📄 Legal Document

Privacy Policy

Flowix — A Nebulix Product  ·  Last updated: 5 June 2026  ·  Effective: 5 June 2026

Data controller: Nebulix Technologies FZE LLC (SPCFZ License No. 4429986.01), Business Centre, Sharjah Publishing City Free Zone, Sharjah, UAE. Contact: [email protected].

01 Who We Are

Flowix is an agency operations platform operated by Nebulix (nebulixcloud.com). Your organisation's workspace data belongs to you and your team.

02 What Data We Collect

We collect and store data necessary to deliver and support the service:

DataWhy We Collect ItStored Where
Name, email, roleUser accounts and team accessSupabase
Briefs, campaigns, jobsCore product functionalitySupabase
Proposals, invoices, estimatesFinancial and commercial trackingSupabase
Client names, contactsClient relationship trackingSupabase
Billing emailSubscription activationNebulix Platform (Supabase)

03 How Data Is Stored

Flowix stores all organisation data in Supabase (PostgreSQL). Each organisation's data is isolated by row-level security policies. Data is not co-mingled between organisations.

04 Cookies & Sessions

Flowix uses Supabase authentication which sets HttpOnly session cookies (JWT-based). These are required for login and are not used for advertising or cross-site tracking.

05 Third-Party Services

ServicePurposeData Shared
SupabaseDatabase and authAll workspace data, user credentials
StripePayment processingEmail, billing amount
Hetzner / CoolifyInfrastructure hostingApp container
Google FontsTypographyIP address (font request)

06 How We Use Your Data

  • Delivering and maintaining your Flowix workspace
  • Managing team access, roles, and permissions
  • Supporting and troubleshooting your account on request
  • Processing subscription billing and validation
  • Detecting and preventing security threats

We never sell or share your business data with advertisers or third parties for commercial purposes.

07 Data Retention

Workspace data is retained for the duration of your active subscription plus 90 days after cancellation to allow for data export. Billing email records are retained as required by applicable tax and legal obligations.

08 Your Rights

Under UAE Federal Decree-Law No. 45 of 2021 (PDPL) and applicable international privacy laws, you have the right to access, correct, delete, and export your data. Email [email protected] with subject "Privacy Request". We respond within 14 business days.

09 Contact

Nebulix — Data Controller
Sharjah, United Arab Emirates · [email protected]
Send Email →
© 2026 Nebulix Technologies FZE LLC. Flowix. Terms·Privacy·Cookies·Refund·Subscription·DPA