Legal Documents
Transparency about how Flowen operates, protects your data, and complies with EU law.
Privacy Policy
How we collect, use, and protect your personal data under GDPR.
GDPR • Last updated: 7 November 2026
Terms of Service
The agreement governing your use of Flowen.
Subscription terms & SLA
EU AI Act Compliance
How Flowen complies with Regulation (EU) 2024/1689 on artificial intelligence.
EU AI Act • Article 50 transparency
Security & Trust
Technical and operational measures protecting your data.
AES-256 • EU-hosted • Vulnerability disclosure
Our Compliance Commitments
GDPR (EU 2016/679)
Personal data is processed in accordance with the EU General Data Protection Regulation.
EU AI Act (EU 2024/1689)
Aligned with the EU Artificial Intelligence Act and its phased application.
EU Data Sovereignty
Data is stored on EU servers: production in France, backups in Germany and Sweden.
EU Hosting
Production and backups on European infrastructure (OVHcloud, Hetzner, Storegate) and an EU-based AI provider (Mistral). Email runs through Microsoft 365 in the EU.
Bokföringslagen
Swedish accounting law compliance for invoice and financial records (7-year retention).
AES-256 Encryption
Uploaded files encrypted at rest (AES-256-GCM, most file types), TLS for data in transit.
Questions about our legal documents or compliance? Email privacy@flowen.eu or contact our DPO Daniel Olsson at dpo@flowen.eu. Our data processing agreement is part of our agreement with every customer and is available on request from privacy@flowen.eu.