Privacy Policy
Last updated: April 2, 2026
Introduction
Zenflow AI (“we,” “our,” “us”) operates the Zenflow AI platform — a visual workflow builder for AI-powered image and video generation. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at zenflow.media.
By using Zenflow AI, you agree to the collection and use of information in accordance with this policy.
Information We Collect
2.1 Account Information
When you create an account, we collect your name, email address, password (stored as a bcrypt hash — we never store plaintext passwords), and organization name.
2.2 Usage Data
We automatically collect:
- Project and workflow metadata (node configurations, execution history)
- Credit usage and transaction records
- Session data (login timestamps, session tokens)
2.3 User-Generated Content
- Prompts and text inputs entered into workflow nodes
- Images, videos, and documents uploaded to projects
- AI-generated outputs (images, videos, analysis results)
- Chat messages within projects
2.4 Third-Party Service Data
When you execute workflows, your prompts and input data are sent to third-party AI providers (such as FAL.ai, GenVR, Higgsfield, Google Gemini, and others) for processing. Each provider processes data according to their own privacy policies. We send only the minimum data necessary for generation.
Uploaded files and AI-generated media are stored using Cloudflare's R2 object storage and delivered through Cloudflare's network, governed by Cloudflare's privacy policy.
How We Use Your Information
We use collected information to:
- Provide, operate, and maintain the Zenflow AI platform
- Process AI generation workflows and deliver results
- Manage your account, organization, and team memberships
- Track credit usage and process billing
- Enable real-time collaboration features
- Display Pinterest content as in-session visual references (not stored)
- Improve and optimize our platform
- Communicate with you about your account or service updates
- Detect and prevent fraud, abuse, or security incidents
Data Sharing and Disclosure
We do not sell your personal information. We share data only in these circumstances:
- Prompts and input media are sent to AI generation providers to fulfill workflow execution requests
- Uploaded and generated files are stored on Cloudflare R2
- Search queries are sent to Pinterest to retrieve publicly available pin results (no personal data is shared with Pinterest)
- We may disclose information if required by law, regulation, or legal process
- In the event of a merger, acquisition, or sale of assets, user data may be transferred
Data Retention
| Data Type | Retention |
|---|---|
| Account data | While your account is active |
| Project data | Until you delete the project or account |
| Pinterest data | Not retained — exists only during your active session |
| Session tokens | 7 days, then automatically purged |
| Credit ledger | Retained indefinitely for audit and billing |
You may request deletion of your account and associated data by contacting us at team@zenflow.media.
Data Security
We implement appropriate security measures including:
- Passwords hashed with bcrypt (12 salt rounds)
- HTTP-only secure session cookies
- Role-based access control with 26-bit permission bitfield
- Atomic database transactions for credit operations
- Session validation for all API endpoints and WebSocket connections
While we strive to protect your data, no method of electronic transmission or storage is 100% secure.
Third-Party Links and Services
Zenflow AI integrates with third-party services. When you interact with Pinterest content displayed in our platform, clicking on a pin will redirect you to Pinterest's website, which is governed by Pinterest's own privacy policy. We encourage you to review the privacy policies of any third-party services you interact with.
Children's Privacy
Zenflow AI is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will delete it promptly.
Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing of your data
- Request data portability
- Withdraw consent at any time
To exercise any of these rights, contact us at team@zenflow.media.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of Zenflow AI after changes constitutes acceptance of the revised policy.
Contact Us
If you have questions about this Privacy Policy, contact us at:
The workspace that remembers.
Add your brand book, your logos and last year's approved campaign. Then ask for the dog from last year's cultural campaign.