Terms of Service

Acceptance of Terms

These Terms of Service ("Terms") constitute a legally binding agreement between you ("Customer", "you", or "your") and Flowxar ("we", "us", or "our") governing your access to and use of the website located at flowxar.com and all associated services (collectively, the "Service").

By creating an account or using the Service, you confirm that you are at least 18 years old, that you have the authority to bind your organization (if applicable), and that you agree to these Terms and our Privacy Policy.

If you do not agree to these Terms, you must not use the Service.

Description of Services

Flowxar provides a software-as-a-service (SaaS) platform that enables product teams to create, deploy, and analyze interactive onboarding flows, product tours, and in-app guides for their users. The Service includes:

• A web-based dashboard for building and managing onboarding flows.
• A JavaScript SDK ("onboarding.js") for delivering flows on customer websites.
• Analytics and reporting on flow performance and user engagement.
• AI-powered content generation ("Magic Write") for flow copy.

We reserve the right to modify, suspend, or discontinue any part of the Service at any time with reasonable notice.

Accounts & Registration

To use the Service, you must create an account. You agree to:

• Provide accurate, current, and complete information during registration.
• Maintain the security of your account credentials.
• Notify us immediately of any unauthorized access to your account.
• Accept responsibility for all activity that occurs under your account.

We reserve the right to suspend or terminate accounts that violate these Terms, provide false information, or engage in abusive behavior toward our team or other users.

Plans & Billing

Subscription Plans

Flowxar offers Free, Pro, Business, and Enterprise plans. Features and limits vary by plan as described on our Pricing page. We reserve the right to change plan features and pricing with 30 days' notice.

Payment

Paid subscriptions are billed in advance on a monthly or annual basis. Payments are processed by Stripe. By subscribing, you authorize us to charge your payment method for the applicable subscription fee.

Auto-Renewal

Subscriptions automatically renew at the end of each billing period unless cancelled before the renewal date. You can cancel at any time from your billing settings.

Refunds

We offer a 14-day refund policy for new subscriptions. Please see our Refund Policy for full details.

Failed Payments

If a payment fails, we will retry the charge and notify you. After repeated failures, your account may be downgraded to the Free plan. Access to paid features will be suspended until payment is resolved.

Acceptable Use

You agree not to use the Service to:

• Violate any applicable laws or regulations.
• Infringe the intellectual property rights of others.
• Distribute malware, spam, or malicious code.
• Collect personal data from end users without proper disclosure and consent.
• Reverse engineer, decompile, or disassemble any part of the Service.
• Attempt to gain unauthorized access to our systems or other accounts.
• Use the Service to create onboarding flows that deceive or defraud end users.
• Resell or sublicense the Service without our express written permission.

Violation of these restrictions may result in immediate account termination without refund.

Fair Use

Flowxar offers flat-rate plans intended for normal commercial use. While we do not charge per monthly active user (MAU), plans are not designed for disproportionate infrastructure usage. Flowxar reserves the right to throttle, suspend, or reprice accounts whose usage generates infrastructure load materially exceeding that of comparable customers on the same plan. In such cases, we will contact you in advance to discuss an appropriate arrangement before taking any action.

Intellectual Property

Our IP

The Service, including all software, design, trademarks, and content created by us, is owned by Flowxar and protected by applicable intellectual property laws. These Terms do not grant you any ownership rights in the Service.

Your Content

You retain all ownership of the content you create using the Service (flow text, images, configurations). You grant us a limited, non-exclusive license to host and process your content solely to provide the Service.

Feedback

If you provide feedback or suggestions, we may use them without obligation to you.

Data Processing Agreement (DPA)

This Data Processing Agreement ("DPA") forms part of the Terms of Service between Flowxar ("Processor") and the Customer ("Controller") and governs the processing of personal data by Flowxar on behalf of the Customer, as required by Article 28 of the EU General Data Protection Regulation (GDPR) 2016/679.

By using the Service, the Customer accepts this DPA without requiring a separate signed document.

1. Definitions

• Controller — the Customer, who determines the purposes and means of processing end-user personal data.
• Processor — Flowxar, which processes personal data on behalf of the Controller.
• End-User Data — any personal data relating to the Controller's end users that is processed via the Flowxar SDK or platform.
• GDPR — EU General Data Protection Regulation 2016/679.

2. Subject-Matter and Duration

Flowxar processes End-User Data solely to deliver the Service as described in the Terms. Processing continues for as long as the Customer maintains an active account and for up to 30 days after termination (deletion period).

3. Nature and Purpose of Processing

Flowxar processes End-User Data to:

• Deliver onboarding flows, product tours, and in-app guides to the Controller's end users via the JavaScript SDK.
• Generate anonymized, aggregated analytics (flow completion rates, step views, dismissals) for display in the Controller's dashboard.
• Maintain service reliability, performance, and security.

Flowxar does not use End-User Data for its own marketing, profiling, or advertising purposes.

4. Types of Personal Data Processed

The Flowxar SDK collects only anonymized behavioral data from end users:

• Flow and step interaction events (view, complete, dismiss)
• Anonymous session identifiers (randomly generated, not linked to real identity)
• Approximate geographic region (country/city level, derived from IP — IP address itself is not stored)
• Browser type and device category

Flowxar does notcollect names, email addresses, phone numbers, or any other directly identifying information about the Controller's end users.

