Privacy Notice

Marianne Cottin Arredondo, based in Chile, is the controller of your personal data. Contact: hello@theflowbrief.com.

• Account: your email address and, if you sign in with Google, that account's identifier. Preferred language.

• Subscription: plan status (active, cancelled, paid period) and your Paddle subscription identifiers. Card and billing data are collected and stored by Paddle directly; we never see or store them.

• Tool responses: the answers you give in the interactive tools are used to compute and show you your own result. They are processed for your session and are not used to build a clinical profile or shared with third parties.

• Email signups: your email and the source you signed up from (for example home, footer, an article), so we know which content works.

• Team inquiries: what you send through the "For teams" form (name, company, team size, message).

• Basic analytics and technical data: aggregate page views, browser and device type, IP address and session identifiers, for security and to understand site usage.

• Communications: the messages you send us at support.

We never store crisis data or health data. The tools do not ask for diagnoses, medication, or clinical history, and we store none of that.

We never sell your personal data, and we don't share it with advertisers, data brokers, or ad networks.

We don't profile you with legal effects and we don't make automated decisions about you.

Research: the technical ability to collect anonymous responses for research exists, but it is disabled. No research data is being collected today. If it is ever enabled, it will be described here separately and collected only with your explicit, prior consent.

• Providing the service and managing your account — contract performance.

• Processing subscriptions and billing (via Paddle) — contract performance and legal obligations.

• Security, fraud prevention, and system maintenance — legitimate interest.

• Service communications (confirmations, important notices) — contract performance.

• Marketing emails — consent, which you can withdraw at any time.

• Product improvement and aggregate analytics — legitimate interest.

• Complying with legal obligations — legal obligation.

We share data only with the following recipients:

• Paddle.com Market Ltd, our Merchant of Record: processes payments, stores card and billing data, calculates taxes, and issues receipts. Their privacy notice: https://www.paddle.com/legal/privacy.

• Supabase: hosting for the database, accounts and authentication, and site content.

• An email delivery provider, for account emails (confirmation, password reset) and the newsletter.

• A site hosting provider and aggregate analytics.

• Professional advisers (legal, accounting) when necessary.

• Public authorities when required by law.

We do not sell your personal data.

Some providers may process data outside Chile. In that case we rely on appropriate contractual and technical safeguards to protect your data in accordance with Chilean Law No. 19.628 on the Protection of Private Life.

We retain account data while your account is active and for the time needed to meet legal, accounting, and tax obligations. When no longer needed, data is deleted or anonymized.

Under Chilean Law No. 19.628 on the Protection of Private Life, you have rights of: access, rectification, cancellation, and blocking of your personal data. You may also object to processing or withdraw consent where processing is based on it. You can file a complaint with the Council for Transparency (www.consejoparalatransparencia.cl).

To exercise these rights, email hello@theflowbrief.com. We will respond within one month.

We apply appropriate technical and organizational measures to protect your data: encryption in transit (HTTPS), access controls, and separation of sensitive credentials from application code.

Cookies and storage actually in use today: essential cookies and local storage to keep you signed in and remember your preferred language, plus aggregate hosting analytics. We do not use advertising cookies, social pixels, or cross-site tracking.

You can delete or block cookies in your browser; if you block the essential ones, you won't be able to sign in.

The service is not directed to children under 16. We do not knowingly collect data from minors.

We may update this notice. We will post the revised version on this page with a new date; for significant changes we will notify you by email or within the service.

For any privacy inquiry: hello@theflowbrief.com.