Privacy Policy.

This Privacy Policy is issued by Flowarden Inc., a Delaware corporation with its registered address at 2261 Market Street #4726, San Francisco, CA 94114, USA ("Flowarden," "we," "our," or "us"). Flowarden Inc. is the data controller responsible for the personal data described in this policy.

This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our application and services. For checkout, billing, and tax purposes, Paddle.com Market Limited acts as our Merchant of Record and as an independent controller of the data necessary to process your transaction — see Section 5.1.

2.1 Personal information

We may collect:

• Name
• Email address
• Account login credentials
• User preferences and profile information

2.2 Financial information (via third parties)

Flowarden integrates with Plaid to allow you to connect your financial accounts.

Through Plaid, we may access:

• Account balances
• Transaction history
• Account type and institution details

Important:

• We do not collect or store your bank login credentials
• Financial data is accessed securely via Plaid

For more information on how Plaid handles your data, please visit: plaid.com/legal/#privacy-policy

2.3 Automatically collected information

We may collect:

• Device information
• IP address
• Browser type
• Usage and interaction data

We use your information to:

• Provide and operate the Flowarden platform
• Display financial insights and analytics
• Improve product functionality and user experience
• Communicate with you (support, updates, notifications)
• Ensure security, fraud prevention, and compliance

We process your data based on:

• Your consent (e.g., connecting accounts via Plaid)
• Contractual necessity (providing services)
• Legal obligations
• Legitimate interests (platform improvement and security)

We do not sell your personal data.

We may share information with:

5.1 Service providers

• Plaid (financial data connectivity)
• Paddle.com Market Limited ("Paddle") — our Merchant of Record and payment processor. Paddle handles all checkout, billing, subscription management, tax collection, refunds, and invoicing on our behalf, and receives the personal and payment data necessary to do so. See paddle.com/legal/privacy.
• Cloud hosting and infrastructure providers

5.2 Legal requirements

We may disclose information if required to:

• Comply with laws or legal processes
• Protect rights, property, or safety

We retain data only as long as necessary:

• Account data: retained during account lifecycle
• Financial data: retained only as needed to provide services
• Transaction data: retained for regulatory compliance
• Logs: retained for security monitoring

See our Data Retention & Disposal Policy for more details.

We implement industry-standard security measures, including:

• Encryption in transit (TLS 1.2+)
• Encryption at rest
• Role-based access controls (RBAC)
• Multi-factor authentication (MFA) for sensitive access

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Withdraw consent at any time

To exercise these rights, contact: security@flowarden.com

You may request deletion of your account and associated data at any time. We will process deletion requests in accordance with applicable laws.

Our application may contain links to third-party services. We are not responsible for their privacy practices.

Flowarden is not intended for individuals under 18. We do not knowingly collect data from children.

We may update this Privacy Policy periodically. Updates will be posted with a revised "Last Updated" date.

For questions about this Privacy Policy: security@flowarden.com

By using Flowarden and connecting your financial accounts:

• You grant Flowarden and Plaid the right, power, and authority to access and transmit your financial data
• Your data will be handled in accordance with this Privacy Policy and Plaid's Privacy Policy
• You may revoke access at any time by disconnecting your linked accounts