Privacy Policy

Account information: your name, email address, and password (stored encrypted, never in plain text) when you create a buyer or creator account.

Order & license information: your purchase history, downloads, and any license keys issued to you. Full payment card details are handled entirely by Stripe — Freeflow never receives or stores them.

Creator & payout information: your store details and the payout account information you connect through Stripe Connect.

Support & communications: messages you send through our in-site chat with staff or with a creator, and reports you file about an order.

Usage & device data: pages you visit, approximate location derived from IP address, browser and device type, and similar technical data collected automatically, including via cookies.

Gift recipients: if someone sends you a gift, the buyer gives us your email address so we can deliver it. We use it only to send you that delivery email (and, if you accept our terms to open it, to keep a record of that acceptance) — we don't add it to any mailing list. If you choose to add a gift to your account, we link that order to your account and move its license to you; the buyer, who chose to send it to your email address, keeps a record of the order showing that address but no access to the gift.

Records of your choices: when you accept our Terms of Use and this policy, or say yes or no to marketing or digest emails, we record which account or email, exactly when, the version of the wording you saw, and where you made the choice (for example signup, checkout, or your settings). We also keep a log of the emails we send you — recipient, subject, type, and whether it was delivered — but not their contents.

Anonymous visit counts: we count live visitors and page views, and which pages lead to which, using a random identifier held in your browser's tab-scoped session storage (not a cookie) that is cleared when you close the tab. Live presence expires within about 90 seconds and daily page counts are deleted automatically after roughly three months. These are aggregate totals, not profiles of individuals, and they are not used for advertising. Your IP address is held for about a minute only, to limit abusive request rates.

• To process orders, deliver digital purchases, and issue licenses
• To process creator payouts and calculate commission
• To provide customer support and investigate reported issues
• To detect and prevent fraud, abuse, and violations of our Terms of Use
• To send order confirmations, download links, account notices, and other emails needed to deliver your purchase
• To send marketing or product-digest emails, only where you have opted in
• To keep records showing what you agreed to and what we sent you
• To understand how the site is used and improve it

Service emails. If you've placed an order with us, we keep the email address from that order on file and use it to send order confirmations, download links, and license and renewal notices. These are essential to your purchase (our lawful basis is performing our contract with you) and can't be turned off.

Marketing and digest emails. Emails about new assets, sales and offers, and the digest about creators you follow, are sent only if you've opted in — they are off by default, and we ask you clearly (for example at checkout, in a prompt after you sign in, or when you follow a creator) and never as a condition of buying. Our lawful basis is your consent. You can withdraw it at any time, as easily as you gave it: use the unsubscribe link at the bottom of every such email, or sign in and go to Account → Notifications. Withdrawing doesn't affect emails already sent.

We use essential cookies to keep you signed in and remember your cart, which the site can't function properly without. We also use a small number of functional and analytics cookies to remember your preferences and understand overall usage patterns. You can control cookies through your browser settings, though blocking essential cookies will affect core features like checkout.

We don't sell your personal information. We share it only with:

• Stripe, to process payments and creator payouts. We send Stripe your email and an order reference so it can email your receipt, and Stripe may collect device and behavioral signals to screen payments for fraud. Stripe acts as an independent controller for that screening — see Stripe's own privacy policy. For a gift order your receipt goes to your own email, not the recipient's.
• Infrastructure and email providers that host the site and deliver transactional email on our behalf
• A creator you purchase from, limited to what's needed to fulfil and support your order — never your full payment details
• Law enforcement or other parties, if required by law or to protect our rights and users' safety

Some listings link out to a creator's own website; once you follow such a link, that site's own privacy practices apply, not ours.

We use reasonable technical and organizational safeguards to protect your information, including encrypting passwords and never handling raw card data ourselves. Emailed download links are single-purpose, expire (24 hours for a normal order, 30 days for a gift), and are tied to the network location that first opens them — which means we process the IP address used to open them. Our servers also keep standard security and access logs, including IP addresses, to detect and block abuse. No method of storage or transmission is completely secure, but we work to keep your data protected at every stage.

We keep your information for as long as your account is active and as needed to provide the service, resolve disputes, and meet our legal and accounting obligations — for example, order and payout records are typically kept longer than general account activity for tax purposes. Records of consent and of the emails we've sent are kept for as long as needed to demonstrate compliance, and are not deleted when an account is terminated.

You can permanently terminate your account yourself, at any time, from Account Settings in your dashboard — no need to email us. It's confirmed with a 6-digit code sent to your email so no one else can do it for you, and it takes effect immediately.

There are two versions, and they do different things:

• Terminating your creator account — if you sell on Freeflow — permanently removes your name, email, and other personal details, and freezes your store and its listings rather than deleting them: they're removed from browsing and search and can't be purchased again, but buyers who already bought from you keep their downloads and license keys. A published, sold listing is public commercial content, not personal information, so it doesn't get erased along with your profile. Your general account (orders, licenses, purchases you made as a buyer) is not affected.
• Terminating your general account does everything above for your personal details, and also freezes a linked creator store the same way, if you have one.

As with any deletion request, some records — like completed order and payout records — are kept afterward for the legal and accounting reasons described in Data retention above, but they're no longer tied to your name or a working login.

Beyond deleting your account yourself as described above, under UK data protection law (UK GDPR and the Data Protection Act 2018) you have rights to access, correct, or export the personal information we hold about you, to object to or restrict certain processing, and to withdraw any consent you've given (such as for marketing emails) at any time. To exercise any of these, open a ticket in our Discord and we'll respond within the timeframes the law requires. If you're not satisfied with how we've handled your request, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Freeflow is not directed at children under 13, and our Terms of Use require account holders to be at least 16, or at least 13 with a parent or guardian's involvement. We don't knowingly collect personal information from children outside these terms; contact us if you believe we have and we'll remove it.

Freeflow operates from and processes data in the United Kingdom. If you use the site from outside the United Kingdom, your information will be transferred to and processed there, which may have different data protection laws than your home country.

We may update this policy from time to time. Each update gets a new version number and "Last updated" date above, shared with our Terms of Use. When a change is material, we'll ask existing account holders to review and accept the new version before they continue using their account.

Questions about this policy or your data? Open a ticket in our Discord, or see our Support page.