Privacy Policy

1. Introduction

Welcome to FlagFish ("we," "our," or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our feature flags management platform and website.

By using our service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Personal Information

We collect the following personal information from you:

• Email Address: Required for account creation, authentication, and service communications
• First and Last Name: Optional information used for account identification and personalization of your experience

Technical Information

• Cookies: We use essential cookies to save authentication tokens and maintain your session
• Usage Data: Information about how you interact with our platform for service improvement

We do not collect any sensitive personal information such as financial data, health information, or other sensitive categories of personal data.

3. How We Use Your Information

We use your personal information for the following purposes:

• To provide and maintain our feature flags management service
• To authenticate your account and ensure security
• To communicate with you about service updates and support
• To provide analytics and insights about your own usage (personal analytics only)
• To respond to your inquiries and provide customer support
• To improve our platform and develop new features

We do not use your data for marketing purposes or share analytics data between different users. Each user only sees their own personal usage data and analytics.

4. Data Sharing and Disclosure

We do not share your personal data with third parties. Your information remains private and is not sold, rented, or shared with external organizations for marketing or other purposes.

Limited Exceptions

We may disclose your information only in the following limited circumstances:

• When required by law or legal process
• To protect our rights, property, or safety, or that of our users
• In connection with a business transfer (merger, acquisition, etc.)
• With your explicit consent

5. Data Storage and Security

Data Location

Your data is stored on servers located in Europe (Germany and Ukraine). We ensure that your data remains within these jurisdictions and is protected according to European privacy standards.

Security Measures

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encrypted data transmission (HTTPS)
• Secure authentication systems
• Regular security assessments
• Access controls and monitoring

6. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. You may request deletion of your data at any time in accordance with GDPR and other applicable privacy laws.

7. Your Rights (GDPR)

If you are a resident of the European Union, you have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right of Rectification: Request correction of inaccurate data
• Right of Erasure: Request deletion of your data
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to data processing in certain circumstances

To exercise any of these rights, please contact us at support@flagfish.co.

8. Third-Party Services

Analytics (Public Website Only)

We may implement Google Analytics on our public website (not on the SaaS platform) to understand how visitors interact with our website. This helps us improve our website experience.

Payment Processing

We currently do not process payments directly. When we implement payment processing in the future, we will update this policy to reflect the payment processor's data handling practices.

We do not use advertising networks or social media tracking pixels.

9. Age Restrictions

Our service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information.

10. Automated Decision-Making

We do not use your personal data for automated decision-making or profiling that would significantly affect you.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: