The plain-English version.

10Flows builds AI systems for construction & furniture businesses. For the data described here, 10Flows is the data controller. Questions or requests? Email tenflows.official@gmail.com.

• Name and email — to create and secure your account. Lawful basis: your request to set up an account (contract).
• Instagram handle — optional. Only stored if you choose to enter it, so we can reach you where you prefer.
• Password — never stored in readable form. It is hashed by our authentication provider; we never see it.
• Marketing consent — a yes/no flag, only set if you tick the optional box. We email you updates only if you opt in, and you can unsubscribe anytime. Lawful basis: consent.

We ask for the minimum we need. We don't sell your data or share it for advertising.

We keep cookies to a minimum and use no third-party tracking scripts.

• Essential (always on) — a secure session token that keeps you logged in, and a small cookie remembering your cookie choice. These are required for the site to work, so they don't need consent.
• Analytics & marketing — we currently run none. If we ever add them, they stay switched off until you opt in via the banner. Consent is opt-in, never pre-ticked, and you can change your mind.

All data is sent over encrypted HTTPS — never in a URL, never in browser logs. Passwords are hashed by our auth provider. Your account data is stored in a database protected by row-level security, so each account can only ever access its own record.

Your account data is hosted by Supabase in the EU (Frankfurt, Germany). The site is served by Vercel. Both act as our processors and only handle your data on our instructions.

We keep your account data for as long as your account exists. Ask us to delete it and we'll remove your account and personal data, except anything we're legally required to keep.

Under UK/EU GDPR you can ask us to: show you the data we hold, correct it, delete it, restrict or object to its use, hand it to you in a portable form, or withdraw consent (e.g. marketing) at any time. Email tenflows.official@gmail.com and we'll action it. You can also complain to your data protection authority (in the UK, the ICO).