays in Your Browser:

• ✅ Query results (cached locally)
• ✅ Temporary query execution state
• ✅ User preferences and UI state

2.3 Service Limitations

Browser Requirements:

• Modern browsers with WebAssembly support (Chrome 89+, Firefox 87+, Safari 14+, Edge 89+)
• JavaScript enabled
• Local storage enabled (for query result caching)

Not Supported:

• Internet Explorer (EOL)
• Mobile browsers (limited functionality; native apps planned)
• Ad blockers may interfere with analytics features

2.4 Beta Service Characteristics

Beta Status means:

• ✅ Fully functional for production use
• ⚠️ Features may change based on feedback
• ⚠️ Performance optimizations ongoing
• ⚠️ UI/UX may evolve
• ⚠️ Bugs may occur; we provide best-effort fixes
• ⚠️ Service availability best-effort (99%+ uptime goal)

Transitioning to General Availability:

• We will announce GA release with 30 days notice
• Beta users receive grandfathered pricing
• All data and projects migrate seamlessly
• Formal SLA and support commitments take effect

---

3. ACCOUNT REGISTRATION AND SECURITY

3.1 Creating an Account

To use Flowframe, you must create an account by providing:

• Email address (required) - Used for login and communications
• Name (required) - First and last name
• Password (required) - Minimum 8 characters (12+ recommended)
• Company name (optional) - For workspace identification

Account Information Requirements:

• Information must be accurate and complete
• You must keep information up to date
• Providing false information violates these Terms

3.2 Account Security

Your Responsibilities:

• ✅ Safeguard your password (do not share with anyone)
• ✅ Use a strong, unique password (password manager recommended)
• ✅ Enable two-factor authentication (2FA) when available (Q2 2026)
• ✅ Notify us immediately of unauthorized access: support@flowframe.io
• ✅ Log out when using shared or public computers

Account Compromise:

• You are responsible for all activities under your account
• We are NOT liable for losses caused by unauthorized use
• If you suspect compromise, immediately change password and notify us

Security Features:

• Passwords hashed with bcrypt (12 rounds + salt) - we never see plaintext
• Account lockout after 5 failed login attempts
• Session timeout after 24 hours of inactivity
• Secure HTTPS connections (TLS 1.3)

3.3 Account Ownership

Personal Accounts: You own your personal account.

Organizational Accounts:

• Account belongs to the organization
• Organization controls account and data
• Individual users are granted access by organization
• Upon leaving organization, user loses access (unless transferred)

Workspace Owners have full control:

• Add/remove team members
• Change permissions and roles
• Delete workspace (irreversible)
• Access all projects in workspace

3.4 One Account Per Person

You may create only one account per person (unless you have multiple organizations requiring separate workspaces).

Prohibited:

• Creating multiple accounts to circumvent free tier limits
• Sharing account credentials with multiple people
• Creating accounts on behalf of others without authorization

Consequences: Duplicate or fraudulent accounts may be terminated without notice.

---

4. SUBSCRIPTION PLANS AND PRICING

4.1 Free Tier (Forever Free)

What's Included:

• 1 personal workspace
• Unlimited projects (50MB limit per project)
• All data sources (databases, CSV files, APIs)
• SQL editor + visual query builder
• All visualization types
• Public project sharing (view-only links)
• Community support (help docs, forums)

Limitations:

• No real-time collaboration
• No AI features (when launched)
• 50MB size limit on project sharing
• Community support only (no SLA)

Forever Free: Free tier will remain free indefinitely, though features may change.

4.2 Pro Tier ($49/month per workspace)

What's Included:

• Everything in Free tier, PLUS:
• ✅ Real-time collaboration (5 seats included)
• ✅ Unlimited AI queries (when feature launches Q2 2026)
• ✅ Team workspace with role-based access control (RBAC)
• ✅ Shared metadata library
• ✅ Priority email support (48-hour response SLA)
• ✅ Additional seats: $10/user/month

Billing:

• Monthly: $49/month (cancel anytime)
• Annual: $470/year (save 20%, ~$39/month)

Seat Management:

• 5 seats included
• Add seats at $10/user/month
• Seats prorated when added mid-billing cycle
• Removed seats credited to next invoice

4.3 Enterprise Tier (Starting at $299/month per workspace)

What's Included:

• Everything in Pro tier, PLUS:
• ✅ Unlimited seats
• ✅ Priority AI query processing
• ✅ Custom AI training on your terminology
• ✅ SSO / SAML authentication (Q2 2026)
• ✅ Dedicated collaboration server
• ✅ Custom data connectors
• ✅ SLA support (4-hour response, 99.9% uptime)
• ✅ 5GB+ per project (custom limits available)
• ✅ Dedicated account manager
• ✅ White-glove onboarding
• ✅ Custom contract terms (volume pricing, invoicing, etc.)

