Privacy Policy

Last updated: 23 August 2026

1. Introduction

AutoFlow Studio ("AutoFlow", "we", "us", "our") is a Chrome browser extension operated by amine.smpc. This Privacy Policy explains what personal data we collect through the AutoFlow Studio extension and the website at auto-flow.studio, how we use it, how we store and protect it, who we share it with, and your rights regarding that data.

By installing or using AutoFlow Studio you agree to this policy. If you do not agree, please uninstall the extension and do not use our services.

2. Data We Collect

2.1 Account & Authentication Data

When you create an account or sign in, we collect:

  • Email address — used to identify your account, communicate important service updates, and link your subscription.
  • Password (email/password sign-up only) — hashed on the server; we never store or transmit your password in plain text.
  • Google ID token (Google Sign-In only) — received from Google via Chrome's identity API and sent to our server solely to verify your identity. We do not receive or store your Google password.

2.2 Usage Data

To enforce plan limits (free vs. Pro) and prevent abuse, we collect the following numeric counts only:

  • Prompt counts — number of text and full prompts submitted per day.
  • Workflow run counts — number of queue runs started per day, broken down by mode (lite / flow / full).
  • Download counts — number of media downloads per day.
  • Node and generate counts — number of nodes and generation steps per workflow run.

These counts are tied to your account for billing purposes. We do not collect the content of your prompts, the text of AI responses, or any images or videos.

2.3 Community Template Submissions (Optional)

If you choose to share a workflow as a community template, we collect:

  • Your display name (author name you provide).
  • The workflow payload — the node graph, prompt text, and settings you explicitly choose to publish.

This is entirely voluntary. Workflows are never uploaded unless you press the "Share" button.

2.4 Review Reward Claims (Optional)

If you claim a review reward, we collect the reviewer name you provide so we can verify the review.

2.5 Website Content Read by the Extension

AutoFlow Studio injects content scripts into the following sites to automate video generation workflows on your behalf:

  • labs.google (Google Flow / Veo)
  • chatgpt.com
  • gemini.google.com
  • claude.ai
  • grok.com
  • chat.z.ai

On these sites, the extension reads text and images only from the composer and result areas to bring AI responses back into your workflow. This data is processed locally in your browser and is not sent to our servers. The extension does not access your conversation history, other tabs, or any other website.

3. Data We Do NOT Collect

  • Your prompts, AI responses, or generated images/videos
  • Your browsing history or activity on sites other than the six listed above
  • Financial or payment information (payments are handled by our third-party payment processor, Whop; see Section 6)
  • Location data
  • Health or biometric data
  • Any personal data beyond what is described in Section 2

4. How We Use Your Data

  • Authentication: To sign you in, issue and refresh session tokens, and reset your password.
  • Plan enforcement: To check and enforce daily and monthly usage limits for your plan tier.
  • Service operation: To maintain the extension, detect and prevent abuse, and improve reliability.
  • Community features: To display shared templates and attribute them to their authors.

We do not use your data for advertising, profiling, or any purpose unrelated to operating AutoFlow Studio.

5. Where and How Data Is Stored

5.1 Data Stored Locally (On Your Device)

The following data is stored entirely in your browser using Chrome's chrome.storage.local and IndexedDB. It never leaves your device unless you explicitly share it:

  • Workflows (node graphs, prompt text, settings)
  • Reference images and extracted video frames
  • Queue configurations and run logs
  • Extension settings and preferences
  • Authentication tokens (used to stay signed in)

5.2 Data Stored on Our Servers

The following data is stored on our backend at api.auto-flow.studio, hosted on secured infrastructure:

  • Email address and hashed password
  • Plan type and subscription status
  • Daily and monthly usage counts (numeric values only)
  • Community templates you choose to share (pending moderation before publication)
  • Review reward claim records

6. Data Sharing and Third Parties

We do not sell your data to any third party.

We share data only with the following parties:

  • Google (Sign-In): When you sign in with Google, your Google ID token is sent from Google to our server to verify your identity. We receive your email address from this token. No other Google data is accessed.
  • Whop (Payment processing): If you upgrade to Pro, payment is processed by Whop. Your email is shared with Whop to match the payment to your AutoFlow account. We do not handle credit card numbers or payment details directly.
  • AI platforms (in-browser only): The extension interacts with the AI platforms listed in Section 2.5, but this happens entirely within your browser session using your own signed-in accounts. No data is routed through our servers.
  • Vercel (Website hosting): Our website at auto-flow.studio is hosted on Vercel, which may collect standard web analytics (page views, country-level geo). This does not apply to the extension itself.

Your data is not used or transferred for purposes unrelated to the extension's core functionality, and is not used to determine creditworthiness or for lending purposes.

7. Data Retention

  • Local data is retained until you clear it manually, clear your browser data, or uninstall the extension.
  • Server-side account data is retained for as long as your account is active. Usage counts are aggregated daily and older daily records are automatically purged.
  • Deleted accounts: Upon account deletion request, all personal data (email, usage records, shared templates) is permanently deleted from our servers within 30 days.

8. Your Rights

You have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data (e.g., update your email or password).
  • Delete your account and all associated data.
  • Export your locally stored workflows (the extension provides a Share/Export feature).
  • Withdraw consent by uninstalling the extension at any time, which stops all data collection immediately.

To exercise any of these rights, email support@auto-flow.studio.

9. Security

We protect your data with the following measures:

  • Passwords are hashed server-side and never stored in plain text.
  • All communication between the extension and our backend uses HTTPS (TLS encryption).
  • Authentication tokens are stored locally in Chrome's sandboxed extension storage, inaccessible to other extensions or websites.
  • The extension does not load or execute any remotely fetched code.

10. Children's Privacy

AutoFlow Studio is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the extension after changes constitutes acceptance of the updated policy.

12. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at: