This privacy policy explains which personal data FeedFlow CSS processes, why, and what rights you have. The controller is:
FeedFlow LLC
1021 E Lincolnway, Suite 9789, Cheyenne, WY 82001, USA
EIN 35-2942368 · css-service@feed-flow.io
What data
- Order data from Whop: name, email address, chosen plan, amount paid, payment date, and the Whop customer and subscription ID. Payment details such as card numbers are processed by Whop; we do not receive them.
- Merchant Center IDs that you enter after payment.
- Communication: emails you send us.
- Technical data: server logs and a hashed (non-identifiable) IP address to prevent abuse of forms. We do not use advertising or tracking cookies on this site; one functional cookie remembers your language choice.
Why
- Performing the agreement: processing your subscription, setting up your CSS connection and informing you about its status.
- Customer service and handling cancellations, failed payments and questions.
- Complying with legal (administrative and tax) obligations.
- Securing the website and preventing abuse (legitimate interest).
Who we share data with
- Whop — payments and subscription management.
- Google — your Merchant Center ID is used to link your account to our CSS.
- Hosting and email services (such as Vercel, Neon and Resend) that run the website, database and emails for us.
Some of these parties are located outside the European Economic Area, including in the United States. Where required, transfers are based on appropriate safeguards, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.
Retention
We keep order and invoice data for as long as the statutory retention obligation applies (usually 7 years). Other data is kept no longer than necessary for the purpose it was collected for. Hashed IP addresses for abuse prevention are deleted after 24 hours.
Your rights
You can ask us for access, correction, deletion, restriction or portability of your data, and object to processing. Email css-service@feed-flow.io. You also have the right to lodge a complaint with the supervisory authority in your country.
Security
We protect your data with appropriate measures, such as encrypted connections (HTTPS), protected admin areas and unpredictable personal links for onboarding.