Lacewing Technologies LLC, a company registered in the State of Wyoming, United States, is the data controller for HumanFlow. Its registered office is 30 N Gould St, Ste N, Sheridan, WY 82801, United States. This page explains the rights you have over your data and how to use them. It sits alongside our Privacy Policy, which describes what we collect.
Your rights
- Access — get a copy of the personal data we hold about you.
- Rectification — correct anything inaccurate.
- Erasure — have your account and data deleted.
- Portability — receive your data in a machine-readable format.
- Restriction & objection — ask us to pause or stop a particular use.
- Withdraw consent — at any time, without affecting what happened before.
- Complain — to your local supervisory authority.
Why we are allowed to process your data
- Contract — running your account and delivering the results you ask for.
- Legitimate interests — keeping the service secure, preventing abuse, and understanding in aggregate how it is used.
- Consent — anything optional, such as analytics or marketing email.
- Legal obligation — tax and accounting records for payments.
Who processes data on our behalf
Every company that processes data for us is listed on our subprocessor page, with what each one receives and where it is. Each is bound by a data processing agreement and handles only what it needs to do its job. We update that page before a new processor starts, and we notify DPA holders at least 30 days in advance.
Detection runs on our own model, on our own infrastructure. Your text is not sent to a third-party detector, and it is not used to train any model.
International transfers
We operate from the United States and our processors do too, so your data leaves the EEA and the UK. The United States does have an EU adequacy decision — but it covers only organisations that have self-certified to the EU–US Data Privacy Framework, and the UK extension works the same way. We have not certified, so we do not get to rely on it.
These transfers — including to our own infrastructure — therefore rely on Standard Contractual Clauses and the UK Addendum, backed by a transfer risk assessment. We would rather name the mechanism than let the word "adequacy" cover a case it does not reach.
How long we keep things
- Account data — while your account is open, deleted within 30 days after.
- Text you submit, and its result — kept while your account is open and deleted with it. A 30-day automatic limit is being introduced; this page will say so once it is running. Never used for training.
- IP address — 48 hours, for abuse prevention.
- Error diagnostics — 90 days, with no submitted text attached.
- Payment records — as long as tax law requires, once there are any.
Making a request
Email support@humanflow.pro from your account address. We reply within 30 days, free of charge. You can also delete your account yourself — see Delete account.
We may ask you to confirm your identity before acting on a request, so that nobody can use these rights to reach someone else's data.
Complaints
You can complain to your local supervisory authority at any time. We would rather you came to us first — Grievance Officer & Data Protection Contact, Lacewing Technologies LLC, at support@humanflow.pro — but nothing here requires it and using one does not cost you the other.