Privacy Policy

1. Controller

The controller is FLOWMATIC S.R.L., tax id (CUI) 52891900, trade registry J2025087179005, Str. Vasile Alecsandri, bl. 66A, sc. A, parter, ap. 1, Pitești, Argeș 110377, Romania. Contact for privacy matters: seorbit@flowmatic.ro.

2. What we collect

• Account data: your email address, a hash of your password (never the password itself) or, if you sign in with Google, your Google subject id and the email Google gives us.
• Product data: the websites you add, keywords, generated articles and images, service pages, and the site structure we import when you connect a site.
• Platform credentials: the API keys, application passwords or authorisations you give us to publish. They are encrypted at rest with AES-256-GCM.
• Billing identity from Stripe: name, postal address, country and VAT id, as collected at checkout, plus the id and link of your latest invoice.
• Technical and usage logs: IP address, browser type, timestamps, the actions you take in the app, provider errors and an audit trail of sign-ins and admin actions.
• Support: the messages and tickets you send us, including any screenshots you attach.

3. Why we use it and on what basis

• To provide the service you signed up for: contract (GDPR art. 6(1)(b)).
• To issue invoices and keep accounting records: legal obligation (art. 6(1)(c)).
• To keep the service secure, detect abuse and rate-limit attacks: legitimate interest (art. 6(1)(f)).
• To send you product news: your consent (art. 6(1)(a)), which you can withdraw at any time.

We do not sell personal data. We do not run third-party advertising. We do not train AI models on your account data.

4. Sub-processors

These providers process data for us. Each one receives only what its job needs (for example the writing provider gets your niche, keywords and site context, not your password).

Google data (sign-in, Search Console, Blogger) is used according to the Google API Services User Data Policy, including its Limited Use requirements: we use it only to provide the features you asked for, we do not sell it, and no human reads it except for security, legal or support reasons you agreed to.

5. Transfers outside the EU

Some providers are outside the European Economic Area. Where that is the case, the transfer relies on an EU adequacy decision or on the Standard Contractual Clauses, as set out in each provider's own data processing terms. Ask us if you want a copy of the relevant safeguard.

6. Cookies

SEO Conquest sets only the cookies it needs to work. No advertising or tracking cookies.

• seorbit_session: keeps you signed in. Expires after 7 days or when you sign out.
• seorbit_lang: remembers the interface language you picked. 1 year.
• seorbit_site: remembers which of your sites you were working on. 1 year.
• seorbit_google_login: protects the "Continue with Google" flow against forgery. 10 minutes.

Stripe Checkout and the Customer Portal run on Stripe's own domain and set Stripe's cookies there, under Stripe's privacy policy.

7. Retention

• Account and product data: for as long as your account exists, then deleted within 30 days after the account is closed.
• Audit trail (sign-ins, admin actions): 730 days, never less than 180 days.
• Provider error logs: 90 days.
• Invoices and billing records: for the period required by Romanian accounting and tax law, even after the account is closed.

8. Your rights

You can ask for access to your data, correction, deletion, portability (a copy in a machine-readable format), restriction of processing, and you can object to processing based on legitimate interest. You can export or delete your account from the account settings, or write to seorbit@flowmatic.ro. We answer within one month.

If you think we handle your data unlawfully, you can complain to the Romanian supervisory authority, ANSPDCP (www.dataprotection.ro), or to the authority in your own EU country.

9. Security

Traffic is encrypted with TLS. Passwords are stored hashed. Platform credentials are encrypted at rest. Access to production systems is limited to the people who run the service and is logged. Each customer's data is isolated at the database layer.

10. Children

SEO Conquest is for businesses and adults. You must be at least 18 to open an account.

11. Changes

If this policy changes, the date at the top changes with it. For meaningful changes we notify you by email or in the app.

12. Contact

Privacy questions go to seorbit@flowmatic.ro. Postal address: FLOWMATIC S.R.L., Str. Vasile Alecsandri, bl. 66A, sc. A, parter, ap. 1, Pitești, Argeș 110377, Romania.