Legal

Privacy notice

FlowPorter is built on data minimization. This notice explains what we collect, why, and the control you keep. It is a working draft pending final legal review before launch.

Draft under review. This document is a template for the FlowPorter launch and is subject to legal review. The contracting entity is BetterWrk. For questions, email [email protected].

Who we are

FlowPorter is an independent specialist practice delivered by BetterWrk (Austin, Texas), the data controller for information collected through this website. Third-party product names — Zapier, Make and n8n — are used only to identify migration routes.

What we collect, and why

  • Quick assessment answers. Ranges and structural characteristics you report (estate size, complexity patterns, criticality). We do not ask for, and you should never enter, passwords, tokens or credential values.
  • Contact details you choose to provide (name, work email, company) when you save a report, request verification or contact us — used to respond and to deliver what you asked for.
  • Structural manifests (later product stages). Where you choose to verify an estate, supported exports are parsed in your browser. Only a sanitized manifest is transmitted, and only after you review and confirm it. See Security.
  • Basic usage analytics, consent-aware and free of workflow content, endpoint URLs or business data.

What we never do

  • We never sell assessment or personal data.
  • We never send workflow names, endpoint URLs, credentials or report narrative to analytics.
  • We never require an email before showing your headline assessment result.

Legal bases

Where applicable law (such as the GDPR) requires a basis for processing, we rely on your consent (marketing communications and non-essential cookies), the performance of a contract or steps taken at your request (responding to enquiries, delivering assessments), and our legitimate interests in operating and improving the service, balanced against your rights.

Sharing and processors

We use a small number of vetted processors (for example, hosting, email delivery, CRM and analytics) under data-processing terms. A subprocessor list is available to qualified prospects on request. We do not share assessment data with destination vendors or partners without your explicit, separate consent.

Retention and deletion

We keep personal data only as long as needed for the purpose collected or as required by law, then delete or anonymize it. You can request deletion of an assessment or your personal data at any time by emailing [email protected].

Your rights

Subject to your jurisdiction, you may have the right to access, correct, delete, restrict or port your data, to object to certain processing, and to withdraw consent. We respond to verified requests within the timeframes required by applicable law.

International transfers

We are designed for remote delivery across supported markets. Where data is transferred across borders, we use appropriate safeguards. The exact contracting entity, data-residency and processing arrangements are confirmed during verification for enterprise engagements.

Contact

Privacy questions and data requests: [email protected]. Security matters: [email protected].

Last updated: working draft, 2026. Superseded by the reviewed launch version.