Privacy Policy
1. Introduction
Robinflow LLC ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.
2. Information We Collect Updated
2.1 Information You Provide
- Account Information: Name, email address, password
- Payment Information: Billing details (processed securely through Stripe)
- Profile Information: Trading preferences and watchlists
- Communications: Messages sent to customer support
- Compliance Information: First name, last name, and country, collected during account setup, for legal compliance and audit purposes
- UpdatedChat Assistant Interactions: The questions you submit to the in-app chat assistant, the responses we generate, and associated tool-call metadata (timing, token usage, which analytical tools were invoked). Stored encrypted and scoped to your account. When you use the chat assistant, your messages and the market data needed to answer them are sent to OpenAI, which generates the response (see Section 4.1). If you do not use the chat assistant, nothing is sent to OpenAI.
2.2 Automatically Collected Information
- UpdatedUsage Data: Pages and tabs you view, actions you take in the platform (for example applying a filter, opening a row, searching for a symbol, or opening an alert), and time spent on each page. We do not send the text of your chat messages or other free text you type to our analytics providers. We may also record this usage data on our own servers, linked to your account, to understand how the product is used and to improve it.
- Performance Data: How long pages take to load and display data, and how long requests to our servers take.
- UpdatedError Data: When something goes wrong in the platform, we record the error, the page and browser it happened on, and, for failed data requests, the request parameters (such as the symbol and date range). Error reports may include an internal identifier for your account so we can tell how many users an error affects; it is not your name or email address. We do not record your login details, payment identifiers, or the content of chat messages.
- Device Information: IP address, browser type, operating system
- Analytics Data: Usage and performance data is collected under a random identifier stored in your browser, together with general account attributes (your subscription tier, whether you use the desktop or mobile layout, and the experience level you selected during onboarding). It is not linked to your name or email address in our analytics tools.
- Consent Audit Data: IP address and browser user agent recorded at the time you accept our Terms of Service, for legal compliance purposes (retained per Section 6: Data Retention)
- NewSign-up Source: Before you make a cookie choice, the app keeps the website or campaign that referred you (for example "google.com" or a campaign tag) and the page you first visited, in memory only for that browser tab. If you create an account in that visit, we save this with your account to understand which channels bring sign-ups. Nothing is stored in your browser for this until analytics is on (you accept analytics cookies, or analytics is on by default where you are; see
rf_attrin Section 8.2), except while you sign in with Google (seerf:acq:oauthin Section 8.3). If you decline analytics cookies in the app, or on our website, none of this is recorded.
3. How We Use Your Information
We use your information to:
- Provide and maintain our services
- Process payments and manage subscriptions
- Send you service updates and important notifications
- Improve our platform and develop new features
- Provide customer support
- Detect and prevent fraud or abuse
- Comply with legal obligations
- Send marketing communications (with your consent)
- Sample and redact a subset of chat-assistant exchanges to evaluate assistant quality and build regression tests, as described in our Terms of Service (Section 8: Chat Assistant Conversations)
4. Data Sharing and Disclosure Updated
We do not sell your personal information. We may share your information with:
4.1 Service Providers
- Payment Processing: Stripe (for secure payment processing)
- Analytics: Google Analytics (with IP anonymization enabled) and Vercel Analytics, for usage measurement
- Error and Performance Monitoring: Sentry (for error reports and performance data)
- Cloud Hosting: AWS and Vercel (for infrastructure)
- Security: Cloudflare (for CAPTCHA verification and infrastructure protection)
- UpdatedEmail Services: Amazon SES (part of AWS), for account, billing and alert emails
- NewAI Assistant: OpenAI, which generates chat-assistant responses. It receives only the messages and data from chats you choose to start, and under its API terms does not use them to train its models
4.2 Legal Requirements
We may disclose your information if required by law, court order, or government regulation, or to protect our rights, property, or safety.
4.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
5. Data Security
We implement industry-standard security measures to protect your information:
- Encryption in transit (HTTPS/TLS)
- Encryption at rest for sensitive data
- Regular security audits and updates
- Access controls and authentication
- Secure password hashing
However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide services. Upon account deletion:
- UpdatedPersonal data (name, email, full IP address) is permanently deleted immediately, except as described below
- UpdatedPayment data: your payment methods and customer record are deleted from Stripe, our payment processor. Stripe keeps records of past transactions and invoices as the law requires.
- UpdatedConsent records are kept for up to 3 years after your account is deleted, to comply with legal obligations and resolve potential disputes. They hold the version of our Terms of Service you accepted, when and how you accepted it, your country, your browser type and a shortened network address (your IP address with its last part removed). Your name and email address are removed from them.
- UpdatedFraud prevention data is kept so a free trial can only be claimed once: the email address that used a trial, for up to 3 years, and, from the trial sign-up, the billing name, country and postal code, the card's brand, last four digits and fingerprint, and the IP address, browser and operating system, for up to 2 years. It is used only to prevent repeat trials and other abuse.
- NewCancellation answers (the reason you chose and any comment) are kept with your email address and other identifiers removed, and with any contact details in the comment removed.
- Chat-assistant exchanges in your conversation history are permanently deleted immediately. Sampled exchanges retained in our internal evaluation corpus are also permanently deleted as part of the same account-deletion flow. You may request immediate deletion of any sampled exchanges at any time by contacting support@robinflow.io.
NewLogs and backups. Deleted data may remain in our server logs for up to 180 days and in database backups for up to 35 days, until they expire. We only restore from a backup to recover from a system failure.
Anonymized and aggregated data may be retained indefinitely for analytics purposes.
