Your data and privacy

Where and how long

• Data is stored on our servers in Germany (Hetzner). If it has to stay with you, you can bring your own ClickHouse or cloud account.
• Telemetry is kept for 30 days, then deleted. Nightly backups are kept 14 days.
• Each workspace's data is isolated by row-level security in Postgres and row policies in ClickHouse.

Redaction

Common secrets and personal fields are redacted before storage, in the SDKs and again in our collector, even if Flowhawk can't be reached. Add rules in Settings > Collection. Changes reach the SDKs without a redeploy. The AI features see only what a feature needs, and the model provider doesn't train on it.

Exporting

• Owners and admins can download one JSON file with members, configuration, incidents, issues, findings, status updates, the audit log and the ledger from Settings > Workspace > Download export.
• You can export traces and logs as CSV from their explorers or the SQL drawer.
• Configuration is also a git repository (Settings > Config history).
• Settings > Security > Download your data gives you what Flowhawk holds about you personally.

Deleting

• Owners can delete a workspace in Settings > Workspace > Delete workspace. It stops at once for everyone, and its telemetry, configuration and records are erased 7 days later; backups follow within 14 days. Write to us within the 7 days to undo it. Invoices are kept as tax law requires.
• Deleting your account in Settings > Security > Delete your account removes you from every workspace. If you are a workspace's only owner, make someone else owner or delete the workspace first.

Legal

See the privacy policy, the data processing agreement and subprocessors and the terms of service.