Privacy policy
Last updated: September 27, 2026
In short
Knotflow runs on your computer. Your prompts, images, videos, provider passwords and provider session cookies are not sent to us. We keep the Google identity and billing information needed to manage your Knotflow account and subscription.
What we collect
- Account and billing: your email address, an anonymous installation ID for each browser where you use Knotflow, and your subscription status (trial, active, canceled). Payments are handled by Stripe; we never see or store your full card number.
- Google sign-in: when you choose “Continue with Google”, Google tells us your email address, that it’s verified, and your Google account ID. We use them only to sign you in to your Knotflow account. We don’t get your Google password or access to your Google data, and we don’t use Google sign-in to reach your Google Flow account (the extension uses Flow through your own Chrome session, as described below).
- Device check: to prevent misuse of free trials, the extension sends hashed identifiers of basic device signals, such as the type of processor and graphics, time zone and language, plus a random ID created by the Knotflow helper on your computer. Our service combines them with a coarse network prefix. We don’t keep your IP address or these signals in readable form.
- Support: the messages you send us.
- Website: our host (Vercel) keeps standard server logs, such as IP address and pages requested, for security and reliability.
We do not collect your prompts, generated images or videos, browsing history, or the contents of your ChatGPT or Google accounts beyond the Google sign-in identity described above.
What the Chrome extension does
- It uses ChatGPT (chatgpt.com) and Google Flow (labs.google, flow.google.com) in your own Chrome, where you are already signed in, to make the images and videos you ask for.
- It talks only to the Knotflow helper running on your own computer (127.0.0.1) and to our billing service, to sign you in and check your plan.
- It never reads, copies or sends your passwords or cookies to us.
How we use it
To provide and bill the service, authenticate you through Google and deliver important billing emails (such as trial reminders and receipts), answer support requests, and prevent fraud and abuse.
Who we share it with
We do not sell your data. We share it only with the providers that run the service for us: Stripe (payments), Vercel (hosting), Neon (database), and Google (sign-in). Each processes it under its own privacy policy and only for that purpose. We may disclose information if the law requires it.
How we protect it
All connections use HTTPS. Payment data stays with Stripe. Access to our systems is limited and protected with strong authentication, and we keep the least data we need.
How long we keep it
While your subscription is active and for as long as tax and accounting rules require afterwards. You can ask us to delete your account at any time.
Your choices
You can remove the extension at any time in chrome://extensions. To access, correct or delete your data, email junioborgesmc@gmail.com.
Changes
If we change this policy in a material way, we will notify subscribers by email.