Billing:

• Monthly or annual contracts
• Custom pricing for large teams (50+ users)
• Invoice payment available (Net 30)

Contact: sales@flowframe.io for Enterprise inquiries

4.4 Payment Terms

Payment Method:

• Credit card via Stripe (PCI DSS Level 1 compliant)
• We do NOT store your credit card numbers (Stripe handles all payment data)
• Supported cards: Visa, Mastercard, American Express, Discover

Billing Cycle:

• Monthly: Billed on same day each month (e.g., subscribed Jan 15 → billed 15th of each month)
• Annual: Billed once per year, 20% discount

Currency: USD (US Dollars)

Auto-Renewal:

• Subscriptions automatically renew unless cancelled
• Renewal charge occurs on billing date
• No refunds for renewal charges (cancel before renewal to avoid)

Taxes:

• Prices exclude applicable taxes (VAT, sales tax, GST, etc.)
• Taxes calculated based on your billing address
• You are responsible for paying all applicable taxes

Payment Failures:

• We will retry failed payments up to 3 times
• You will be notified of payment failure via email
• Account may be downgraded or suspended if payment not received within 30 days

4.5 Free Trials

Pro Tier Free Trial:

• 14-day free trial (no credit card required)
• Full Pro features during trial
• Auto-converts to paid subscription unless cancelled
• One trial per organization

Enterprise Tier Pilot:

• 30-day pilot program
• Dedicated support during pilot
• Custom evaluation criteria
• Contact sales@flowframe.io

4.6 Refunds and Cancellations

Monthly Subscriptions:

• Cancel anytime in account settings
• Access continues until end of current billing period
• No refunds for partial months

Annual Subscriptions:

• Cancel anytime in account settings
• Full refund if cancelled within 30 days of initial purchase
• No refund after 30 days (but subscription continues until end of annual term)

Free Tier Downgrades:

• Pro users may downgrade to Free tier
• Downgrade takes effect at end of current billing period
• Features not included in freetier will be suspended
• Data related to suspended features will be deleted after 30days of downgrade

How to Cancel:

1. Log into Flowframe account
2. Go to Account Settings → Billing
3. Click "Cancel Subscription"
4. Confirm cancellation
5. Receive email confirmation

Alternative: Email support@flowframe.io with "Cancel Subscription" in subject line

4.7 Pricing Changes

For Existing Customers:

• We may change pricing with 30 days advance notice
• Price changes do NOT affect existing annual subscriptions until renewal
• Monthly subscriptions: New pricing takes effect on next billing cycle after notice period
• You may cancel before new pricing takes effect to avoid increase

For New Customers:

• Pricing changes take effect immediately for new signups

Grandfathered Pricing:

• Beta users may receive special pricing for agreed duration
• We will notify you of any grandfathered pricing benefits
• Email support@flowframe.io to enrol into the beta testing program

---

5. YOUR RESPONSIBILITIES AND ACCEPTABLE USE

5.1 Your Data Ownership

You own your data. Flowframe does NOT claim ownership rights to:

• ✅ Your business data (customer records, analytics, etc.)
• ✅ Your analyses, queries, and visualizations
• ✅ Your metadata descriptions and documentation
• ✅ Your project configurations and settings

We are a "Data Processor" acting on your behalf. You remain the "Data Controller" under GDPR.

5.2 Your Responsibilities for Your Data

You are responsible for:

• ✅ Lawfulness: Ensuring you have legal right to analyze the data
• ✅ Consents: Obtaining necessary consents from data subjects
• ✅ Accuracy: Ensuring data is accurate and up-to-date
• ✅ Security: Protecting your database credentials
• ✅ Compliance: Complying with data protection laws (GDPR, CCPA, etc.)

Database Access Best Practices:

• Use read-only database credentials when possible
• Create a dedicated Flowframe user with minimal permissions
• Enable IP whitelisting if your database supports it
• Rotate credentials regularly (every 90 days recommended)
• Do NOT use root/admin credentials

5.3 Acceptable Use Policy

You MAY use Flowframe to:

• ✅ Analyze business data you own or are authorized to access
• ✅ Create visualizations and dashboards
• ✅ Collaborate with team members
• ✅ Share public projects (if data is non-sensitive)
• ✅ Connect to your own databases and data sources

You MAY NOT use Flowframe to:

• ❌ Store or process illegal content (child abuse material, terrorist content, etc.)
• ❌ Analyze data you don't have permission to access
• ❌ Reverse engineer or copy Flowframe's software
• ❌ Attempt to access other users' data or accounts
• ❌ Send excessive API requests or abuse rate limits
• ❌ Use for competitive analysis of Flowframe itself
• ❌ Share credentials with users outside your organization
• ❌ Violate any applicable laws or regulations
• ❌ Transmit viruses, malware, or harmful code
• ❌ Harass, abuse, or harm other users or Flowframe personnel
• ❌ Impersonate any person or entity
• ❌ Scrape or extract data from the Service using automated means
• ❌ Resell or redistribute the Service without authorization

5.4 Prohibited Data

You may NOT process through Flowframe:

• ❌ Special Categories of Personal Data (health, biometric, genetic data) without the personnel's consent
• ❌ Children's data without documented parental consent (if applicable to your use case)
• ❌ Stolen or pirated data
• ❌ Data obtained through hacking or unauthorized access

5.5 AI Feature Usage (When Available)

When using AI natural language queries (Q2 2026 launch):

• ✅ Questions must be legitimate data analysis requests
• ❌ Do NOT attempt to "jailbreak" or manipulate AI prompts
• ❌ Do NOT use AI to generate harmful or illegal queries
• ✅ Respect your database's access controls and permissions
• ❌ Do NOT attempt to extract information about Flowframe's AI system
• ✅ Review AI-generated queries before execution (AI may make mistakes)

5.6 Fair Use and Rate Limiting

To ensure service quality for all users:

• Free tier: 100 API requests/minute
• Pro tier: 1,000 API requests/minute
• Enterprise tier: Custom limits (negotiable)

Consequences of Abuse:

• Excessive usage may result in throttling (temporary slowdown)
• Intentional abuse may result in account suspension
• Circumventing limits (e.g., multiple accounts) may result in termination

5.7 Compliance with Laws

You warrant that your use of Flowframe complies with:

• All applicable local, state, national, and international laws
• Data protection laws (GDPR, CCPA, PIPEDA, etc.)
• Industry-specific regulations (HIPAA, PCI DSS, GLBA, etc.)
• Export control and sanctions laws
• Terms of Service for databases and services you connect

You are solely responsible for legal compliance.

---

6. YOUR DATA AND INTELLECTUAL PROPERTY

6.1 Your Content

"Your Content" means all data, text, analyses, queries, visualizations, metadata, and other materials you submit, upload, or create using the Service.

You retain all ownership rights to Your Content.

6.2 License You Grant to Flowframe

By using the Service, you grant Flowframe a limited, worldwide, non-exclusive, royalty-free license to:

• Host and store Your Content on our servers
• Process Your Content to provide the Service
• Display Your Content back to you and authorized users
• Back up Your Content for disaster recovery
• Analyze anonymized usage patterns to improve the Service

This license ends when you delete Your Content or terminate your account (subject to backup retention periods).

6.3 What We Don't Do with Your Data

Flowframe will NOT:

• ❌ Sell your data to third parties
• ❌ Use your data to train AI models
• ❌ Share your data with advertisers
• ❌ Access your actual business data
• ❌ Disclose your data except as required by law or with your consent

6.4 Public Sharing

If you choose to share a project publicly:

• Anyone with the link can view the shared project
• You control what data is included in shared projects
• Shared projects may appear in search engines
• You can unshare projects at any time
• You are responsible for ensuring shared data is appropriate and authorized

We recommend:

• Anonymize or redact sensitive data before public sharing
• Use view-only sharing (recipients cannot edit)
• Regularly review publicly shared projects

6.5 Feedback and Suggestions

If you provide feedback, ideas, or suggestions ("Feedback"):

• We may use Feedback to improve Flowframe
• You grant us a perpetual, irrevocable, royalty-free license to Feedback
• We have no obligation to implement Feedback
• No compensation is owed for Feedback

Confidential Feedback: If you want to provide confidential feedback, mark it as "Confidential" and we'll treat it accordingly.

6.6 Responsibility for Your Content

You are solely responsible for:

• Accuracy and legality of Your Content
• Backups of Your Content (we provide disaster recovery, not long-term archival)
• Obtaining necessary rights and consents to use Your Content
• Compliance with data protection laws regarding Your Content

You represent and warrant:

• You own or have rights to all Your Content
• Your Content does not infringe third-party rights
• Your Content complies with these Terms and applicable laws

---

7. FLOWFRAME'S INTELLECTUAL PROPERTY

7.1 Flowframe's Ownership

Flowframe owns all rights, title, and interest in:

• ✅ The Flowframe platform and software
• ✅ Trademarks, logos, and branding ("Flowframe", logos, etc.)
• ✅ Documentation and educational content
• ✅ Algorithms and AI systems
• ✅ User interface and design
• ✅ Source code and proprietary technology

Protected by:

• Copyright laws
• Trademark laws
• Trade secret laws
• Patent laws (if applicable)
• International intellectual property treaties

7.2 License to Use Flowframe

Subject to these Terms, Flowframe grants you a limited, non-exclusive, non-transferable, revocable license to:

• Access and use the Service for your internal business purposes
• Create analyses and visualizations using the Service
• Share projects as permitted by your subscription tier

You MAY NOT:

• ❌ Copy, modify, or create derivative works of Flowframe
• ❌ Reverse engineer, decompile, or disassemble the Service
• ❌ Remove or alter copyright, trademark, or other proprietary notices
• ❌ Use Flowframe's trademarks without written permission
• ❌ Frame or mirror the Service
• ❌ Access the Service to build a competitive product

7.3 Open Source

Flowframe uses open-source libraries and components.

DuckDB License: DuckDB (used for client-side query execution) is licensed under MIT License.

7.4 Trademark Use

You may NOT use "Flowframe", our logos, or trademarks without our prior written consent, except:

• Truthful statements that you use Flowframe (e.g., "Powered by Flowframe")
• Links to https://flowframe.io with proper attribution

For trademark license inquiries: support@flowframe.io

---

8. SERVICE AVAILABILITY AND SUPPORT

8.1 Uptime Commitment

Beta Status (Current):

• We strive for 99%+ uptime but do not offer SLA guarantees
• Downtime may occur for maintenance, updates, or unforeseen issues
• We will notify you of planned maintenance when possible

General Availability (Future):

• Free/Pro tiers: 99% uptime goal (no SLA)
• Enterprise tier: 99.9% uptime SLA with service credits

8.2 Maintenance Windows

Planned Maintenance:

• Announced 7 days in advance via email
• Typically scheduled outside US/EU business hours
• Duration: Usually less than 1 hours

Emergency Maintenance:

• May occur with little or no notice
• Required for security patches or critical bugs
• Notification sent as soon as possible

8.3 Client-Side Architecture Benefits

Even if our servers go down:

• ✅ You can still analyze cached data locally (queries run in your browser)
• ❌ Real-time collaboration will not work
• ❌ AI features will not work
• ❌ Saving new projects/changes will not work
• ✅ Your actual business data remains accessible (it's in your database, not ours)

8.4 Support

Free Tier:

• Community support: Help docs, forums, knowledge base
• Email support: support@flowframe.io (best-effort response, 3-5 business days)
• No SLA

Pro Tier:

• Priority email support: 24-48 hour response SLA (business days)
• Help docs and knowledge base
• Live chat

Enterprise Tier:

• Dedicated support: 4-hour response SLA (24/7 for critical issues)
• Slack channel or dedicated communication
• Dedicated account manager
• White-glove onboarding
• Quarterly business reviews

Support Hours:

• Email support: 24/7 submission, business hours response (9 AM - 5 PM EST, Mon-Fri)
• Enterprise critical support: 24/7 response

8.5 Service Credits (Enterprise SLA)

If we fail to meet 99.9% uptime SLA (Enterprise only):

• 99.0-99.8% uptime: 10% service credit
• 95.0-98.9% uptime: 25% service credit
• Below 95% uptime: 50% service credit

Service credits:

• Applied to next month's invoice
• Maximum 50% credit per month
• Requires claim within 30 days of downtime
• Sole remedy for SLA breach

Exclusions (don't count against SLA):

• Planned maintenance (with notice)
• Issues caused by your internet/browser
• Force majeure events
• Third-party service failures (your database, etc.)

8.6 Data Backup

Our Backups (for disaster recovery):

• Daily incremental backups: Every 24 hours
• Weekly full backups: Every Sunday
• Retention: 30 days
• Purpose: Disaster recovery only (not archival)

Your Responsibility:

• ✅ Backup your own database (we don't have access to it)
• ✅ Maintain your own long-term archives

We are NOT responsible for:

• Data loss due to your actions (accidental deletion of projects or uploaded CSV, JSON, or Parquet files)
• Data loss in your database (we don't control it)
• Long-term archival beyond 30 days

---

9. DATA PROCESSING AND PRIVACY

9.1 Privacy Policy

Our Privacy Policy (https://flowframe.io/privacy) explains how we collect, use, and protect your data.

By using Flowframe, you agree to our Privacy Policy.

9.2 Data Processing Agreement (DPA)

For users processing Personal Data through Flowframe, our Data Processing Agreement (https://flowframe.io/legal/dpa) governs data protection obligations.

DPA applies to:

• EU/UK users (GDPR compliance)
• Users processing Personal Data about individuals
• Enterprise customers with specific compliance requirements

DPA incorporated by reference: By accepting these Terms, you accept the DPA.

Executed DPAs: Enterprise customers may request signed DPA at support@flowframe.io

9.3 Data Protection Roles

Flowframe is the "Data Processor":

• We process data only on your instructions
• We implement appropriate security measures
• We assist with Data Subject requests
• We notify you of data breaches

You are the "Data Controller":

• You determine what data to process
• You determine purposes of processing
• You obtain necessary consents
• You respond to Data Subject requests

9.4 Your Data Protection Obligations

You must:

• Ensure you have lawful basis to process Personal Data (GDPR Article 6)
• Obtain necessary consents from data subjects
• Provide privacy notices to data subjects
• Not process Special Categories of Personal Data without prior agreement with us
• Comply with data minimization principles
• Implement appropriate security measures for your database credentials

9.5 Data Subject Rights

Under GDPR, individuals have rights to:

• Access their Personal Data
• Rectify inaccurate data
• Erase data ("Right to be Forgotten")
• Restrict processing
• Data portability
• Object to processing

Your Responsibility: Respond to Data Subject requests (we provide technical assistance)

Our Assistance: We provide tools to export, delete, and rectify data

See our DPA for detailed procedures.

9.6 Data Transfers

Data hosting: Primary infrastructure in London, UK (EU) (DigitalOcean LON1)

International transfers: For sub-processors in non-EU countries (e.g., Stripe in USA), we use Standard Contractual Clauses (SCCs) to ensure GDPR compliance.

Sub-processors:

• DigitalOcean (UK) - Infrastructure hosting
• Stripe (USA) - Payment processing
• Google Gemini (USA, planned Q2 2026) - AI query generation (metadata only, not your data)

Full sub-processor list: https://flowframe.io/sub-processors

---

10. THIRD-PARTY SERVICES AND INTEGRATIONS

10.1 Third-Party Data Sources

Flowframe connects to third-party databases and services:

• PostgreSQL, MySQL, MongoDB, BigQuery, etc.
• CSV/Parquet file uploads
• API integrations (planned)

Your Responsibility:

• You must comply with third-party Terms of Service
• You must have authorization to connect to databases
• We are NOT responsible for third-party service failures

10.2 Payment Processing

Stripe handles all payment processing:

• Stripe's Terms: https://stripe.com/legal
• Stripe's Privacy Policy: https://stripe.com/privacy
• We do NOT store credit card numbers (Stripe tokenizes payment info)

Stripe compliance: PCI DSS Level 1, SOC 2, ISO 27001

10.3 AI Services (Planned)

Google Gemini will power AI natural language queries (Q2 2026 launch):

• Google's Terms: https://cloud.google.com/terms
• Zero Data Retention (ZDR): Your prompts NOT used to train AI models
• Data sent to AI: Metadata and questions only (NOT your actual data)

Opt-out: You may disable AI features in workspace settings.

10.4 Analytics and Monitoring

We use analytics to improve the Service:

• Usage patterns (features used, frequency)
• Performance metrics (page load times, query execution)
• Error logs (to fix bugs)

Anonymization: We anonymize analytics when possible.

Third-party tools: We may use Google Analytics, Sentry, or similar (with data protection agreements).

10.5 No Endorsement

Flowframe does NOT endorse third-party services or integrations. Use at your own risk.

---

11. WARRANTIES AND DISCLAIMERS

11.1 Limited Warranty

Flowframe warrants that the Service will:

• Substantially conform to our documentation
• Be provided with reasonable skill and care
• Comply with applicable laws

Remedy: If we breach this warranty, your sole remedy is for us to fix the issue or, if we can't, refund prepaid fees for unused service.

11.2 Disclaimer of Warranties

TO THE MAXIMUM EXTENT PERMITTED BY LAW, FLOWFRAME IS PROVIDED "AS IS" WITHOUT WARRANTIES OF ANY KIND.

