Flowdrop Terms of Service

Effective Date: August 11, 2025

1. Eligibility & Accounts

1.1 Eligibility.

You must be at least 13 years old to use the Service. If you are under the age of majority in your jurisdiction, you may use the Service only with the consent of a parent or legal guardian.

1.2 Account Registration.

You may create an account via email/password or by using a third‑party sign‑in provider such as Google. You are responsible for maintaining the confidentiality of your credentials and for all activities that occur under your account.

1.3 Accuracy.

You agree to provide accurate, current, and complete information and to keep it updated.

2. Google OAuth Scopes & Use of Google User Data

2.1 Baseline sign‑in scopes.

For authentication we request email and profile.

2.2 Optional Google Workspace scopes.

When you connect Google integrations or enable nodes that operate on Google content, we request additional scopes only as needed for the specific node. We prefer the least‑privilege scope (for example, drive.file per‑file access) and ask for broader scopes only when you explicitly select workflows that require them.

Gmail (Restricted)

  • https://www.googleapis.com/auth/gmail.readonly (read mail, including bodies)
  • https://www.googleapis.com/auth/gmail.metadata (read metadata such as headers and labels)
  • https://www.googleapis.com/auth/gmail.modify (read and modify, including labels)
  • https://www.googleapis.com/auth/gmail.compose (create/draft)
  • https://www.googleapis.com/auth/gmail.send (send)
  • https://www.googleapis.com/auth/gmail.settings.basic and https://www.googleapis.com/auth/gmail.settings.sharing (manage labels/filters/forwarding as configured by your node)

We do not use Gmail data for advertising. If we use restricted Gmail scopes in production and store or transmit restricted data server‑side, we will complete Google’s app verification and any required annual security assessment.

Drive (Sensitive)

  • Prefer: https://www.googleapis.com/auth/drive.file (create/open and per‑file access)
  • If you opt‑in to broader read access: .../drive.readonly
  • If you opt‑in to broad read/write: .../drive
  • Metadata scopes as needed: .../drive.metadata.readonly, .../drive.metadata

Docs (Sensitive)

  • https://www.googleapis.com/auth/documents.readonly
  • https://www.googleapis.com/auth/documents

Sheets (Sensitive)

  • https://www.googleapis.com/auth/spreadsheets.readonly
  • https://www.googleapis.com/auth/spreadsheets

Calendar (Sensitive)

  • https://www.googleapis.com/auth/calendar.events.readonly
  • https://www.googleapis.com/auth/calendar.events
  • (If you enable full calendar management) https://www.googleapis.com/auth/calendar.readonly and https://www.googleapis.com/auth/calendar

2.3 Purpose limitation & Limited‑Use.

We access Google user data only to provide or improve user‑facing features that are prominent in Flowdrop. We do not sell Google user data and we do not transfer it except to sub‑processors necessary to provide the Service under written data‑processing terms, or as required by law.

2.4 Human access.

Human access to Google user data is prohibited except (i) with your explicit consent for support, (ii) for security/abuse review, or (iii) to comply with law. Such access is limited to authorized personnel and is logged.

2.5 Offline access & tokens.

If you opt in to run automations while away, we request offline access and store refresh tokens encrypted at rest. You can revoke tokens in‑app or at https://myaccount.google.com/permissions.

2.6 Data handling & retention.

By default, we process content in memory and store only identifiers and minimal metadata necessary for reliability (file IDs, ranges, message or thread IDs, timestamps, delivery status). If you configure a node to persist content (e.g., write an email body into a database or a Doc into storage), we store what your node instructs. Logs are retained for the shortest period necessary to operate and secure the Service.

2.7 Revocation.

You can revoke Flowdrop’s Google access at any time at https://myaccount.google.com/permissions. Revocation may disable affected nodes until reconnected.

3. Your Content & License

3.1 Your Content.

"Content" means workflows, prompts, node configurations, metadata, files, text, images, or other material you submit to or generate with the Service. You retain ownership of Your Content.

3.2 License to Flowdrop.

You grant Flowdrop a worldwide, non‑exclusive, royalty‑free license to host, store, reproduce, modify, and display Your Content solely to operate, maintain, and improve the Service and to provide support to you.

3.3 Responsibility.

You are responsible for Your Content and for ensuring you have all rights needed to grant the license above, including rights to any third‑party inputs you use in your workflows (e.g., APIs, webhooks, data sources).

4. AI Features; Accuracy & Use Restrictions

4.1 AI Outputs.

Some features produce AI‑generated text, code, or other outputs ("AI Output"). AI Output may be inaccurate or incomplete. You are responsible for reviewing AI Output and evaluating its fitness for your use case.

4.2 No High‑Risk Use.

The Service is not designed for use in safety‑critical systems (e.g., medical diagnosis, emergency services, nuclear facilities). You agree not to use the Service where failure could result in death, personal injury, or severe environmental or property damage.

4.3 Evaluation Data.

To improve model quality and product performance, we may use aggregated and de‑identified interaction metadata. We do not use Google user data for model training.

5. Acceptable Use

You agree not to:

  • misuse, interfere with, or disrupt the Service;
  • reverse engineer or attempt to access the Service’s source code, except to the extent permitted by law;
  • use the Service to violate any law, infringe intellectual property or privacy rights, or transmit malware, spam, or unauthorized communications;
  • resell, sublicense, or provide the Service to third parties as a service bureau without our prior written consent;
  • bypass or breach any rate limit, security, or authentication measures;
  • attempt to scrape or bulk‑download other users’ content.

6. Third‑Party Services

The Service may interoperate with third‑party products (e.g., Google Sign‑In, Stripe payments, Supabase, webhooks). Your use of third‑party services is governed by their own terms and privacy policies; Flowdrop is not responsible for third‑party services.

7. Plans, Billing & Taxes

7.1 Subscriptions.

Paid plans are billed in advance on a recurring basis until canceled. You authorize us (and our payment processor, Stripe) to charge your payment method for applicable fees and taxes.

7.2 Changes.

We may change plan features and pricing prospectively with reasonable notice. If you do not agree, you may cancel before the change takes effect.

7.3 Trials & Refunds.

Trials, promotional offers, and credits are subject to the terms presented at sign‑up. Unless required by law or explicitly stated otherwise, all fees are non‑refundable.

7.4 Overages.

If your usage exceeds plan limits (e.g., actions, storage, seats), we may charge overage fees or require an upgrade.

8. IP Ownership

8.1 Flowdrop IP.

We own the Service and all associated intellectual property, including software, visual design, and trademarks. Except for the rights expressly granted to you, we reserve all rights.

8.2 Feedback.

If you provide feedback or suggestions, you grant us a perpetual, irrevocable, royalty‑free license to use it without restriction.

9. Confidentiality

"Confidential Information" means non‑public information disclosed by one party to the other that is marked confidential or should reasonably be considered confidential. Each party will use the other’s Confidential Information only to perform under these Terms and will protect it using reasonable care.

10. Privacy

Your use of the Service is subject to our Privacy Policy, which explains how we collect and use personal information, including Google OAuth data. The Privacy Policy is incorporated by reference into these Terms.

11. Term; Suspension; Termination

11.1 Term.

These Terms remain in effect until terminated.

11.2 Suspension.

We may suspend or limit access immediately if we believe you violated these Terms, present a security risk, or to protect the Service or other users.

11.3 Termination by You.

You may cancel at any time via the billing portal or in‑app settings. Cancelation stops future charges but does not entitle you to refunds unless required by law.

11.4 Termination by Us.

We may terminate on notice if you materially breach these Terms and fail to cure within 10 days, or immediately for non‑payment or unlawful use.

11.5 Effect.

Upon termination, your right to access the Service ends. We will delete or de‑identify Your Content in accordance with our Privacy Policy and applicable law.

