Privacy Policy

Last updated: 27 August 2026

Controller

Flow Systems, a sole proprietorship (eenmanszaak) established in Belgium, Mouterijstraat 6, 3582 Beringen, Belgium, enterprise number BE 1000.301.018. Contact: tendertox@gmail.com.

What we process

• Account data: name, email, authentication identifiers (via Clerk).
• Billing data: subscription status and customer ID (via Stripe). We do not store card numbers.
• Uploaded documents: the PDF you submit and the text extracted from it, sent to Anthropic's API to generate the analysis.
• Basic technical logs (IP, timestamps, errors).

Document handling

Uploaded files are processed in memory to extract text and are not stored on our servers after the request completes. Extracted text is transmitted to Anthropic, PBC as a data sub-processor to perform the analysis. Anthropic does not use data submitted through its API to train its models and retains API inputs and outputs for a limited period for trust-and-safety purposes (currently up to 30 days), per its Commercial Terms and Privacy Policy.

Sub-processors

Clerk (authentication), Stripe (payments), Anthropic (AI analysis), Vercel (hosting).

Legal basis

Performance of the contract (providing the service) and our legitimate interest in securing and improving it. For EU/UK users this policy is intended to meet GDPR requirements.

Retention

Account and billing records for as long as your account is active and as required for Belgian tax and accounting law (generally 7 years for invoices). Technical logs are kept for up to 90 days.

Your rights

Access, correction, deletion, portability, objection. Email tendertox@gmail.com. You can also lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données, gegevensbeschermingsautoriteit.be).

International transfers

Some sub-processors are in the United States; transfers rely on Standard Contractual Clauses or equivalent safeguards.