ScreenPath Privacy Policy
- Effective date: November 1, 2026
- Controller: Flowmate Inc. (주식회사 플로우메이트), Republic of Korea
- Service: ScreenPath (https://screenpath.dev)
- Payment page: https://pay.screenpath.dev (operated by Flowmate Inc.; this policy applies there too)
This policy explains what personal information ScreenPath collects, why, how long we keep it, who processes it for us, and your rights. It is prepared under the Korean Personal Information Protection Act (PIPA); Section 12 adds information for users in the EU/EEA and the UK. The Korean version is the governing version, to the extent permitted by applicable law.
1. Information we collect
| Category | Data | Source |
|---|---|---|
| Account (required) | Name, email address, profile photo URL and unique account ID from your Google account; confirmation that you meet the minimum age; your agreement to the Terms and this Privacy Policy, the versions (effective dates) agreed to and when | Google sign-in via Firebase Authentication; age confirmation and agreement given by you on the sign-up screen |
| Service use (required) | Your projects and content (screens, elements, flows, notes, design rules, uploaded or attached screenshots and images), project roles, edit history (author and time), language setting | You, while using the Service |
| Real-time co-editing (required) | Online status, editing position (cursor), the IDs of the screen, element or flow you currently have selected (current-selection record), display name and photo | Generated when you open a project in the editor |
| Collaborator invitations (optional) | Invitee's email address and assigned role | The project owner |
| MCP connector (optional, paid users) | Connection credentials (OAuth tokens and their identifiers), when you consented and the access you granted, client name | Created when you connect a client on the connection consent screen |
| MCP usage logs (optional, paid users) | Time of each call, the tool used, IDs of the project or screen involved, result (success or failure), client name | Generated when a connected client calls the Service |
| MCP current selection (optional, paid users) | Current selection records (screen, element, path and group identifiers, view type and selection time) | Created when you change your selection in the browser while connected |
| Institutional agreement eligibility check (where applicable) | Email address (or the address pre-registered by an administrator), email domain (your institution), agreement institution name, grant start and expiry dates, and an email hash used to prevent repeat grants | Checked automatically by our server when you sign in with an agreement institution's Google account or a pre-registered email; pre-registration is entered by our administrators at the institution's request |
| Education verification (optional) | Verification method, the email domain of your school account (automatic verification), institution name, the document you submit and the information on it (document verification), review result, verification and expiry dates | You, when you apply for verification |
| Korean card payments — subscriptions (paid users) | Billing key (a token replacing card details), card issuer, partially masked card number, payment date and amount, order ID, subscription status | Toss Payments (we never receive or store full card numbers) |
| International card / PayPal payments — international passes (paid users) | Payment method type, card issuer or PayPal transaction ID, partially masked card number (cards only), payment date, amount and currency, order ID, pass type and expiry date | Toss Payments (we never receive or store full card numbers or PayPal login details) |
| Paddle subscription — international (paid users) | Email address, country and postal code, payment method type and last four digits, transaction and subscription IDs, customer ID, payment date, amount and currency, tax, subscription status and next renewal date | Paddle.com Market Limited (we never receive or store full card numbers) |
| Support | Name, email, phone number (if you call), message content | You |
| Service usage statistics (collected automatically; you can turn it off in Settings) | Feature usage counts (event types, export formats and other fixed values), page dwell buckets, pseudonymous duplicate-check marks (irreversible hashes) | Generated automatically when you use the Service |
| Automatically collected | IP address, access time, browser and device information, usage records, error logs | Generated when you use the Service |
Service usage statistics do not retain IP addresses and do not collect your name, email address or project content.
International subscriptions and passes have tax-included prices; Paddle calculates tax within the advertised price. International pass sales end when international payments move to Paddle subscriptions. Existing Toss pass payment and refund records remain subject to Section 3.
For annual renewal reminders, we store your user ID, renewal date and amount, reminder timing, and in-app and email processing status. Retention of reminder records follows Section 3.
We never collect your Google password. Please mask information not needed for education verification (such as resident registration numbers) before submitting documents; we do not collect resident registration numbers. If your content includes other people's personal information, you must have the right to upload it.
- Institutional agreement checks use only whether your email is verified and its domain; we do not ask the institution for, or receive from it, any other information. The hash is a one-way conversion of your email address.
2. Why we use it
- To identify you, sign you in, confirm you meet the minimum age, record your agreement to the Terms and this policy, manage your account and prevent abuse
- To provide the Service: storing and displaying projects, real-time co-editing, version history, exports, and exchanging data with the MCP client you connect
- To handle collaborator invitations
- To process payments, subscription renewals and in-app and email annual renewal reminders sent twice, 30 days and 7 days before renewal, pass expiry notices, cancellations, refunds and receipts, to apply plan limits, and to check education-price eligibility for students and staff of formal schools only (primary, secondary and universities; private academies and tutoring centres excluded)
- To respond to support requests and notify you of changes to terms or prices
- To keep the Service secure and reliable (incident response, security checks, error analysis, preventing misuse of the MCP connector)
- To produce usage statistics that improve the Service (aggregated sign-ups, conversions and feature use)
- To comply with legal obligations
- To check institutional agreement eligibility: to confirm whether your account belongs to an agreement institution or your email was pre-registered, to grant the Pro period under the agreement, and to prevent repeat grants for the same email.
We do not use your content for advertising or to train AI models, and we do not sell personal information. We do not send marketing messages; if we ever want to, we will ask for your separate consent first.
3. How long we keep it
- Account data and content are kept until you delete your account and are then deleted without delay. Copies in disaster-recovery backups are removed within 30 days of deletion and are not used for anything other than disaster recovery in the meantime.
- Co-editing presence data is deleted when you close the project or disconnect. MCP current selection records follow the retention policy below.
- MCP connection credentials are deleted without delay when you disconnect or delete your account. MCP usage logs are kept for 90 days and then deleted.
- Education verification documents are deleted within 30 days after the verification period ends or the verification is rejected or cancelled. The verification result (method, institution name, verification and expiry dates) is kept only as long as needed to check renewal, and no later than account deletion.
- Some records are kept for periods required by Korean law or our retention policy:
- Records of contracts and withdrawals of orders: 5 years
- Records of payments and supply of services: 5 years
- Records of consumer complaints and dispute handling: 3 years
- Records of advertising/labeling: 6 months
- Access logs (sign-in records, IP addresses): 3 months
- Accounting books and tax evidence: 5 years
- MCP usage records (tool name, time, project identifier): 90 days
- Current selection records (screen, element, path and group identifiers, view type and selection time): replaced when you make a new selection; deleted upon your deletion request or account closure (Section 8). Deleting a project alone does not automatically delete these records
- We do not store raw analytics events. Daily aggregates are kept as totals that cannot identify individuals for as long as the Service operates, and duplicate-check marks are deleted automatically 2–40 days after they are created.
- We do not put inactive accounts into a separate "dormant" status. If we introduce a policy for long-inactive accounts, we will email affected users at least 30 days in advance.
- Institutional agreement eligibility data (email address, domain, institution name and grant period) is deleted without delay after the agreement ends or the eligibility is revoked; an email that was pre-registered but never signed up is deleted when the agreement ends or the registration is removed. To prevent the same email from being granted eligibility repeatedly, the email hash and the grant record (grant and revocation times) are kept for 3 years from the first grant (or until the grant expires, if the grant is longer than 3 years) and then deleted; they are used for no other purpose. The institution name and grant period in your entitlement record remain as your own usage history until you delete your account, even after the grant ends. When you delete your account, the eligibility data linked to your account (member ID) is deleted, but the hash and grant record may remain for the same period without any link to your member ID.
4. Sharing with third parties
We do not sell personal information, and we provide it to third parties only with your consent or as permitted by law. We currently provide the following:
| Recipient | Purpose | Data | Retention |
|---|---|---|---|
| Paddle.com Market Limited (United Kingdom) | Selling international subscriptions as Merchant of Record, payment and tax processing, invoices and receipts, subscription management, refunds | Member ID (uid), email address | Until the Paddle subscription ends and for any period required by law |
Paddle.com Market Limited (UK): we provide your member ID (uid) and email address so that Paddle can process Paddle subscription payments and taxes and issue receipts. Before you open the Paddle checkout, we show you this and ask for your separate consent; without it you cannot pay for a Paddle subscription. Paddle subscription prices include tax (Tax included), and if Paddle subscriptions become available, sales of Toss international passes may be discontinued.
This applies only if you choose to pay for an international subscription through Paddle, and only after we show you these details at checkout and you consent. You may refuse; you then cannot use the international subscription but can choose another method shown on the payment page.
At checkout Paddle collects your name, email address, billing details (such as country and postal code) and payment details directly from you and processes them under its own privacy notice (https://www.paddle.com/legal/privacy).
Agreement institutions: we give an agreement institution statistics only (such as the number of users) and do not provide a list of individual users or their email addresses. We will not provide such a list without your separate consent.
