Privacy Policy

Last Updated: February 9, 2025

Introduction

Welcome to FlowTube! FlowTube is a Chrome extension that automates the export of Webflow projects to GitHub repositories. This Privacy Policy explains how we handle your data when you use the extension.

FlowTube is developed by Silso, based in the Netherlands. We comply with the General Data Protection Regulation (GDPR) and other relevant privacy laws.

By using FlowTube, you agree to this Privacy Policy. If you have any questions, feel free to contact us at legal@flowtu.be.

What Data We Collect

FlowTube collects and processes only the minimum data necessary to function.

Data Processed by FlowTube:
‍

Type of Data Purpose Storage & Handling
GitHub Token Used to authenticate with GitHub APIs for repository access 🔐 Encrypted on the client-side using AES-256-GCM before transmission. Never stored on our servers.
Repository Name Used to commit Webflow exports to GitHub ✅ Only used temporarily during the commit process.
Webflow ZIP Files Uploaded and committed to GitHub ⏳ Temporarily processed and removed after upload. Never stored permanently.
User Configuration (e.g., repository settings, Webflow URLs) Allows the extension to function according to user preferences 🔒 Stored in Chrome Storage (not on our servers) for persistence.

‍

How We Use Your Data

FlowTube only uses the collected data for the following purposes:

  • Authenticating with GitHub (via encrypted tokens)
  • Detecting Webflow exports and automating commits
  • Persisting user configurations (stored locally in Chrome Storage)
  • Ensuring security (e.g., AES encryption to protect sensitive credentials)

🚫 We do not sell, rent, or share your personal data with third parties.

Data Security

We prioritize security and use industry-standard measures to protect your data:

  • AES-256-GCM Encryption: GitHub tokens are encrypted before being transmitted.
  • Local Storage Only: Sensitive data remains in Chrome Storage and is never stored on external servers.
  • HTTPS-Only Communication: All data transfers are encrypted in transit.
  • Temporary Data Processing: ZIP files and decrypted tokens are only kept in memory during the commit process.

Despite our best efforts, no system is 100% secure. If you believe your data has been compromised, contact us at legal@flowtu.be immediately.

Data Retention

FlowTube follows a strict no-retention policy for user data:

  • GitHub tokens are never stored (only encrypted and transmitted).
  • Repository names and ZIP files are processed temporarily and not retained.
  • User configurations are stored in Chrome Storage and can be deleted at any time.

6. Your GDPR Rights

As a user in the European Union (EU), you have rights under the GDPR, including:

  • Right to Access – Request a copy of your data.
  • Right to Rectification – Correct inaccurate data.
  • Right to Deletion ("Right to be Forgotten") – Delete stored data.
  • Right to Restrict Processing – Limit how we use your data.
  • Right to Data Portability – Obtain a machine-readable copy of your data.
  • Right to Object – Object to data processing in certain cases.

Since FlowTube does not store personal data, most GDPR requests are not applicable. However, you can clear all extension data anytime by removing FlowTube from Chrome and deleting stored data via Chrome’s settings.

To exercise your rights, contact us at legal@flowtu.be.

Third-Party Services

FlowTube interacts with the following third-party services:

  • GitHub API
    • Used to commit Webflow exports to the user’s GitHub repository.
    • Data Shared: Repository name (temporarily), encrypted GitHub token (only during authentication).
    • Security: Data is encrypted before transmission, and GitHub’s security measures apply.
    • More information: GitHub Privacy Policy
  • val.town (Server Endpoint Processing)
    • FlowTube uses val.town to handle the upload of encrypted ZIP files and interaction with GitHub APIs.
    • Data Shared: Encrypted GitHub token (AES-256-GCM), Webflow ZIP file (processed temporarily).
    • Security: All data is transmitted over HTTPS and processed temporarily. val.town does not store decrypted GitHub tokens or files.
    • More information: val.town Privacy Policy
  • Chrome Storage API (Google Services)
    • Used to persist user preferences (e.g., repository name, Webflow URL).
    • Data Shared: None beyond what is stored locally in Chrome.
    • More information: Google Privacy Policy

Disclaimer: FlowTube is an independent tool and is not affiliated, associated, authorized, or endorsed by Webflow, GitHub, or Val.town. All trademarks and brand names belong to their respective owners.

Cookies & Analytics

🚫 FlowTube does not use cookies or analytics tracking.

We do not collect usage analytics, browsing behavior, or personal identifiers.

Policy Updates

We may update this Privacy Policy to reflect changes in legal requirements or extension functionality.  If we make significant updates, we will:

  • Publish the updated policy on flowtu.be
  • Notify users via the Chrome Web Store listing

We recommend reviewing this policy periodically.

Contact Information

If you have any questions about this Privacy Policy or your data rights, contact us at:

legal@flowtu.be

Legal Basis for Processing (GDPR Article 6)

FlowTube processes data based on the following legal grounds:

  • Performance of a contract (Article 6(1)(b)) – Necessary to provide the extension's core functionality.
  • Legitimate interest (Article 6(1)(f)) – Ensuring security and integrity of data transfers.
  • Users provide explicit consent by using FlowTube and granting it the necessary Chrome permissions.