We disclaim all warranties, including:

• ❌ Merchantability: Fitness for a particular purpose
• ❌ Non-infringement: No violations of third-party rights
• ❌ Accuracy: AI-generated queries may contain errors
• ❌ Availability: Uninterrupted or error-free service
• ❌ Security: Absolute protection against breaches
• ❌ Data Loss: Complete protection against data loss
• ❌ Compatibility: Works with all databases or browsers
• ❌ Results: Specific outcomes or business results

11.3 Beta Disclaimers

Because Flowframe is in beta:

• ⚠️ Bugs and errors may occur
• ⚠️ Features may change without notice
• ⚠️ Performance may vary
• ⚠️ Downtime may occur
• ⚠️ We may discontinue features

You accept these risks by using the beta.

11.4 Your Responsibilities

You are responsible for:

• ✅ Verifying AI-generated queries before execution
• ✅ Testing queries on non-production databases
• ✅ Maintaining backups of your data
• ✅ Implementing security measures for database credentials
• ✅ Reviewing and validating analyses and visualizations
• ✅ Not relying solely on Flowframe for critical business decisions

Flowframe is a tool: Human oversight required.

---

12. LIMITATION OF LIABILITY

12.1 Liability Cap

TO THE MAXIMUM EXTENT PERMITTED BY LAW, FLOWFRAME'S TOTAL LIABILITY IS LIMITED TO THE AMOUNT YOU PAID US IN THE 12 MONTHS BEFORE THE CLAIM.

Free tier users: Liability limited to $100 USD.

Example: If you paid $49/month for 6 months ($294 total), our maximum liability is $294.

12.2 Excluded Damages

WE ARE NOT LIABLE FOR:

• ❌ Indirect damages: Lost profits, revenue, data, opportunities
• ❌ Consequential damages: Business interruption, loss of goodwill
• ❌ Incidental damages: Costs of substitute services
• ❌ Punitive damages: Penalties or exemplary damages
• ❌ Data loss: Including data in your database (we don't control it)
• ❌ Third-party actions: Actions of databases, payment processors, etc.

Even if we were advised of the possibility of such damages.

12.3 Exceptions

Some jurisdictions don't allow liability limitations. If that applies to you, limitations may not apply.

The following are NOT limited:

• Our gross negligence or willful misconduct
• Death or personal injury caused by our negligence
• Fraud or fraudulent misrepresentation
• Violations of consumer protection laws (where applicable)

12.4 Allocation of Risk

This limitation reflects allocation of risk:

• You pay a low price for powerful software
• In exchange, we limit liability
• You bear responsibility for your own data and security
• If you need higher liability limits, consider insurance or upgrade to Enterprise with custom terms.

---

13. INDEMNIFICATION

13.1 Your Indemnification of Us

You agree to indemnify, defend, and hold harmless Flowframe (and our officers, directors, employees, contractors, agents) from claims, damages, losses, and expenses (including reasonable attorneys' fees) arising from:

• ❌ Your violation of these Terms
• ❌ Your violation of applicable laws
• ❌ Your violation of third-party rights (infringement, privacy violations, etc.)
• ❌ Your Content (data you upload or analyze)
• ❌ Unauthorized access to databases
• ❌ Your negligence or willful misconduct

Example: If you analyze stolen data and the victim sues Flowframe, you must defend and indemnify us.

13.2 Our Indemnification of You

Flowframe will defend you against claims that Flowframe infringes third-party intellectual property rights, provided you:

• Notify us promptly of the claim
• Give us control of the defense
• Cooperate with us

This does NOT apply if:

• You modified Flowframe
• You combined Flowframe with third-party services (causing infringement)
• You continued using Flowframe after we advised you to stop

Our Remedy: If Flowframe infringes, we will:

1. Obtain a license for you to continue using it, OR
2. Modify Flowframe to be non-infringing, OR
3. Replace with non-infringing alternative, OR
4. Terminate your account and refund prepaid fees

---

14. TERMINATION

14.1 Termination by You

You may terminate at any time by:

• Cancelling your subscription in account settings
• Deleting your account
• Emailing support@flowframe.io

Effects:

• Access continues until end of current billing period (if paid)
• Free tier: Immediate termination
• No refunds for partial months (except annual within 30 days)
• Data deleted per our retention policy (see Section 14.4)

14.2 Termination by Flowframe

We may suspend or terminate your account if:

• You violate these Terms
• Your account is past due on payment (30 days notice)
• You engage in fraudulent activity
• Your usage threatens service stability
• Required by law

Notice:

• 30 days for non-payment (opportunity to cure)
• 7 days for Terms violations (opportunity to cure)
• Immediate for egregious violations (illegal activity, hacking, abuse)

14.3 Effect of Termination

Upon termination:

• ✅ Your access to Flowframe ends immediately (or at end of billing period)
• ✅ You lose access to your data (export first!)
• ✅ We delete your data per retention policy
• ✅ Outstanding fees remain due
• ✅ Sections that should survive (liability, indemnification, IP) remain in effect

14.4 Data Deletion After Termination

Deletion Timeline:

• Day 0: Account deleted from active systems
• Day 1-30: Data remains in encrypted backups (disaster recovery)
• Day 31: Permanent deletion from backups

Exceptions:

• Billing records: Retained 7 years (legal requirement for tax compliance)
• Legal/dispute data: Retained until resolved
• Anonymized analytics: Retained indefinitely (cannot be linked to you)

Immediate deletion: Email support@flowframe.io to request expedited deletion from backups.

14.5 Survival

The following survive termination:

• Section 6 (Your Data and IP) - Your ownership rights
• Section 7 (Flowframe's IP) - Our ownership rights
• Section 11 (Warranties and Disclaimers)
• Section 12 (Limitation of Liability)
• Section 13 (Indemnification)
• Section 16 (Dispute Resolution)
• Section 17 (General Provisions)

---

15. CHANGES TO TERMS

15.1 How We Update Terms

We may update these Terms by:

• Posting revised Terms on our website (https://flowframe.io/terms)
• Updating the "Last Updated" date
• Notifying you via email (for material changes)

15.2 Your Acceptance

Continued use after changes constitutes acceptance.

If you disagree with changes:

• Stop using Flowframe
• Terminate your account
• No refunds for disagreeing with changes (except annual within 30 days of change notice)

Material changes: Require explicit acceptance (e.g., checkbox next time you log in).

15.3 Notification Period

Minor changes (typos, clarifications): Effective immediately upon posting

Material changes (new fees, reduced functionality): 30 days notice before taking effect

Examples of material changes:

• Increasing prices
• Reducing features
• Changing liability limits
• Changing dispute resolution procedures

---

16. DISPUTE RESOLUTION

16.1 Governing Law

These Terms are governed by the laws of Delaware, United States, without regard to conflict of law principles.

For EU/UK customers: EU/UK consumer protection laws may also apply.

16.2 Informal Resolution

Before filing a claim, contact us at support@flowframe.io to resolve the dispute informally. We'll attempt to resolve within 60 days.

Benefits of informal resolution:

• Faster resolution
• Lower costs
• Better outcomes
• Maintains relationship

16.3 Arbitration Agreement (US Users)

For US users, disputes will be resolved through binding arbitration (not court), except:

• Small claims court (for claims under $10,000)
• Injunctive relief (to stop unauthorized use)
• Intellectual property disputes

Arbitration Rules:

• Administrator: American Arbitration Association (AAA)
• Rules: AAA Consumer Arbitration Rules
• Arbitrator: One arbitrator mutually agreed upon
• Location: Delaware or your home state
• Costs: AAA filing fees; each party bears own attorneys' fees

Opt-Out: You may opt out of arbitration within 30 days of accepting these Terms by emailing support@flowframe.io with "Arbitration Opt-Out" in subject line.

16.4 Class Action Waiver

You agree to resolve disputes individually, not as part of a class action.

You may NOT:

• ❌ Consolidate claims with other users
• ❌ Participate in class actions against Flowframe
• ❌ Serve as class representative

If class action waiver is unenforceable, the arbitration agreement does not apply (disputes go to court).

16.5 For EU/UK Users

EU/UK users are NOT subject to arbitration or class action waiver.

Your rights:

• ✅ Right to resolve disputes through courts in your home country
• ✅ Right to participate in class actions (where permitted)
• ✅ Right to complain to consumer protection authorities

EU Online Dispute Resolution: https://ec.europa.eu/consumers/odr

---

17. GENERAL PROVISIONS

17.1 Entire Agreement

These Terms, our Privacy Policy, and DPA constitute the entire agreement between you and Flowframe.

Supersedes: All prior negotiations, understandings, and agreements (written or oral).

17.2 Severability

If any provision is unenforceable, the remaining provisions remain in effect. Unenforceable provisions will be modified to be enforceable while reflecting original intent.

17.3 Waiver

Our failure to enforce any provision does NOT waive our right to enforce it later.

Written waiver required: Any waiver must be in writing and signed.

