Privacy Policy

Last updated: March 15, 2026

1. Introduction

TurboFlow ("we", "us", "our") is a Chrome Extension that automates bulk AI image and video generation on Google Flow. This Privacy Policy explains what data we collect, how we use it, and your rights.

2. What We Collect

Account Information — When you sign in with Google, we receive:

Your email address
Your display name
Your profile picture URL

This information is used solely to create and manage your TurboFlow account, verify your subscription plan, and track daily usage limits.

Usage Data — We track on our server:

Number of image and video prompts used per day
Your subscription plan (Free or Pro)
Your billing cycle and subscription status

Local Storage — Stored in your browser only, never sent to our servers:

Your generation settings (model, aspect ratio, image count)
Your batch queue (prompts, batch names, statuses)
Your UI preferences (active tab, folder name)

3. What We Do NOT Collect

Your prompts are processed entirely within your browser on the Google Flow page. They are never sent to, processed by, or stored on TurboFlow servers. We have zero access to your creative content.

We do NOT collect, store, or transmit your prompts
We do NOT collect, store, or transmit your generated images or videos
We do NOT collect browsing history or activity outside of Google Flow
We do NOT use cookies for tracking
We do NOT sell, share, or rent your personal data to third parties
We do NOT run analytics, telemetry, or any third-party tracking scripts

4. How Your Data Is Used

Your account information is used to:

Authenticate your identity
Determine your subscription plan (Free or Pro)
Enforce daily usage limits for free users
Process subscription upgrades and account linking

5. Data Storage and Security

Account and subscription data is stored in a secure Supabase database
All communication between the extension and our server uses HTTPS
Your Google OAuth token is stored locally in Chrome Storage and is never sent to our servers

6. Third-Party Services

Google OAuth — For authentication (governed by Google's Privacy Policy)
Supabase — For secure database storage (governed by Supabase's Privacy Policy)
Gumroad — For payment processing (governed by Gumroad's Privacy Policy)
Vercel — For API hosting (governed by Vercel's Privacy Policy)

We do not share your personal data with any other third parties.

7. Google API Services

TurboFlow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We only request the following Google OAuth scopes:

userinfo.email — to identify your account
userinfo.profile — to display your name and picture

8. Data Retention

Your account data is retained as long as your account is active
If you sign out, your local data is cleared from Chrome Storage
You may request complete deletion of your server-side data by contacting us

9. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Export your data
Withdraw consent at any time by signing out and uninstalling

10. Children's Privacy

TurboFlow is not intended for use by children under 13. We do not knowingly collect personal data from children under 13.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes through the extension or our website.

12. Contact

For any questions about this Privacy Policy or to request data deletion, contact us at:

Email: support@turboflow.art
Website: turboflow.art