Privacy Policy

FlowKits

Privacy Policy

Last updated: 10 April 2026

Who We Are

FlowKits (“we”, “us”, “our”) operates the website getflowkits.com and develops Stream Deck plugins and profiles, based in Australia.

Information We Collect

Website (getflowkits.com)

  • We use Google Analytics to collect anonymous usage data such as page views, device type, and general location. This data is aggregated and cannot identify you personally.
  • We do not use tracking cookies beyond what Google Analytics requires.

Stream Deck Plugins

  • Our plugins may connect to third-party services (such as Google Gmail, Microsoft Outlook, Microsoft Teams, and Microsoft Calendar) using OAuth 2.0 authentication. When you sign in, an authentication token is stored locally on your device by the Elgato Stream Deck software. This token is never transmitted to FlowKits.
  • Any data our plugins retrieve from third-party services (such as email metadata, unread counts, or content) is processed locally on your device and is not stored, logged, or transmitted to any server.
  • We do not collect, store, or have access to your personal data from any connected third-party service.

How We Use Your Information

  • Website analytics: To understand how visitors use our site and improve our content
  • Plugin functionality: To display information from connected services on your Stream Deck (processed entirely on your device)

Data Sharing and Transfers

  • We do not sell, rent, or trade your personal data or Google user data to any third party.
  • We do not transfer or disclose your data to third parties for advertising, data brokering, information reselling, credit assessment, lending, or any purpose other than providing the functionality of our plugins.
  • Google user data accessed by our plugins is used solely to provide the features you requested (such as email notification counts displayed on your Stream Deck) and is not used for any other purpose.
  • Data retrieved from third-party APIs is processed locally on your device and is never sent to FlowKits or any other external party.

Data Storage and Security

We take the security of your data seriously. The following measures are in place to protect your information:

  • Encryption in transit: All connections between our plugins and third-party services (Google, Microsoft) use HTTPS/TLS encryption. OAuth 2.0 tokens are exchanged over encrypted channels and are never transmitted in plaintext.
  • Encryption at rest: Authentication tokens are stored locally on your device by the Elgato Stream Deck software using its built-in secure storage, encrypted at rest.
  • No server-side storage: We do not operate any backend servers that receive, store, or process your personal data or authentication credentials. All data processing occurs locally on your device.
  • Minimal data access: Our plugins request only the minimum OAuth scopes necessary for their functionality (e.g. read-only email metadata for notification counts). We do not request write access or broader permissions than required.
  • Website security: Our website is hosted on Cloudways (DigitalOcean infrastructure) with SSL/TLS encryption, server-level firewalls, and regular security updates.

Third-Party Services

  • Google Analytics (website analytics)
  • Google Gmail API and Google OAuth 2.0 (Gmail Notifications plugin)
  • Microsoft Graph API and Microsoft OAuth 2.0 (Outlook & Teams Notifications plugin — email, calendar, and presence data)
  • Elgato Marketplace (product distribution)
  • Elgato Stream Deck SDK (plugin platform)

Individual plugins may connect to additional third-party APIs. Each plugin’s setup guide details which services it connects to and what data it accesses.

Data Retention and Deletion

  • Plugin data: Authentication tokens and cached data persist only while the plugin is installed and configured in your Stream Deck software. Removing the plugin or signing out deletes all locally stored tokens and data from your device.
  • Google user data: Data retrieved from Google APIs (such as email metadata and unread counts) is held in memory only while the plugin is running and is not written to disk or retained after the Stream Deck software is closed.
  • Website analytics: Google Analytics data is retained according to Google’s default data retention settings. You can opt out at any time using the Google Analytics Opt-out Browser Add-on.
  • Requesting deletion: Since we do not store your personal data on any server, there is no server-side data to delete. To remove all locally stored plugin data, simply uninstall the plugin from your Stream Deck software. If you believe we hold any data about you and would like to request its deletion, contact us at getflowkits@gmail.com.

Your Rights

You can:

Children’s Privacy

Our products are not directed at children under 13. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

Trademark Notice

FlowKits is an independent product and is not affiliated with, endorsed by, or sponsored by Google LLC, Microsoft Corporation, Elgato, or Corsair. Gmail, Google Calendar, and Google Meet are trademarks of Google LLC. Outlook, Microsoft Teams, Microsoft 365, and Microsoft are trademarks of Microsoft Corporation. All third-party trademarks, service marks, and company names referenced on this site are the property of their respective owners and are used solely for identification purposes.

Contact Us

If you have questions about this privacy policy, contact us at: