Privacy Policy
Last Updated: April 23, 2026
Pure Grace AI, LLC, doing business as Flow Orah (“we,” “our,” or “us”) operates the Flow Orah social media management platform at app.floworah.com and the marketing website at www.floworah.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.
1. Information We Collect
Account Information: When you create an account, we collect your name, email address, and password. If you sign up through a social login provider, we receive your name and email from that provider.
Social Media Account Data: When you connect your social media accounts (such as LinkedIn, Instagram, Facebook, X/Twitter, Pinterest, TikTok, YouTube, and others), we securely store OAuth tokens to act on your behalf. We access your profile information, post content, analytics data, and inbox messages as needed to provide our scheduling, publishing, inbox management, and analytics features.
Content You Create: We store the posts, images, videos, and other content you create or upload through our platform, including scheduled posts, drafts, templates, and media library items.
Usage Data: We automatically collect information about how you interact with our platform, including pages visited, features used, and actions taken. This helps us improve our services.
Payment Information: Payment processing is handled by Stripe. We do not store your full credit card number. Stripe’s privacy policy governs the handling of your payment data.
2. How We Use Your Information
We use the information we collect to: provide, maintain, and improve our platform and services; publish and schedule content to your connected social media accounts; manage your social media inbox and provide AI-assisted draft replies; generate analytics and reports about your social media performance; process transactions and send billing-related communications; send service notifications, security alerts, and support messages; detect and prevent fraud, abuse, and security incidents; and comply with legal obligations.
3. AI-Powered Features
Flow Orah uses artificial intelligence to power features such as content generation, caption writing, inbox reply drafting, lead detection, and content optimization. When you use these features, relevant context (such as your business profile, post history, or inbox messages) may be sent to our AI providers (currently Anthropic and OpenAI) for processing. These providers process data according to their respective privacy policies and do not use your data to train their models.
4. Data Sharing and Disclosure
We do not sell your personal information. We may share your information with: service providers who assist in operating our platform (such as hosting, payment processing, email delivery, and AI services); social media platforms when you authorize us to post, read, or manage content on your behalf; law enforcement or government agencies when required by law; and other parties with your explicit consent.
5. Data Security
We implement industry-standard security measures to protect your data. Social media account tokens are encrypted using AES-256-GCM encryption at rest. We use HTTPS for all data transmission. Access to production systems is restricted and monitored. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.
6. Data Retention
We retain your data for as long as your account is active or as needed to provide services. When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.
7. Your Rights
Depending on your location, you may have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data; object to or restrict certain processing; request data portability; and withdraw consent where processing is based on consent. To exercise any of these rights, please contact us at support@floworah.com.
8. Cookies
Our platform uses essential cookies for authentication and session management. Our marketing site may use analytics cookies to understand visitor behavior. You can control cookie preferences through your browser settings.
9. Third-Party Links
Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.
10. Children’s Privacy
Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last Updated” date. Your continued use of our services after changes are posted constitutes your acceptance of the revised policy.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Flow Orah
Email: support@floworah.com
Website: www.floworah.com/contact