Privacy Policy

Last updated: September 11, 2026

This policy explains what Flota ("we", "our", "the app") collects when you use the service, why, and what control you have over it. Flota is a social-media posting and management dashboard: you connect your own social accounts, and the app posts, schedules, and analyzes content on your behalf.

1. Information we collect

Account information. When you register, we store your email address, name (if provided), and a securely hashed password (we never store your password itself — only a one-way bcrypt hash of it). If you sign in with Google instead, we store the Google account ID and email Google provides us.

Connected platform accounts. When you connect a social media account (Instagram, Facebook, YouTube, TikTok, Telegram, or others we support), we store the account identifier, a display label you choose, and the access token that platform issues so we can publish, schedule, and read basic metrics on your behalf. These tokens are stored on our servers and are never sold, shared with advertisers, or used for anything beyond the actions you take in this app.

Content you create or upload. Photos, videos, captions, and audio you upload or generate through the app (including AI-generated images, videos, and captions) are stored so they can be posted, scheduled, or reused from your Media Library.

Usage and billing data. We keep basic usage records (e.g., how many AI generations or video-seconds you've used) to enforce plan limits, and if you subscribe to a paid plan, payment is processed by Stripe — we do not store your card details ourselves.

Automatically collected data. Standard technical data (IP address, browser type, timestamps) is logged for security and troubleshooting, and a session cookie keeps you signed in.

2. How we use your information

• To authenticate you and keep your account secure.
• To publish, schedule, and manage posts on the social accounts you've explicitly connected.
• To generate AI content (images, video, captions) you request, using third-party AI providers configured for your account.
• To show you analytics/insights about your own connected accounts.
• To process payments for paid plans, via Stripe.
• To send you account-related email (verification, password reset) — never marketing email without your consent.

3. What we don't do

• We don't sell your personal information.
• We don't post to any social account without your explicit connection and action.
• We don't share your connected-account tokens with any third party outside of what's needed to call that platform's own API on your behalf.

4. Third parties involved

Depending on which features you use, the following third parties may process data as part of delivering the service: the social platforms you connect (Meta, Google/YouTube, TikTok, Telegram, etc.), Stripe (payments), an AI provider (for AI-generated captions/images/video), and a media storage provider (for hosting your uploaded/generated photos and videos so platforms can fetch them). Each of these only receives what's necessary to perform that specific function.

5. Data retention

We keep your account data for as long as your account exists. If you delete your account, your profile, connected accounts, posts, schedules, media library entries, and usage history are permanently deleted from our database. Some anonymized, non-identifying technical logs may be retained briefly for security purposes.

6. Your rights and controls

• Access: your account data is visible to you directly in the app (Accounts, Content, Media Library, Settings).
• Correction: update your profile and connected accounts at any time from the app.
• Deletion: you can permanently delete your account and all associated data at any time from Settings → Delete Account. This action is immediate and cannot be undone.
• Disconnecting a platform: you can remove any connected social account individually without deleting your whole Flota account.

7. Children's privacy

Flota is not directed at children under 13, and we do not knowingly collect information from them.

8. Changes to this policy

We may update this policy as the app changes. Material changes will be reflected by updating the "Last updated" date above.