Privacy Policy

Privacy Policy for Flow2C

Effective Date: September 6, 2025 
Data Controller: Andreas Lechner 
Address: Lessingstr. 15b, 91056 Erlangen, Germany 
Email: privacy@flow2c.com

Flow2C (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you use our service.

1. What We Collect

GitHub OAuth Login

To access Flow2C, users authenticate via GitHub OAuth. Upon login, we access:

  • Your GitHub username
  • Your public GitHub email address (if available)

We do not collect or store any additional personal data beyond what is provided during authentication.

Project and Issue Metadata

Flow2C processes metadata from GitHub repositories that you explicitly select, including:

  • Issue titles
  • Timestamps (e.g. creation, closure)
  • Labels and status indicators

We do not access or store issue content, comments, or contributor identities.

2. How We Use Your Data

We use your data solely to generate analytics and visualizations such as Lead Time and Cycle Time. These insights help development teams evaluate and improve their workflows.

We do not use your data for profiling, advertising, or resale.

3. Data Storage and Retention

  • Your project data is stored securely to enable historical analysis.
  • If you cancel your account, all stored data will be deleted automatically within 30 days.
  • You may request deletion of your data at any time via email or our contact form.

4. Cookies and Tracking

Flow2C uses only essential cookies required for the operation of the website and service. We do not use tracking cookies, advertising pixels, or behavioral profiling tools.

5. Data Sharing

We do not share your personal data with third parties, except:

  • When required by law
  • To maintain and operate the service (e.g. infrastructure providers)

All service providers are contractually bound to comply with applicable data protection laws.

6. International Data Transfers

Flow2C is operated from the European Union. If you access our service from outside the EU, your data may be transferred to and processed in the EU. We ensure appropriate safeguards are in place, including Standard Contractual Clauseswhere required.

7. Your Rights

Depending on your location, you may have the right to:

  • Access your personal data
  • Request correction or deletion
  • Withdraw consent
  • Lodge a complaint with a supervisory authority

To exercise these rights, contact us at: privacy@flow2c.com

8. Children’s Privacy

Flow2C is not intended for use by children under the age of 13. We do not knowingly collect personal data from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.