Your data and privacy

Where and how long

• Data is stored on our servers in Germany (Hetzner). Bring your own ClickHouse or cloud account if it must stay with you.
• Telemetry is kept for 30 days, then deleted. Nightly backups are kept 14 days.
• Each workspace's data is isolated by row-level security in Postgres and row policies in ClickHouse.

Redaction

Common secrets and personal fields are redacted before storage, in the SDKs and again in our collector, even if Flowhawk can't be reached. Add rules in Settings > Collection; changes reach the SDKs without a redeploy. The AI features see only what a feature needs, and the model provider doesn't train on it.

Exporting

• Settings > Workspace > Download export (owners and admins): one JSON file with members, configuration, incidents, issues, findings, status updates, the audit log and the ledger.
• Telemetry: export traces and logs as CSV from their explorers or the SQL drawer.
• Configuration is also a git repository (Settings > Config history).
• Settings > Security > Download your data: what Flowhawk holds about you personally.

Deleting

• Settings > Workspace > Delete workspace (owners): it stops at once for everyone, and its telemetry, configuration and records are erased 7 days later; backups follow within 14 days. Write to us within the 7 days to undo it. Invoices are kept as tax law requires.
• Settings > Security > Delete your account: you leave every workspace. If you are a workspace's only owner, make someone else owner or delete the workspace first.

Legal

The privacy policy, the data processing agreement and subprocessors and the terms of service.