12. Disclaimers

THE SERVICE AND ALL MATERIALS ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON‑INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR‑FREE, OR SECURE, OR THAT AI OUTPUT WILL BE ACCURATE OR RELIABLE.

13. Limitation of Liability

TO THE FULLEST EXTENT PERMITTED BY LAW: (A) FLOWDROP SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, COVER, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, REVENUE, GOODWILL, OR DATA; AND (B) OUR TOTAL LIABILITY FOR ALL CLAIMS IN THE AGGREGATE WILL NOT EXCEED THE AMOUNTS YOU PAID TO FLOWDROP FOR THE SERVICE IN THE 12 MONTHS PRECEDING THE EVENT GIVING RISE TO LIABILITY, OR US$100 IF YOU HAVE NOT PAID ANY AMOUNTS.

14. Indemnification

You will defend, indemnify, and hold harmless Flowdrop and its affiliates from and against any claims, liabilities, damages, losses, and expenses (including reasonable attorneys’ fees) arising out of or related to Your Content, your use of the Service, or your violation of these Terms or applicable law.

15. Export & Sanctions Compliance

You represent that you are not located in, under the control of, or a national or resident of any country or entity subject to U.S. embargoes, sanctions, or export restrictions, and that you will comply with applicable export control and sanctions laws.

16. Governing Law; Dispute Resolution

16.1 Governing Law.

These Terms are governed by the laws of the State of Maryland, excluding its conflicts‑of‑law rules.

16.2 Arbitration.

Any dispute arising out of or relating to these Terms or the Service will be resolved by binding arbitration administered by the American Arbitration Association under its Commercial Arbitration Rules, in English, with a single arbitrator, in Montgomery County, Maryland. You and Flowdrop waive any right to a jury trial.

16.3 Class‑Action Waiver.

You and Flowdrop agree that each may bring claims against the other only in your or its individual capacity and not as a plaintiff or class member in any class or representative proceeding.

16.4 Injunctive Relief.

Notwithstanding the foregoing, either party may seek injunctive or equitable relief in a court of competent jurisdiction to protect its intellectual property or Confidential Information.

17. Changes to the Service or Terms

We may modify the Service and these Terms from time to time. If we make material changes, we will provide reasonable notice (e.g., by email or in‑product notice). The updated Terms will be effective on the date stated. Your continued use of the Service after the effective date constitutes acceptance of the changes.

18. Notices

Notices to Flowdrop must be sent to Flowdrop, Inc., Attn: Legal, 7905 Hope Valley Ct, Adamstown, MD 21710, USA and to [email protected]. We may send notices to the email associated with your account or provide in‑product notices.

19. Contact

Questions about these Terms? Contact [email protected].

Exhibit A – Data Processing Addendum (Summary)

If you require a GDPR/CCPA Data Processing Addendum (DPA) for paid plans, contact us at [email protected]. Our standard DPA includes: (i) processing instructions limited to providing the Service; (ii) confidentiality, security, and sub‑processor terms; (iii) international transfer mechanisms (e.g., SCCs); and (iv) deletion/return of personal data upon termination.

Exhibit B – API Fair Use & Rate Limits (If Applicable)

We may publish or update API usage limits (e.g., actions per minute, concurrent jobs). Exceeding limits may result in throttling or suspension until usage returns to normal or you upgrade to a suitable plan.

Exhibit C – Google API Limited‑Use Disclosure

Flowdrop’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited‑Use requirements. In particular: (a) we use Google user data only to provide or improve user‑facing features that are prominent in the Service; (b) we do not sell Google user data; (c) we do not transfer Google user data except as necessary to provide the Service, comply with the law, or as part of a merger/acquisition with equivalent protections; (d) human access is restricted to the cases described in §2.4; and (e) Gmail restricted scopes, if used, are subject to Google’s app verification and any required annual security assessment.