Privacy Policy

Effective date: 2026-06-30

Introduction

ReddFlow helps founders and indie hackers find Reddit conversations their product can enter, then draft Reddit-native posts and comments for human review. This Privacy Policy explains what information we collect when you use ReddFlow, how we use it, and the choices you have.

This policy applies to ReddFlow. It does not apply to Reddit, payment processors, AI providers, analytics providers, or other third-party sites and services that ReddFlow may link to or use to operate the service.

Information We Collect

We collect information needed to operate ReddFlow and protect the service:

1. Account information -- name, email address, avatar, login method, email verification status, locale, invite-code or role information when enabled, and authentication session data.
2. Report inputs and outputs -- website URLs you submit, normalized domains, brand names inferred from those domains, generated subreddit and Reddit post recommendations, report slugs, unlock status, strategy guidance, and subscription targets connected to a report.
3. Reddit drafting inputs and outputs -- subreddit names, post ideas, Reddit post URLs, public Reddit thread context, manual context you provide, optional link URLs, prompt payloads, generated post/comment drafts, AI task status, credit usage, and generation history.
4. Payment and subscription records -- product selected, checkout session IDs, order and subscription numbers, payment provider, amount, currency, invoice links or transaction IDs returned by the payment provider, billing email, subscription status, cancellation status, and credit grants. We do not store full card numbers on ReddFlow servers.
5. Support information -- support ticket titles, messages, admin replies, attachment URLs, and uploaded images you choose to attach.
6. Usage, device, and security data -- IP address, user agent, request timing, rate-limit signals, UTM source, pages or features used, error logs, and similar technical data.
7. Cookies and local preferences -- authentication cookies, locale cookies, UI preference cookies such as sidebar state, and analytics or customer-service cookies if those integrations are enabled.

Public Reports and User Content

ReddFlow reports are built from a website URL. The anonymous preview for a report is available at a public report URL, so anyone with that URL may be able to view the preview portion of the report. Login unlocks the full opportunity list for the signed-in user, and an active report subscription unlocks strategy guidance.

Do not submit confidential, sensitive, or private information in a website URL, support ticket, drafting prompt, manual context field, or attachment unless you are comfortable with ReddFlow processing it to provide the service.

ReddFlow does not automatically publish posts or comments to Reddit. Generated drafts are provided for your review, editing, and manual posting.

How We Use Information

We use the information we collect to:

• Generate and display Reddit opportunity reports.
• Unlock report sections based on login and subscription status.
• Generate Reddit-native post and comment drafts.
• Track credits, AI tasks, orders, subscriptions, and monthly report deliveries.
• Send account, verification, password reset, billing, support, and report-delivery emails when email is configured.
• Provide support, troubleshoot issues, and respond to user requests.
• Prevent abuse, rate-limit high-volume requests, secure accounts, and detect fraudulent activity.
• Improve product quality, reliability, and user experience.
• Comply with legal obligations and enforce our terms.

AI and Report Processing

When you request a report or draft, ReddFlow may send the relevant inputs to external services that help generate results. This may include website URLs, generated keywords, public Reddit context, prompt text, and output instructions. ReddFlow currently supports an EvoLink/OpenAI-compatible text generation path for Reddit drafting and a LaunchClub-compatible report-generation provider for report previews.

AI-generated reports, strategy notes, and drafts may be inaccurate, incomplete, outdated, or poorly suited to a specific Reddit community. You are responsible for reviewing outputs before relying on them or posting them anywhere.

How We Share Information

We do not sell your personal information. We share information only as needed to operate ReddFlow, including with:

• Authentication providers such as Google or GitHub, if you choose or enable those sign-in methods.
• Payment providers such as Creem, Stripe, PayPal, Alipay, or WeChat Pay, depending on the checkout provider configured for the service.
• Email providers such as Resend or Cloudflare Email, when transactional or report-delivery email is configured.
• AI and report providers that process inputs to generate reports, strategies, or drafts.
• Storage providers such as Cloudflare R2/S3-compatible storage, if image uploads are configured for support attachments or other uploads.
• Analytics and customer-service providers such as Google Analytics, Plausible, Crisp, or Tawk.to, only when those integrations are configured.
• Administrators and support staff who need access to operate the service and respond to support requests.
• Legal, safety, or compliance recipients when required by law, to protect rights and safety, or to investigate abuse.

Cookies and Analytics

ReddFlow uses cookies and similar technologies for authentication, locale selection, UI preferences, security, and rate limiting. If analytics or customer-service integrations are configured, those providers may set or read their own cookies and collect usage data according to their own policies.

You can control cookies through your browser settings, but blocking essential cookies may prevent login, language switching, or parts of the app from working.

Data Retention

We keep information for as long as needed to provide ReddFlow, maintain reports and generation history, process billing and subscriptions, respond to support requests, comply with legal obligations, resolve disputes, prevent abuse, and enforce agreements.

You may ask us to delete or update account-related information through the service or the support contact available in the app. Some records may be retained where required for security, billing, accounting, legal compliance, backup, or fraud-prevention reasons.

Data Security

We use reasonable technical and organizational measures to protect information, including access controls, authentication, server-side validation, rate limiting, and encrypted secret storage when a configuration encryption key is set. No internet service can be guaranteed to be 100% secure.

Your Choices and Rights

Depending on where you live, you may have rights to access, correct, delete, export, or object to certain uses of your personal information. You can update some account information in the app and can contact us at [email protected] for privacy requests.

You can cancel supported subscriptions from the billing area when cancellation is available through the configured payment provider. You can also choose not to submit a website URL, Reddit URL, prompt, manual context, attachment, or support request.

Third-Party Services and Links

ReddFlow may link to Reddit posts, subreddits, payment pages, provider portals, and other third-party services. These services are not controlled by ReddFlow. Your use of third-party services is governed by their own terms and privacy policies.

ReddFlow is not affiliated with Reddit.

Children

ReddFlow is designed for founders, indie hackers, and business users. It is not intended for children under 13 or for anyone who is not allowed to use online services under applicable law.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the date at the top of this page and may provide notice through the service where appropriate.

Contact Us

If you have questions about this Privacy Policy or want to make a privacy request, contact us at [email protected].