7. Your Rights and Choices Updated
You have the right to:
- Access: Request a copy of your personal information
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and data
- Export: Download your data in a portable format
- Opt-Out: Unsubscribe from marketing emails
- NewAnalytics: Turn analytics on or off at any time from "Cookie Preferences" in the website footer or, in the app, under Settings → Preferences (see Section 8.2 for how the default is set)
- Object: Object to certain processing activities
To exercise these rights, contact us at support@robinflow.io. We will respond within 30 days (or 45 days for requests made under the California Consumer Privacy Act).
9. Third-Party Links
Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.
10. Children's Privacy
Our services are not intended for individuals under 18 years of age. Consistent with our Terms of Service (Section 3), users must be at least 18 years old to create an account. We do not knowingly collect personal information from children under 18. If we become aware of such collection, we will delete the information immediately.
11. International Data Transfers Updated
UpdatedYour information may be transferred to and processed in the United States, where our servers and service providers (including AWS, Vercel, Stripe, Google, Sentry and OpenAI) are located. These transfers are necessary for the performance of our contract with you (providing the Service). We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.
12. California Privacy Rights (CCPA/CPRA)
California residents have additional rights under the California Consumer Privacy Act and the California Privacy Rights Act:
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to opt-out of the sale of personal information
- Right to deletion of personal information
- Right to correct inaccurate personal information
- Right to limit use and disclosure of sensitive personal information
- Right to non-discrimination for exercising your privacy rights
We do not sell or share your personal information as defined under the CCPA/CPRA. We do not use or disclose sensitive personal information for purposes other than providing the Service. To exercise any of these rights, contact us at support@robinflow.io. We will respond within 45 days of receiving a verifiable consumer request.
13. European Economic Area (GDPR) Updated
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):
- UpdatedLawful basis: We process your personal data on the following bases: performance of a contract (to provide the Service), legitimate interests (fraud prevention, security, error monitoring, platform improvement, including the redacted-and-aggregated evaluation of chat-assistant quality described in our Terms of Service Section 8), consent (analytics cookies and performance data; in the EEA, UK and Switzerland analytics is always off until you accept it), and legal obligation (compliance record-keeping).
- Right to restrict processing: You may request that we limit how we use your data.
- Right to data portability: You may request a copy of your data in a structured, commonly used, machine-readable format.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
- Right to lodge a complaint: You have the right to lodge a complaint with your local data protection authority if you believe your data has been processed unlawfully.
Your data may be transferred to and processed in the United States, where our servers are located. These transfers are necessary for the performance of our contract with you. To exercise any of these rights, contact us at support@robinflow.io. We will respond within 30 days.
14. Changes to This Privacy Policy Updated
UpdatedWe may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on our platform before they take effect. The "Last Updated" date at the top shows when this text was published, and the "Effective" date shows when it applies.
Changes New
- November 3, 2026
- Consent records after deletion (Section 6): what they hold. Your name and email address are removed; the Terms version, when and how you accepted, country, browser type and a shortened IP address are kept for up to 3 years.
- October 27, 2026 published October 19, 2026
- Sign-up source (Section 2.2, added October 26, 2026): if you create an account before making a cookie choice, we save the referring website or campaign and the first page you visited with your account. It is held in memory only until then, never in your browser's storage until analytics is on. If you decline analytics cookies in the app or on our website, it is not recorded.
- Rejecting on the website applies in the app (Section 8.3, added October 27, 2026): until you make a choice in the app, a rejection on robinflow.io turns analytics off there too.
- Google sign-in (Section 8.3, added October 26, 2026):
rf:acq:oauthcan also hold the referring website and first page, not only campaign tags. - Analytics on by default in some regions. Visitors in the European Economic Area, the United Kingdom, Switzerland, Canada or Brazil, and visitors whose location cannot be determined, are still asked first. Elsewhere, including the United States, analytics is on by default with the banner saying so, and can be turned off at any time. Choices made before October 27, 2026 are kept.
- Turning analytics off deletes the cookies. The
_gidcookie is removed from the list because Google Analytics 4 does not set it. - Two new entries in the cookie list:
rf_regionandrf_consent. - Our own usage records. Usage data may also be recorded on our own servers, linked to your account.
- An account identifier in error reports sent to Sentry; never your name or email address.
- Providers named: OpenAI (chat assistant, only when you use it) and Amazon SES (email), both added to the international-transfers list.
- What we keep after you delete your account (Section 6, added October 21, 2026): what fraud-prevention data is kept and for how long, that Stripe keeps transaction records, that cancellation answers are kept without identifiers, and how long logs and backups hold deleted data.
- October 23, 2026
- Clarified in Section 8.2 when the
rf_attrcookie can be replaced: only a visit with no known source, by a later visit that has one. - Listed
rf:acq:oauthin Section 8.3: the campaign tags kept for the length of a Google sign-in.
- Clarified in Section 8.2 when the
- October 19, 2026
- Listed the
rf_attrcookie in Section 8.2. It records how you first arrived (campaign tags or the referring site), has only ever been set when analytics is accepted, and was missing from the cookie list. - Corrected the duration of the
_ga_[MEASUREMENT_ID]cookie in Section 8.2 to 2 years (it was listed as 1 year).
- Listed the
- October 8, 2026
- Disclosed Sentry for error reports and performance data (Sections 2.2, 4.1, 8.4, 11, 13).
- Rewrote the usage, performance and analytics data descriptions to match what is collected.
- Corrected the cookie statements: what happens on withdrawal, and that we set no advertising or retargeting cookies.
15. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us:
Email: support@robinflow.io
Address: Robinflow LLC, 1710 Keller Parkway #9843, Keller, TX 76248