How we keep you, your pages and your money safe

• Ad money is paid by you straight to Facebook from your own ad account. FlowSocial never holds it, so it can't go missing with us.
• Every new ad starts switched off. Only the brand's owner or an admin can switch it on.
• The assistant checks each running ad every 30 minutes and pauses it if a sale or lead costs more than your limit.
• The assistant never raises a budget on its own. A raise only happens when you tap yes, by at most one fifth, and only once a day for each ad.
• Every budget change made through FlowSocial is recorded: what changed, when and by whom.

• Passwords are stored scrambled by our sign-in provider. Nobody at FlowSocial can read your password.
• You can sign in with Google instead of a password, if it is switched on.
• AI needs a confirmed email address, which stops strangers using made-up accounts.
• Signs of mass sign-ups (many accounts from one person or temporary email addresses) are caught automatically, so free trials stay fair.

• You connect using Facebook's own secure method. We never ask for, see or keep your Facebook password.
• The access key Facebook gives us is kept on our servers. It is never shown in full, and team members and clients can't see it at all.
• Only the brand's owner or an admin can connect, change or disconnect Facebook and Instagram.
• Disconnecting deletes the access key straight away. You can also remove FlowSocial from Facebook's Business integrations settings at any time.

• All information travels over encrypted connections (the padlock in your browser).
• Every brand is walled off by rules inside the database itself, so one customer can never see another customer's brands, posts or results.
• Team members get only the access you give them. Clients approving posts see only the posts waiting for them.
• Client review links use long random codes that can't be guessed, stop working after 30 days, and can be switched off by you at any time.
• Service keys (for AI, email and payments) are kept on our servers and only ever shown hidden, like ••••a1b2.
• We don't use advertising trackers, and we never sell your information. See our privacy policy for the full details.

• Payments are handled by Squad, a licensed payment provider. Card details go straight to them; we never see or store them.
• We never renew your plan automatically, so you are never charged without choosing to pay.

• Use a strong password you don't use anywhere else.
• Never share your login. Invite each team member with their own email instead — you can remove them any time.
• Give the lowest access that does the job. Not everyone needs to be an admin.
• Only send client review links to the client, and switch off links you no longer need.
• Set a cost limit on every ad, so the assistant knows when to step in.
• Remember: FlowSocial will never ask for your password, your Facebook password or your card number by email, phone or chat.

If you think your account has been used by someone else, or you have found a security weakness, write to help@flowsocial.site straight away. Please give us a chance to fix a weakness before telling others about it. We take every report seriously and will tell you what we did.