Privacy Notice
Last updated: October 5, 2026
1. Controller and contact
ANGHEL DIGITAL SOLUTIONS S.R.L. ("we" or "Flowyce") is the controller of personal data described in this notice. We are registered in Romania under CUI 52188986 and Trade Registry number J2025053838000, with registered office at Intr. Clopotului 5, Bl. 5, 22, Timișoara, Timiș, Romania, 300494. Contact us about privacy or exercise your rights at info@sixyce.com.
2. Data, purposes, and legal bases
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, business name, account and verification records | Create, authenticate, secure, and administer your account | Contract; legitimate interests in account security |
| URLs, screenshots, prompts, product context, personas, and uploaded content | Run the analysis you request and generate reports | Contract |
| Generated analyses, reports, scores, findings, and workspace content | Save, display, organise, export, and share your work as directed by you | Contract |
| Feature use, credit ledger, device, browser, IP, diagnostic, and security records | Operate metering, prevent abuse, troubleshoot, and improve reliability | Contract; legitimate interests in security and service improvement |
| Paddle customer, subscription, transaction, and billing identifiers | Confirm entitlements, manage subscriptions, keep accounting records, and respond to payment issues | Contract; legal obligation; legitimate interests in financial administration |
| Support messages, feedback, and optional contact details | Answer requests and improve the service | Contract; legitimate interests in support and improvement |
| Communication preferences | Send requested service messages and, where offered, optional marketing | Contract for service messages; consent for optional marketing |
Core account and analysis data is needed to provide Flowyce. If you do not provide it, the relevant account or feature cannot operate. Optional profile, feedback, and marketing information can be withheld without losing core access. We do not sell personal data.
3. AI processing and transparency
Flowyce uses Google Gemini models through Lovable's AI infrastructure to generate UX analyses, simulations, scores, findings, and recommendations. Content you submit for an AI feature is transmitted for inference so the requested output can be produced. The output is generated by AI, may be inaccurate, and should be reviewed by a person before it is used.
Flowyce does not use these outputs to make solely automated decisions that produce legal or similarly significant effects about you. Do not include special-category data, credentials, confidential secrets, or unnecessary personal data about other people in prompts, screenshots, URLs, or uploads. We use submitted content to provide the requested service; we do not train a Flowyce model on customer analysis content. Provider handling is also governed by our service agreements and the provider's applicable privacy terms; we do not promise a provider log-retention period that we cannot independently control.
4. Recipients and service providers
We disclose data only as needed to operate Flowyce or meet legal obligations:
- Lovable: application hosting, infrastructure, managed backend services, authentication, database functions, AI routing, and connected-service routing.
- Google: Gemini AI inference and, when loaded by your browser, web-font delivery.
- Paddle: Merchant of Record for checkout, payments, subscriptions, invoices, tax, fraud prevention, buyer support, and refunds. Paddle acts as an independent controller for buyer and payment data under its Privacy Notice.
- Jotform: hosts the optional feedback form and processes information you choose to submit through it.
- Transactional email provider: delivers account verification, password, security, and service emails through our configured email service.
- Professional advisers and authorities: where reasonably necessary for legal, accounting, insurance, security, or compliance purposes, or when law requires disclosure.
Public sharing features disclose a report or brand portal only when you enable or share the relevant link. You are responsible for checking what it contains before sharing it.
5. International transfers
Some providers may process data outside Romania or the European Economic Area. Where GDPR requires it, transfers rely on an adequacy decision, the European Commission's Standard Contractual Clauses, or another lawful safeguard. You may contact info@sixyce.com for information about safeguards relevant to your data.
6. Retention
- Account and workspace data is kept while your account is active and for a limited period afterwards to close the account, resolve disputes, secure the service, and meet legal duties.
- Saved reports and uploaded project content are kept until you delete them, close your account, or an applicable plan-specific retention rule is communicated to you.
- Verification tokens and transient security records are kept only as long as needed for their security purpose.
- Usage and diagnostic records are kept for a limited operational period appropriate to metering, troubleshooting, fraud prevention, and audit.
- Subscription, transaction, invoice, tax, and accounting records are kept for the periods required by Romanian and other applicable law. Paddle separately retains buyer records under its own policies.
- Support and rights-request correspondence is kept as needed to handle the request and demonstrate compliance.
When retention is no longer necessary, data is deleted or anonymised unless law requires continued storage.
7. Cookies and local storage
Flowyce uses strictly necessary browser technologies for authentication, session continuity, security, and core preferences. We also use local storage to remember your cookie notice choice and interface state. Flowyce currently does not place advertising or retargeting cookies and does not activate optional analytics cookies through the cookie banner. If we introduce non-essential analytics or marketing technologies, we will update this notice and request consent before activating them where required. You can clear stored data through your browser, although doing so may sign you out or reset preferences.
8. Your GDPR rights
Depending on the circumstances, you may ask us to:
- provide access to and a copy of your personal data;
- correct inaccurate or incomplete data;
- delete data;
- restrict processing;
- provide portable data you supplied to us;
- stop processing based on legitimate interests where your rights outweigh those interests; and
- withdraw consent at any time, without affecting earlier lawful processing.
Email info@sixyce.com to exercise a right. We may verify your identity and will normally respond within one month. For a complex request or multiple requests, GDPR permits an extension of up to two further months, and we will tell you if that applies. Rights may be limited where an exemption or competing legal duty applies.
You may complain to the Romanian supervisory authority, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), at dataprotection.ro, or to the competent authority where you live or work.
9. Security
We use technical and organisational measures appropriate to the risks, including encrypted transport, access controls, account authentication, scoped database access, and restricted administrative operations. No online service can guarantee absolute security. Please use a strong, unique password and notify us if you suspect unauthorised access.
10. Children
Flowyce is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided data, contact us so we can investigate and take appropriate action.
11. Changes
We may update this notice when our service, providers, or legal duties change. We will post the revised notice and its updated date and provide additional notice for material changes where appropriate.
12. Contact
ANGHEL DIGITAL SOLUTIONS S.R.L.
Intr. Clopotului 5, Bl. 5, 22
Timișoara, Timiș, Romania, 300494
Email: info@sixyce.com