Privacy Policy

1. Information We Collect

Account information. When you sign up, we collect your email address and password (handled securely by our authentication provider, Supabase — we never see or store your plain-text password).

Klaviyo API keys. When you run a scan, you provide a Klaviyo private API key so we can connect to your Klaviyo account. We do not store, save, or log this key. It is used only in memory for the duration of your scan request, then discarded. It is never written to our database, our logs, or any file.

Scan results.We store the reports generated from your scans (your Klaviyo account's flow, segment, and deliverability data as retrieved at scan time) so you can view your history on your dashboard. This data comes from your own Klaviyo account and is only ever shown to you.

Payment information. Payments are processed by Lemon Squeezy, who acts as merchant of record for all transactions. We do not collect or store your credit card number, billing address, or other payment details directly — Lemon Squeezy handles this. Please see Lemon Squeezy's Privacy Policy for details on how they handle this information.

Usage data. We may collect basic technical information such as your IP address, browser type, and general usage patterns (e.g. number of scans run) through our hosting provider (Vercel) for security, debugging, and service-improvement purposes.

2. How We Use Your Information

We use the information described above to:

• Provide and operate the Fluxchek service (running scans, generating reports, enforcing plan limits)
• Process payments and manage subscriptions
• Send you transactional emails (account confirmation, password reset) via our email provider, Resend
• Maintain the security and integrity of our service
• Respond to support requests

We do not sell your personal information to third parties, and we do not use your data for advertising.

3. Third-Party Service Providers

We rely on the following third-party providers to operate Fluxchek. Each has their own privacy policy governing how they handle data:

• Supabase — database and authentication
• Vercel — hosting and infrastructure
• Lemon Squeezy — payment processing (merchant of record)
• Resend — transactional email delivery
• Klaviyo— you connect your own Klaviyo account to use our service; your relationship with Klaviyo is governed by Klaviyo's own terms and privacy policy, separate from ours

4. Data Retention

We retain your account information and scan history for as long as your account remains active. If you delete your account, we will delete your associated data within a reasonable timeframe, except where we are required to retain certain records (e.g. transaction records) for legal or accounting purposes.

Klaviyo API keys are never retained in the first place — see Section 1.

5. Your Rights

Depending on your location, you may have rights to access, correct, or delete your personal information. To exercise these rights, contact us at support@fluxchek.com.

6. Cookies

We use essential cookies required for authentication (keeping you logged in) via Supabase. We do not currently use advertising or third-party tracking cookies.

7. Data Security

We take reasonable technical measures to protect your information, including encrypted connections (HTTPS), secure authentication practices, and never persisting sensitive credentials like your Klaviyo API key. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

Fluxchek is not directed at, and not intended for use by, individuals under the age of 18.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will indicate the “Last updated” date at the top of this page when changes are made.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at support@fluxchek.com.