The following happen only at your choice and request, and we show you what will be shared and ask you to confirm first:
- Collaborators: people you invite or share with can see the project content and the name, profile photo, email and editing presence of others working on it. You control invitations and can revoke them at any time.
- Your AI client: if you connect an AI client such as Claude by Anthropic through the MCP connector, that client reads and writes your project data and your current-selection record on your instruction. On the connection consent screen we show what the client can access and ask for your consent; you can disconnect at any time. Data delivered to the client is governed by that provider's privacy policy. ScreenPath does not send your project data to AI providers to operate the Service.
5. Service providers (processors)
| Provider | Purpose |
|---|---|
| Google LLC | Authentication (Firebase Authentication), project, content and payment-status storage (Cloud Firestore, Seoul region), real-time co-editing state (Firebase Realtime Database, Singapore region), storage of education verification documents and project images (Cloud Storage for Firebase, Seoul region), web hosting and server operation (Firebase App Hosting, Taiwan region) |
| Vercel Inc. | Hosting and server operation of the payment page (https://pay.screenpath.dev) |
| Toss Payments Co., Ltd. (Korea) | Payment processing on our payment page: recurring billing for Korean cards, international card and PayPal payments, cancellations and refunds |
- PayPal: if you pay for an international pass with PayPal, PayPal collects your PayPal login and payment details directly from you under its own privacy policy; we do not receive them.
- Administrator sign-in codes: we use the Aligo SMS service to send sign-in verification codes to our own staff when they log in to our internal admin screens. Only staff phone numbers and codes are sent to Aligo; no user (customer) personal information is processed by Aligo, so it is not a processor of your data.
- We do not currently use a separate email-delivery provider (for example, for invitation emails). If we add a new processor, we will list it here before it starts processing your data.
We bind our providers to process data only for the stated purposes and to keep it secure, and we supervise their handling of personal information.
6. International transfers
The main copy of your projects and content (Cloud Firestore) and education verification documents and project images (Cloud Storage for Firebase) are stored in the Republic of Korea (Seoul, asia-northeast3). We transfer personal information outside Korea as follows:
| Recipient (contact) | Country | Data | Purpose | When and how | Retention |
|---|---|---|---|---|---|
| Google LLC (https://support.google.com/policies/contact/general_privacy_form) | United States | Account data (name, email, profile photo URL, user ID, sign-in records) | Authentication (Firebase Authentication) and operation and security of Google's shared infrastructure | Over the network at sign-up, sign-in and during use | Until account deletion or end of the service agreement |
| Google LLC | Singapore (asia-southeast1) | Co-editing presence (user ID, display name and photo, online status, editing position, current-selection record) | Real-time co-editing (Firebase Realtime Database) | Over the network while you have a project open in the editor | Until you close the project or disconnect |
| Google LLC | Taiwan (asia-east1) | Account data, content, MCP connection data and usage logs, education verification data and payment status while a request is being processed; automatically collected data (access and error logs) | Web hosting and server processing (Firebase App Hosting) | Over the network whenever you use the Service | Request data is discarded after processing; server records as set out in Section 3 |
| Vercel Inc. (privacy@vercel.com) | United States | User ID, email address, order and payment data (including the billing key) while a payment-page request is being processed; automatically collected data (access and error logs) | Hosting and server processing of the payment page | Over the network whenever you use the payment page | Request data is discarded after processing; access logs until the end of the service agreement (or any longer period required by law) |
| Paddle.com Market Limited (https://www.paddle.com/legal/privacy) | United Kingdom | Member ID (uid), email address | Acting as seller (Merchant of Record) to process Paddle subscription payments, taxes and receipts | Over the network when you open the Paddle checkout after your separate consent | Until the Paddle subscription ends and for any period required by law |
| PayPal (see PayPal's privacy statement) | United States and other countries where PayPal processes data | Order ID, amount and currency, product name (PayPal payers only) | Processing and refunding PayPal payments for international passes | Via Toss Payments when you pay with PayPal | As required by law and PayPal's policies |
Education proof documents are stored in the region configured for the Cloud Storage bucket. If we use a region outside Korea, we will disclose that country and the data in this table.
The transfer to Paddle is based on your separate consent. We send only your member ID (uid) and email address. You enter your country, postal code and payment details directly in the Paddle checkout; Paddle creates transaction and subscription data during payment. Section 1 lists the information we receive from Paddle.
When you pay with a card issued outside Korea, payment details are passed through Toss Payments to the international card network and your card issuer to authorize the payment.
Transfers to Google, Vercel and PayPal are necessary to perform our contract with you (PIPA Article 28-8(1)(iii)); the transfer to Paddle is based on your consent (PIPA Article 28-8(1)(i)). You may object to these transfers. However, without Google the Service cannot sign you in or operate, and without Vercel you cannot use the payment page to buy a paid plan. Without Paddle or PayPal you cannot use that payment method, but you may choose another one shown on the payment page. To object, decline at checkout, email our privacy officer, or delete your account.
7. Deletion
When data is no longer needed, we delete it without delay (within 5 days). Records we must keep by law are stored separately and deleted when the retention period ends. Backups are cleared as described in Section 3. Electronic files are deleted in a way that cannot be restored.
8. Your rights
You may at any time request access to, correction or deletion of, or suspension of processing of your personal information, or withdraw consent. You can do much of this in settings (view profile, delete projects, disconnect MCP, request deletion of education verification, delete account) or by emailing ceo@flowmate.kr. We will respond within 10 days. Records we must keep by law cannot be deleted before the retention period ends.
Minimum age: you must be at least 14 years old, and old enough to consent to the processing of your personal data on your own under the law of your country of residence (for example, 16 in some EU member states). We check this at sign-up, do not accept sign-ups from people who do not meet it, and do not offer a parental-consent process. If we learn that we have collected data from someone who does not meet it, we will close the account and delete the data without delay.
9. Security measures
- Limited staff access to personal information, regular internal checks, and phone verification plus authenticator-app (OTP) verification for staff access to admin screens
- Encryption in transit (HTTPS/TLS) and at rest (Google Cloud default encryption)
- Database access rules so only you and people you invite can access a project, education documents accessible only to you and our reviewers, and server-side permission checks
- Secrets (API keys, etc.) kept outside the code repository; access logs retained
- Card and PayPal details handled by Toss Payments and PayPal; Paddle subscription payment details handled by Paddle.com Market Limited; we never store full card numbers or PayPal login details
- Data processed in the secure data centers of Google Cloud and Vercel
10. Cookies and similar technologies
The Service and the payment page use browser storage (cookies, localStorage, IndexedDB) to keep you signed in, check your sign-up agreement, complete payments and remember your settings. We perform our own aggregation to improve the Service and use no third-party analytics tools or advertising cookies; Paddle's checkout may set its own cookies for payment processing and fraud prevention. We honour the browser's Do Not Track and Global Privacy Control settings, and you can turn usage statistics off in settings. You can block cookies in your browser, but sign-in may not work.
11. Privacy officer
| Privacy officer | 권도형, CEO |
| ceo@flowmate.kr | |
| Phone | 070-8098-5126 |
Korean residents may also contact the Personal Information Dispute Mediation Committee (1833-6972, www.kopico.go.kr) or the KISA Privacy Infringement Report Center (118, privacy.kisa.or.kr).
12. Users in the EU/EEA and the UK
If the EU General Data Protection Regulation (GDPR) or the UK GDPR applies to you:
- Legal bases: we process account, service-use, co-editing, MCP connection, education verification and payment data to perform our contract with you (Art. 6(1)(b)); we keep records required by law to meet legal obligations (Art. 6(1)(c)); we process automatically collected data and MCP usage logs for security, abuse prevention and error analysis based on our legitimate interest in running a safe and reliable service (Art. 6(1)(f)); and we rely on your consent where we ask for it (Art. 6(1)(a)), which you can withdraw at any time without affecting earlier processing.
- Paddle: for international subscriptions, Paddle acts as an independent controller of the data it collects at checkout, under its own privacy notice.
- Your additional rights: data portability, objection to processing based on legitimate interests, and restriction of processing, in addition to the rights in Section 8. We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.
- Transfers: your data is processed in the Republic of Korea, which the European Commission and the UK have recognized as providing adequate protection, and by Google, Vercel, Paddle and PayPal in the other countries listed in Section 6 under the safeguards those providers offer (such as standard contractual clauses).
- Complaints: you have the right to lodge a complaint with the data protection supervisory authority in your country of residence. We would appreciate the chance to resolve your concern first at ceo@flowmate.kr.
13. Changes
We will post changes to this policy at least 7 days before they take effect, or at least 30 days before for significant changes (such as new data categories, purposes, third-party sharing or international transfers), which we will also send to you by email and, where required, ask for your consent again.
Flowmate Inc. (주식회사 플로우메이트) · Representative: 권도형 · Business registration no. 772-88-04021 · Mail-order business report no. 제2026-부산사하-0602호 · 353, 7th floor, 49 Gamcheon-ro, Saha-gu, Busan 49371 · 070-8098-5126 · ceo@flowmate.kr