Privacy Policy

Last updated July 27, 2026

Draft. This is a working draft, not the final version. It is shared for transparency during the alpha and may change before launch.

This policy explains what Flagon, Inc. collects when you use Flagon, why, and the choices you have.

Information we collect

Account information you provide: your email address(es), username, and password (stored only as a hash).
Organization and content data you create in the product, such as organizations, members, and settings.
Technical data generated as you use the service, such as IP address, browser/user-agent, and session and access-token activity, used to keep the service secure and working.

How we use it

to provide, maintain, and secure the service;
to authenticate you and protect against abuse;
to send account and service messages (for example, email verification and password resets);
to send occasional product updates only where you have opted in, and you can opt out at any time.

Sharing

We do not sell your personal data. We share it only with service providers who help us run Flagon (such as hosting and email delivery) under appropriate confidentiality obligations, with members of your organization as the product requires, or where the law requires it.

Retention

We keep your data for as long as your account is active. When you delete your account, we delete or de-identify your personal data within a reasonable period, except where we must retain it to meet legal obligations.

Security

We take reasonable measures to protect your data. Passwords are hashed and access tokens are stored only as hashes. See our Security page for more.

Your choices

You can view and update your account information, manage your email addresses, revoke sessions and access tokens, and delete your account from your settings. Depending on where you live, you may have additional rights over your data; contact us to exercise them.

Contact

Questions about privacy? Email privacy@flagon.io.