Privacy Policy

1. Who we are

Horizon Flow is operated by Timothy Matheson, trading as Horizon Flow, ABN 89 383 425 740 (Horizon Flow, we, us or our). This Policy explains how we handle personal information when you request access to, use, publish through, or communicate with Horizon Flow.

2. Information we collect

• Account and contact data: name, email address, beta-access status, and communications with us.
• Authentication and security data: session identifiers, hashed session secrets, hashed IP-derived values, user-agent details, timestamps, and security or audit records.
• Workspace content: ideas, instructions, workflow responses, decisions, generated prototypes, reviews, reviewer responses, uploaded images, published Plays, and associated metadata.
• Billing data: Stripe customer and subscription identifiers, plan, price, subscription status, invoice and transaction information. Stripe handles payment-card details; we do not store full card numbers.
• Usage and technical data: feature usage, AI token usage, generation-job status, published-page views, runtime events, device/browser information, error logs, and service diagnostics.
• Information from others: review responses or other material submitted through a link shared by a Horizon Flow user.

3. How we collect information

We collect information directly from you, automatically when you use the service, from people who respond to shared reviews or Plays, and from service providers such as Stripe. We use necessary cookies to maintain signed-in sessions, prevent request forgery, and protect the service. We do not currently use advertising cookies.

4. Why we use information

• Provide accounts, guided workflows, generation, reviews, publishing, billing, and support.
• Generate requested material through AI providers and return it to your workspace.
• Authenticate users, enforce plan limits, prevent abuse, investigate incidents, and maintain audit records.
• Process subscriptions, reconcile webhook events, and manage customer billing.
• Operate, diagnose, measure, and improve the service.
• Communicate about access requests, service changes, security, billing, and support.
• Meet legal obligations and establish, exercise, or defend legal claims.

5. AI processing

Prompts, project context, and other content needed to perform a generation request are sent to configured AI providers, including OpenAI. Do not submit sensitive personal information, health information, government identifiers, payment-card details, confidential third-party material, or secrets unless you are authorised to do so and it is necessary. AI outputs may reproduce or infer information from submitted content.

6. Service providers and disclosures

We disclose only the information reasonably needed for providers to perform services for us. Current provider categories include:

• Stripe: subscriptions, payments, billing portal, fraud controls, and related transaction services.
• OpenAI: AI generation and refinement.
• Postmark: magic-link and service email delivery.
• Neon: managed PostgreSQL database hosting.
• Tigris and compatible S3 infrastructure: generated artifacts and uploaded media storage.
• Fly.io: application hosting, networking, and operational logs.

We may also disclose information where required by law, to protect rights or safety, during a business reorganisation, or with your direction or consent. We do not sell personal information.

7. International processing

Our providers may process information in Australia, the United States, and other countries where they or their subprocessors operate. Privacy protections in those locations may differ from Australian law. We select established providers and use available contractual, technical, and organisational safeguards appropriate to the service.

8. Publishing and shared links

Information in public Plays can be viewed by anyone. Unlisted Plays and review pages can be viewed by anyone who obtains the link. Shared links should be treated as bearer access. Do not publish personal, confidential, or restricted information. If another user invites you to respond to a review, that user controls the underlying project and can view your response.

9. Retention

We retain account, workspace, billing, and audit information while needed to provide the service, comply with law, resolve disputes, prevent abuse, and maintain business records. Session and login records expire or are revoked according to their configured lifetimes. Runtime image uploads are configured to expire after 30 days. Backups and security logs may persist for a limited period after primary data is removed.

Because Horizon Flow does not yet provide self-service account deletion or export, contact us to request access, correction, export, or deletion. We may retain information where law or legitimate security, billing, or dispute requirements apply.

10. Security

We use measures including signed secure cookies in production, hashed session and review tokens, access controls, request validation, rate limits, webhook signature verification, and restricted storage credentials. No online system is completely secure. You are responsible for protecting sign-in links and for using appropriate judgment about the information submitted during beta.

11. Your choices and rights

You may request access to or correction of personal information we hold about you, ask for a portable copy where practical, or request deletion. You may cancel a paid subscription through the billing portal. You may also make a privacy complaint. Contact timothy@horizonflow.app. We may need to verify your identity before completing a request.

12. Children

Horizon Flow is intended only for people aged 18 or older. We do not knowingly offer accounts to children. Contact us if you believe a person under 18 has provided personal information.

13. Complaints

Send privacy complaints to timothy@horizonflow.app. Include enough detail for us to investigate. We will acknowledge and respond within a reasonable period. If you are not satisfied, you may be entitled to contact the Office of the Australian Information Commissioner or another applicable regulator.

14. Changes to this Policy

We may update this Policy as the private beta and our providers change. We will publish the revised version and update the date above. We will provide reasonable notice where a change materially affects how we handle existing users’ information.

15. Contact

Privacy and legal contact: timothy@horizonflow.app
Operator: Timothy Matheson, trading as Horizon Flow
ABN: 89 383 425 740