Legal

Privacy Policy

Last updated: June 5, 2026

1. Introduction

Velocit Flow ("we", "us", "our") is a Chrome Extension that automates bulk AI image and video generation on Google Flow. This Privacy Policy explains what data we collect, how we use it, and your rights as a user.

2. What We Collect

Account Information — When you sign in with Google, we receive:

• Your email address
• Your display name
• Your profile picture URL

Connection Data — We automatically collect:

• Your IP address (used to determine country, prevent fraud, and comply with regional policies)
• Your country (derived from your IP via a public lookup service)

Usage & Analytics Data — We track on our server:

• Number of image and video prompts used
• Your subscription plan (Free, Pro, or Trial) and billing status
• Batch generation analytics (duration, success/failure counts, error categories)
• Feature usage events (which features you have used — e.g. video mode, auto-chain, tag matching)
• Client environment (browser locale, extension version)

Local Storage — Stored in your browser only, never sent to our servers:

• Your generation settings (model, aspect ratio, image count)
• Your batch queue (prompts, batch names, statuses)
• Your gallery history (media references)
• Your UI preferences (active tab, folder name)
• Your Google OAuth access token

3. What We Do NOT Collect

• We do NOT collect, store, or transmit your prompt text
• We do NOT collect, store, or transmit your generated images or videos
• We do NOT collect browsing history outside the Velocit Flow extension
• We do NOT use cookies for tracking
• We do NOT sell, rent, or share your personal data with third parties for their own purposes
• We do NOT use third-party tracking scripts or advertising networks

4. How Your Data Is Used

• Authenticate your identity via Google OAuth
• Determine your subscription plan and enforce usage limits
• Process subscription upgrades via Flutterwave
• Detect and prevent abuse (multi-account trial farming, automated signups, etc.)
• Improve the extension by analysing aggregate usage patterns, error rates, and feature adoption
• Provide customer support when you contact us

5. Data Storage & Security

• All account, usage, and analytics data is stored in a secure database on our backend server
• All communication between the extension and our server uses HTTPS
• Your Google OAuth token is stored locally in chrome.storage.local and is only transmitted to Google's servers to verify your identity — never to Velocit Flow servers directly
• Subscription status is cached locally for up to 24 hours to reduce repeated network requests

6. Third-Party Services

• Google OAuth — For authentication (governed by Google's Privacy Policy)
• Flutterwave — For payment processing. When you purchase a subscription, Flutterwave processes your payment and notifies our server to activate your license. Flutterwave's privacy policy applies to your payment data.
• Velocit Flow backend (velocitflow.com) — Our own server, used for licence verification, subscription management, and usage tracking. All communication is over HTTPS.
• Infrastructure providers — Our backend and database providers store server-side data. They are bound by their respective privacy policies and do not access your data for their own purposes.

We do not share your personal data with any other third parties.

7. Google API Services

Velocit Flow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We only request the following Google OAuth scopes:

• openid — to establish an authenticated session with Google
• userinfo.email — to identify your account
• userinfo.profile — to display your name and picture in the extension

8. Limited Use of Google API Data

Velocit Flow's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Allowed Use: We only use Google user data (email, name, profile picture) to authenticate your identity, manage your subscription, and enforce usage limits.
• Allowed Transfer: We do not transfer Google user data to third parties except to trusted service providers strictly as needed to operate the extension, or when required by law.
• No Advertising: We never use Google user data to serve advertisements of any kind.
• No Human Reading: We do not allow humans to read Google user data, except (a) with your explicit consent for support purposes, (b) for security investigations, (c) to comply with applicable laws, or (d) in aggregated and anonymised form for internal operations.

9. Chrome Permissions

The Velocit Flow extension requests the following Chrome permissions:

• identity — To read your Google account email for licence verification
• storage — To cache your subscription status and settings locally
• sidePanel — To display the Velocit UI in Chrome's side panel
• scripting / activeTab — To interact with the Google Flow tab to automate prompts and download outputs
• tabs — To detect when you're on a supported AI generation page
• downloads — To save generated images and videos to your local Downloads folder
• alarms — To schedule batch generation tasks with timing control
• host_permissions (labs.google/*) — Required to inject automation scripts into the Google Flow page (labs.google)
• host_permissions (velocitflow.com/*) — Required to communicate with the Velocit Flow backend API for licence verification and subscription management
• host_permissions (www.googleapis.com/*) — Required to retrieve your Google profile information during sign-in

The extension injects a script into the main JavaScript context of the Google Flow page (labs.google) in order to interact with the page's internal functions for automation. This script does not read or transmit your prompts or generated media — it only controls the page UI on your behalf.

10. Data Retention

• Account and usage data is retained as long as your account is active
• If you sign out, your local data is cleared from Chrome Storage
• You may request complete deletion of your server-side data by contacting us

11. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent at any time by signing out and uninstalling the extension

12. Children's Privacy

Velocit Flow is not intended for use by children under 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the extension after changes constitutes acceptance of the updated policy.

14. Contact

For any questions about this Privacy Policy or to request deletion of your data, please contact us at:

Email: support@velocitflow.com

© 2026 Velocit Flow. All rights reserved.