Privacy
Last updated 1 September 2026
FlowDesk is operated by Limitlast. This page explains what we store, why we store it, and what you can do about it. It is written to be read, not to be survived.
What we collect
Account details you give us: your name, business name, email address and the answers to the setup questions.
Business data you put into FlowDesk: customers, quotes, invoices, expenses, projects, documents and payment records.
Technical data we need to run the service: sign-in times, device and browser type, and error reports.
Why we process it
To provide the workspace you signed up for, including configuring modules around your business type and country.
To send the documents you ask us to send, such as invoices and reminders.
To keep the service secure, diagnose faults, and meet our own record-keeping obligations.
Where it is stored
Customer data for European accounts is stored on servers inside the European Union.
Backups are encrypted and retained for 30 days, after which they are destroyed on a rolling schedule.
Who else sees it
Sub-processors we rely on for hosting, email delivery and payment processing, each under a data processing agreement.
We do not sell your data, and we do not use your business data to train models.
Your rights
You can export your data at any time from Settings → Data, in open formats.
You can ask us to correct or delete your data by writing to privacy@tryflowdesk.space. We answer within 30 days.
You can complain to your local data protection authority if you think we have got it wrong.