Privacy
policy.
This policy explains what information FlowNode collects, why we collect it, and the choices you have. We have tried to write it in plain language rather than in legal shorthand.
Last updated 9 August 2026
Who we are
FlowNode is a creative platform made and operated by Designco. When you use FlowNode, Designco is the controller of the personal information described in this policy.
If your workspace was set up by your employer or client, that organization decides who may access it and what is done with the work created inside it. In that case, they act as the controller for the content in their workspace and we process it on their behalf.
You can reach us about anything in this policy at hello@flownode.io.
What we collect
We collect only what we need to run the platform and support the people using it.
- Account information: your name, email address, the organization you belong to and your role within it.
- Application information: if you request access, the details you submit, such as your studio, website, team size, the fields you work in and what you want to create.
- Content you create: prompts, uploaded files, references, generated images, video, audio and 3D assets, and the canvases that hold them.
- Usage information: which features and models you use, how many generations you run, and technical records such as browser type, device, approximate location derived from your IP address, and timestamps.
- Messages you send us: support requests, feedback and other correspondence.
We do not ask for payment card details on the website. Enterprise billing is handled through your agreement with us.
How we use it
- To provide the platform: to run your generations, save your canvases, and show your work back to you and your team.
- To keep accounts secure: to authenticate you, prevent abuse and protect the service.
- To account for usage: to record what your organization has used, so it can be reported and billed accurately.
- To support you: to answer questions and investigate problems you report.
- To improve FlowNode: to understand which capabilities are useful, in aggregate.
- To communicate: to send service messages such as invitations, confirmations, security notices and changes to the platform.
Where the law requires a legal basis, we rely on the performance of our contract with you or your organization, our legitimate interest in operating and improving a secure service, your consent where we ask for it, and compliance with our legal obligations.
Your work stays yours
You keep ownership of the content you upload and the work you create on FlowNode. We do not sell it, and we do not use it to train our own models.
Your canvases and assets are private to your organization. Access is limited by role, and our team does not browse customer work. We access content only where it is necessary to operate the service, to resolve a support request you have raised with us, or where the law requires it.
If you deliberately create a share link, anyone with that link can view what you shared until you remove it.
How AI models are used
FlowNode brings together models made by different companies. When you run a generation, the prompt and any inputs you have chosen are sent to the model you selected so that it can produce your result.
Each model maker handles that request under its own terms. We choose the models we make available with this in mind, and we surface the maker of every model in the interface so you always know whose model you are using.
Where information is processed
Your account data and the content you create are stored on servers in Europe.
Some of the providers and model makers we work with operate outside the European Economic Area. Where information is transferred outside the EEA, we rely on appropriate safeguards, such as the European Commission’s standard contractual clauses.
How long we keep it
- Account information is kept while your account is active, and for a limited period afterwards so that we can meet legal and accounting obligations.
- Content you create is kept until you or your organization deletes it, or until the workspace is closed.
- Technical and usage records are kept for a limited period, then deleted or aggregated.
- Access applications are kept for a reasonable period so that we can respond to them and understand demand.
If you would like your information deleted sooner, contact us and we will do so unless we are required to keep it.
Security
Information is encrypted in transit. Access to production systems is restricted to the people who need it, and permissions inside FlowNode are governed by organization roles.
No online service can promise perfect security, so we also expect care from you: use a strong, unique password, and tell us promptly if you think an account has been compromised.
Your rights
Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to delete it, to receive a copy in a portable format, to object to or restrict certain processing, and to withdraw consent you have given.
Write to hello@flownode.io and we will respond within the time the law allows. If your workspace is administered by your organization, we may need to pass your request to them. You also have the right to complain to your local data protection authority.
Children
FlowNode is a professional tool and is not intended for children. We do not knowingly collect information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.
Changes to this policy
We update this policy when the platform changes or the law requires it. The date at the top of this page always shows the current version, and we will give notice of material changes before they take effect.
Contact us
Questions, requests or concerns about privacy: hello@flownode.io. FlowNode is operated by Designco, designco.agency.