Privacy Policy

Information we collect

SpecFlow stores only the essentials: your account email, authentication tokens from Supabase, usage counts for Markdown exports, and telemetry events that never include PRD or ticket content.

How we use data

We use session data to keep you signed in, export counts to enforce the Free and Pro plans, and anonymous telemetry to improve onboarding, export reliability, and billing flows. We do not sell or share your product ideas with third parties.

Third-party services

SpecFlow relies on Supabase for authentication and Postgres storage, Stripe via Update for billing, OpenAI for PRD and ticket generation, and Vercel for hosting. Each service handles data according to its own policies.

Your choices

You can export or delete your account data by emailing support@specflow.app. Clearing browser cookies signs you out immediately. Upgrading or cancelling your plan happens through the Stripe customer portal.

Contact

Questions about privacy? Reach out to support@specflow.app and we will respond within two business days.