Privacy
Nominal Flow checks the journeys on your website that matter, like signing in or buying a ticket, and tells the right people when one breaks. This page explains what we collect to do that, why, where it’s kept and for how long. If anything here is unclear, email hello@nominalflow.com.
What we collect
- Your account: your name, email address, role on your team, and, if you add one, your mobile number for text alerts.
- Your sites and flows: the addresses of the sites you check, the steps in each flow, schedules, and who gets told when something breaks.
- Saved values: test logins, card numbers and similar values your flows type in. They’re encrypted, and hidden values are never shown again after saving.
- Check results: whether each step passed, how long it took, and a recording of the browser (screenshots of each step and a trace) so you can see what happened. Inputs holding a saved value are blacked out before anything is stored.
- Email your flows receive: messages sent to the address we create for each check, such as an order confirmation.
- Activity: a log of changes your team makes, like adding a flow or changing who gets alerts.
How we use it
Only to run the service: to check your flows, show you results, send alerts and account emails, and help when you ask us to. We don’t sell your information and we don’t use it for advertising.
When you record a flow, we use an AI model (Claude, through Amazon Bedrock) once to turn the recording into steps. Passwords, card numbers and one-time codes are never part of what it sees. Scheduled checks never use AI.
Text messages
If you add a mobile number and agree to text alerts, we text you when a flow you’re told about breaks, and for verification codes. How often depends on your flows. Message and data rates may apply. Reply HELP for help or STOP to stop texts at any time. We don’t share mobile numbers or text consent with anyone for their marketing.
Where it’s kept
Everything is stored with Amazon Web Services in Canada (Central). Data is encrypted in transit and at rest, and saved values are encrypted again with keys only our checking service can use.
We use these providers to run the service: Amazon Web Services for hosting, storage, email and the recording browser; and, once texts launch, a text-message provider we’ll name here before we start.
How long we keep it
- Recordings and screenshots of checks: 30 days.
- Pass and fail history: 1 year.
- Team activity log: 90 days.
- Your account, sites and flows: until you delete them or close your account.
When an account is deleted, its data is removed.
Your choices
You can see and change your details on the Account page, pause your alerts, and leave a team. You can ask us for a copy of the personal information we hold about you, or ask us to correct or delete it, by emailing hello@nominalflow.com.
Changes
If we change how we handle your information, we’ll update this page and, for significant changes, tell account owners by email first.