1. Who this covers
This policy covers the LikeFlow website and the LikeFlow application, and it applies to everyone who visits either. It explains what personal data LikeFlow handles as the controller of that data. LikeFlow is established in the United States, at 1942 Broadway St. STE 314C, Boulder, CO 80302. If you want to exercise any of the rights described here, or you simply want to know what we hold about you, start from the Contact page.
2. What you give us
To open an account we need an email address, and we store a display name if you provide one. Passwords are never stored as text — only as an irreversible hash. If you sign in with Google we receive your email address, your name and an account identifier from Google, and nothing else. We also keep your interface language so the site comes back in the language you chose.
3. What we record as you use LikeFlow
We store the product links you submit, the projects and videos you create, and the finished videos themselves. We keep a credit ledger — what was granted, what was spent, what was refunded — because it is how billing is made accountable. We record timing and outcome for each stage of a render, meaning which stage ran, how long it took and whether it succeeded, so we can find what is slow or broken. We stamp the time of your last sign-in.
4. What we do not do
We never see or store your card number: Stripe handles payment and returns only an identifier. We do not sell personal data, and we do not share it for anyone else's advertising. We do not use the videos you generate, or the scripts behind them, to train models — the AI providers we use are called to produce your output, not to learn from it.
5. Why we use it
We use your data to run the service you asked for: to authenticate you, to meter and bill credits, to produce and deliver your videos, and to answer you when you contact support. We use diagnostic records to keep the platform reliable and secure, and to investigate abuse. Where the law asks for a legal basis, ours is performance of our agreement with you for the first group, and our legitimate interest in a service that works and is not abused for the second.
6. Cookies and measurement
A session cookie keeps you signed in, and a locale cookie remembers your language; neither is optional, because the site cannot work without them. With your consent we use Google Analytics and Airbridge to understand in aggregate how the site is used. If you arrive through an affiliate link, a 30-day cookie records the referral so the affiliate can be credited. You can change your choice at any time through the cookie banner.
7. Who else touches your data
LikeFlow runs on services from other companies, and some of them necessarily process personal data on our behalf. They act on our instructions, they are bound to protect what they handle, and they may not use it for their own purposes. The table below is the current list. We do not sell your data to anyone, and there is no category of recipient beyond those named here.
8. Where it is kept, and for how long
Account data lives in a managed PostgreSQL database, and finished videos live in Cloudflare object storage; both may be stored in the European Union or the United States depending on the region serving you. LikeFlow is a United States company, so personal data reaches the United States. Where it comes from the European Union or the United Kingdom, that transfer relies on the European Commission's standard contractual clauses, or another lawful transfer mechanism agreed with the provider concerned. We keep account data while your account exists. Close your account and we delete it, along with your projects and videos, within 30 days — except records we must keep longer for accounting, which are limited to what tax law requires. Diagnostic records are kept for a short period and then aged out.
9. Your rights
You can ask for a copy of what we hold, correct it, delete it, receive it in a portable form, object to a particular use, or withdraw a consent you gave. Ask through the Contact page and we will respond within one month. We will not charge you for it, and we will not treat you differently for asking. If you are in the EU, the UK or another region with a data protection authority and you are unhappy with our answer, you can complain to that authority. If you live in a US state with its own privacy law — Colorado and California among them — the same requests are open to you, and you may also appeal a refusal or raise it with your state Attorney General.
10. Security
Connections to LikeFlow are encrypted in transit. Passwords are hashed, never recoverable. Access to production data is limited to the people who need it to operate the service, and payment credentials never enter our systems at all. No service can promise perfect security, so if a breach ever affects your personal data we will tell you and the relevant authority within the time the law requires.
11. Children
LikeFlow is a tool for business and marketing use and is not intended for children. You must be at least 18 to hold an account, and we do not knowingly collect personal data from anyone younger. If we learn that an account belongs to a child, we close it and delete the data. If you believe a child has given us personal data, tell us through the Contact page.
12. Changes to this policy
We update this policy when the product or the services behind it change — adding a subprocessor, for example, or changing how long something is kept. The date at the top of this page always reflects the current version. When a change materially affects your rights we will tell account holders directly rather than relying on you to notice.