BlockFlow - Privacy Policy

Last Updated: September 21, 2026

BlockFlow is a service operated by Front Street Software LLC, a Wyoming limited liability company ("Front Street Software LLC," "BlockFlow," "we," "us," or "our"). BlockFlow provides scheduling software that connects tools such as Notion and Google Calendar so users can plan and sync work automatically. This Privacy Policy explains how we collect, use, and protect information when you use https://blockflow.app and the BlockFlow service.

1. Information We Collect

1.1 Account and Contact Information

When you create an account, join a waitlist, contact support, or purchase a subscription, we may collect information such as your name, email address, and any support details you choose to share with us.

1.2 Connected Service Data

If you connect third-party services such as Notion or Google Calendar, we may process the workspace, database, calendar, and task metadata required to provide scheduling, synchronization, webhook handling, and related product functionality. We only use the scopes and data needed to operate the service.

For Google Calendar connections, this includes your Google account email address, calendar identifiers, calendar names and access permissions, availability information, and event data needed for scheduling and synchronization. We use this information to identify your connected account, display available calendars, schedule tasks around busy periods, and keep your schedule current. When you authorize Google task-event publishing on an eligible subscription, BlockFlow also creates, updates, and deletes the task events it manages in calendars you select.

1.3 Billing Information

Payments are processed by third-party payment providers such as Stripe. We may store billing status, subscription tier, free trial status, customer identifiers, and renewal metadata, but we do not store full payment card details on our own servers.

1.4 Usage, Device, and Log Data

We may collect IP address, browser and device information, session and authentication details, error logs, webhook metadata, and product usage events needed to secure, operate, debug, and improve the service.

1.5 Cookies and Similar Technologies

We may use cookies and similar technologies for authentication, security, analytics, and product functionality.

2. How We Use Information

We use information to:
- create and manage accounts
- authenticate users and secure the service
- operate scheduling, synchronization, and notification features
- process subscriptions and billing events
- provide customer support
- monitor reliability, prevent abuse, and troubleshoot issues
- improve the product and communicate important service updates

3. Google API Services - Limited Use Disclosure

BlockFlow's use and transfer to any other application of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

We use Google user data only to provide and improve user-facing BlockFlow features that are prominent in the requesting interface. We do not sell Google user data or use it for advertising. We transfer Google user data only as necessary to provide or improve those features with your consent, for security purposes, to comply with applicable law, or as part of a merger, acquisition, or sale of assets after obtaining your explicit prior consent.

We permit human access to Google user data only after obtaining your affirmative consent to access specific data, when necessary for security purposes or compliance with applicable law, or when the data is aggregated and anonymized and used only for internal operations in accordance with applicable privacy and other legal requirements.

These Google-specific restrictions also govern the sharing described in Section 4.

3.1 Protection of Google User Data

We use HTTPS/TLS to protect Google user data transmitted between your browser and BlockFlow, and between BlockFlow and Google APIs. Google OAuth access tokens and refresh tokens are encrypted using AES-256-GCM before being stored.

We use authentication, server-side checks of account ownership, and database access controls to limit access to Google user data to authorized users and service operations.

BlockFlow connects to Google using OAuth. We do not receive or store your Google password.

4. How We Share Information

We do not sell your personal information. We may share information with service providers and infrastructure vendors that help us operate BlockFlow, such as hosting, database, email, analytics, billing, authentication, and connected API providers. We may also disclose information when required by law, to protect rights and security, or in connection with a merger, acquisition, financing, or asset transfer.

5. Data Retention

We retain information for as long as reasonably necessary to provide the service, comply with legal obligations, resolve disputes, enforce agreements, and maintain security and backup records. Connected-service data may be deleted or anonymized when accounts are disconnected or removed, subject to operational and legal retention needs.

6. Your Choices

You can disconnect third-party integrations, update account details, and cancel subscriptions through the product where available. If you need help accessing, correcting, or deleting information associated with your account, contact us using the details below.

7. Children's Privacy

BlockFlow is not intended for children, and we do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date on this page and may provide additional notice when the changes are material.

9. Contact

If you have questions about this Privacy Policy or our data practices, contact us at help@frontstreetsoftware.com, or by mail at Front Street Software LLC, Registered Agents Inc., 30 N Gould St Ste R, Sheridan, WY 82801.