17.4 Assignment

You may NOT assign these Terms without our written consent.

We may assign these Terms to:

• A successor in a merger, acquisition, or asset sale
• A parent, subsidiary, or affiliated company
• The incorporated entity (upon Flowframe, Inc. formation)

Automatic assignment upon incorporation: These Terms automatically transfer to Flowframe, Inc. (or similar legal entity) upon incorporation without requiring re-acceptance.

17.5 Force Majeure

Neither party is liable for failure to perform due to circumstances beyond reasonable control:

• Natural disasters (earthquakes, floods, pandemics)
• War, terrorism, civil unrest
• Government actions (laws, regulations, embargoes)
• Internet outages, power outages
• Cyberattacks (large-scale, not targeted at us)

Duration: Obligations suspended only during force majeure event.

Termination: If force majeure continues >60 days, either party may terminate.

17.6 Notices

To You: Via email to your registered email address

To Us: Via email to support@flowframe.io or postal mail to [Company Address]

Effective Date:

• Email: 24 hours after sending
• Postal: 5 business days after mailing

17.7 Relationship

These Terms do NOT create:

• Partnership or joint venture
• Employment relationship
• Agency relationship
• Franchise

We are independent contractors.

17.8 Third-Party Beneficiaries

These Terms do NOT create rights for third parties.

17.9 Export Control

You may NOT use Flowframe in violation of US export laws or sanctions.

You represent:

• You are NOT located in a sanctioned country
• You are NOT on a US government restricted parties list

Prohibited destinations (subject to change): Cuba, Iran, North Korea, Syria, Crimea region

17.10 Government Use

If you are a US government entity, Flowframe is "Commercial Computer Software" and "Commercial Computer Software Documentation" under FAR 12.212 and DFARS 227.7202.

Government rights: Limited to those granted in these Terms.

---

18. BETA-SPECIFIC PROVISIONS

18.1 Beta Acknowledgment

You acknowledge:

• Flowframe is in public beta testing
• Service is functional but evolving
• Features may change without notice
• Bugs and errors may occur
• Performance may vary
• We may discontinue features with notice

18.2 Feedback and Bug Reports

We encourage you to:

• Report bugs at support@flowframe.io
• Provide feature suggestions
• Participate in user research

Bug reports: We'll use commercially reasonable efforts to fix bugs, but provide no SLA during beta.

18.3 Beta Termination

We may terminate the beta at any time with 90 days notice.

Upon beta termination, we will:

• Transition to General Availability (GA), OR
• Provide 90 days to export data before shutdown

If transitioning to GA:

• Beta users receive grandfathered pricing (discounted rates)
• All data and projects migrate seamlessly
• New Terms of Service for GA (with notice)

18.4 No SLA During Beta

During beta, we do NOT provide:

• Uptime SLA guarantees
• Response time SLAs (except Enterprise, best-effort)
• Service credits for downtime

Upon GA, SLAs will be introduced.

18.5 Design Partners

Design partners (early beta customers) may have:

• Custom pricing agreements
• Special support arrangements
• Product input and roadmap influence
• Separate side letters or addendums

Contact: If you're interested in becoming a design partner, email sales@flowframe.io

18.6 Migration to GA

When Flowframe reaches General Availability:

• We will announce 30 days in advance
• Beta Terms will be replaced with GA Terms
• You will be prompted to accept GA Terms
• Pricing and features may change (with notice)
• Beta users receive grandfathered benefits

---

19. CONTACT INFORMATION

19.1 General Inquiries

Email: support@flowframe.io Website: https://flowframe.io Response Time: 1-3 business days (Free tier), 48 hours (Pro tier), 4 hours (Enterprise tier)

19.2 Specific Departments

Sales (Enterprise inquiries): sales@flowframe.io Privacy (Data protection questions): support@flowframe.io (or privacy@flowframe.io when set up) Security (Vulnerability reports): support@flowframe.io with subject "SECURITY VULNERABILITY REPORT" Legal (Legal questions): support@flowframe.io with subject "Legal Inquiry"

19.3 Postal Address

[Company Address - To be updated upon incorporation] [Registered Agent Address]

19.4 Regulatory Contacts

EU Representative (if applicable): [To be appointed if significant EU customer base] UK Representative (if applicable): [To be appointed if significant UK customer base]

---

ACCEPTANCE

By using Flowframe, you acknowledge that you have read, understood, and agree to be bound by these Terms of Service.

Effective Date: January 10, 2026 Version: 1.0 Last Updated: January 10, 2026

---

END OF TERMS OF SERVICE