5. Categories of Data Subjects

End users of the Controller's website or application who interact with onboarding flows delivered by the Flowxar SDK.

6. Controller Obligations

The Controller warrants that:

• It has a lawful legal basis under GDPR Art. 6 to use Flowxar for behavioral analytics on its end users.
• Its own Privacy Policy accurately describes the use of Flowxar and the associated data processing.
• Where required by applicable law (including ePrivacy Directive), it has obtained valid consent from end users before activating the Flowxar SDK.
• It will not instruct Flowxar to process data in a manner that violates applicable law.

7. Processor Obligations

Flowxar agrees to:

7.1 Instructions — Process End-User Data only on documented instructions from the Controller (as specified in these Terms), unless required by EU or member state law.

7.2 Confidentiality — Ensure that all personnel authorized to process End-User Data are bound by confidentiality obligations.

7.3 Security — Implement appropriate technical and organizational measures to protect End-User Data against unauthorized access, loss, or destruction (Art. 32 GDPR), including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Access controls limited to personnel who need access to provide the Service
• Regular security reviews and vulnerability assessments

7.4 Sub-processors — Not engage new sub-processors without prior notification to the Controller (see Section 8). The Controller may object to a new sub-processor within 14 days of notification; if no resolution is reached, the Controller may terminate the Service without penalty.

7.5 Assistance — Data Subject Rights — Provide reasonable technical assistance to the Controller to fulfill data subject requests under GDPR Art. 15–22 (access, rectification, erasure, portability), to the extent such requests relate to data controlled by Flowxar's systems. Requests should be directed to support@flowxar.com.

7.6 Assistance — Security & DPIAs — Assist the Controller in meeting obligations under GDPR Art. 32–36 (security, breach notification, DPIAs) by providing relevant information upon request.

7.7 Deletion — Upon termination of the Service, delete or return all End-User Data within 30 days, unless retention is required by applicable law.

7.8 Audit — Make available all information necessary to demonstrate compliance with this DPA. Flowxar will accommodate reasonable audit requests; the Controller bears the cost of any third-party auditor.

7.9 Breach Notification — Notify the Controller without undue delay (and no later than 72 hours after becoming aware) of any personal data breach affecting End-User Data.

8. Sub-Processors

Flowxar uses the following sub-processors to deliver the Service. All sub-processors are bound by GDPR-compliant data processing agreements:

* Vercel automatically routes requests to the nearest available region. All transfers to US-based infrastructure are covered by Vercel's Standard Contractual Clauses. See: vercel.com/legal/dpa

Flowxar will notify Customers of any intended changes to this list (additions or replacements) at least 14 days in advance via email or in-app notification.

9. International Data Transfers

Where End-User Data is transferred outside the European Economic Area (EEA), Flowxar ensures that appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) as adopted by the European Commission (Decision 2021/914), where applicable.
• Processing within EU-region infrastructure where available (Supabase EU, PostHog EU).

Flowxar does not transfer End-User Data (anonymized behavioral events from the SDK) outside the EEA. Dashboard user data may be processed by US-based sub-processors subject to SCCs as listed in Section 8.

10. Contact

For DPA-related inquiries, data subject requests, or security concerns:

• Email: support@flowxar.com
• Subject line for data protection queries: "DPA / Data Protection"

Disclaimers

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

We do not warrant that the Service will be uninterrupted, error-free, or free from viruses. We do not warrant that any results obtained from use of the Service will be accurate or reliable.

Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, FLOWXAR SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, REVENUE, DATA, OR GOODWILL, ARISING OUT OF OR IN CONNECTION WITH THESE TERMS OR THE SERVICE.

OUR TOTAL LIABILITY TO YOU FOR ALL CLAIMS ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICE SHALL NOT EXCEED THE AMOUNTS PAID BY YOU TO US IN THE 12 MONTHS PRECEDING THE CLAIM.

Indemnification

You agree to indemnify and hold harmless Flowxar and its officers, directors, employees, and agents from and against any claims, damages, losses, liabilities, costs, and expenses (including reasonable legal fees) arising from:

• Your use of the Service in violation of these Terms.
• Your violation of any third-party rights, including intellectual property rights.
• Your onboarding flows causing harm to end users.

Termination

Either party may terminate these Terms at any time. You may cancel your subscription from your billing settings. We may terminate or suspend your account immediately, without prior notice, if you breach these Terms.

Upon termination, your right to use the Service ceases immediately. Your data will be retained for 30 days and then deleted, unless we are required by law to retain it longer.

Governing Law

These Terms are governed by and construed in accordance with the laws of the European Union and applicable member state law. Any disputes arising under these Terms shall be subject to the exclusive jurisdiction of the competent courts in the relevant jurisdiction.

Changes to Terms

We may update these Terms from time to time. We will notify you of material changes by email and by posting the updated Terms on this page with a new "Last updated" date. Your continued use of the Service after the effective date of changes constitutes your acceptance of the updated Terms.

Contact

For questions about these Terms, please contact us:

• Email: support@flowxar.com
• Website: flowxar.com