Privacy Policy
Effective 5 October 2026
1. Who is responsible for your data
Control Engineering Sweden Aktiebolag (org. nr 556394-5947), Målaregatan 4, 426 68 Västra Frölunda, Sweden, is the data controller for personal data processed through FlowCalc. Contact us at hello@flowcalc.cloud or +46 (0)704 015 147.
We have not appointed a Data Protection Officer; we are not required to. Privacy questions go to the address above and reach a person, not a queue.
2. What we collect
Account data
Your email address and name, received from our login provider when you sign in. We never see or store a password. Authentication is handled entirely by our identity provider.
Calculation data
The flow calculations, device parameters, project names, notes and any company logo you upload. This is your engineering work. We treat it as confidential, we do not sell it, and we do not use it to train machine learning models.
Trial sessions
If you use FlowCalc without an account, we create a temporary anonymous session so your calculations survive a page reload. No name or email is collected. The session and its data are deleted automatically once the session expires.
Technical data
We keep records of your visits (IP address, the pages requested, the time, and which browser you used) for security and for fixing faults. When something breaks we receive an automatic fault report. We deliberately keep email addresses out of those reports.
Payment data
We never receive or store your card details. Payments are processed by Paddle.com as Merchant of Record. See section 5. We store only your subscription status, seat count and a customer reference returned by Paddle.
3. Cookies
In the application, we set only strictly necessary cookies, the ones that keep you signed in. They cannot be switched off without breaking sign-in, and they require no consent.
On this marketing website, we set no cookies. We count visits with Cloudflare Web Analytics, which stores nothing on your device and does not track you across sites. We see only totals: which pages were visited, from which referring site, and from which country and type of device.
4. Why we process it, and on what legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Providing the service and storing your calculations | Performance of a contract |
| Billing, invoicing and subscription management | Performance of a contract; legal obligation |
| Service emails (activation, invitations, renewals) | Performance of a contract |
| Security, abuse prevention, error monitoring, backups | Legitimate interest in a secure, working service |
| Website analytics | Legitimate interest in understanding site usage, measured without cookies and in aggregate |
| Retaining accounting records | Legal obligation (Swedish Bookkeeping Act) |
We do not use your data for automated decision-making or profiling, and we do not send marketing email to customers who have not asked for it.
5. Who else processes your data
We keep the list short on purpose. Each supplier acts on our instructions under a data processing agreement, except Paddle, which is an independent controller for payment data.
| What they do for us | Where |
|---|---|
| Hosting your account and calculation data | European Union |
| Login and identity | European Union |
| Payments, tax and invoicing (Paddle.com) | United Kingdom / European Union |
| Service and business email | European Union |
| Fault monitoring | European Union / United States |
| Network delivery, security and website analytics (Cloudflare) | European Union / United States |
We will name the current suppliers to you on request. Email hello@flowcalc.cloud. Your calculation data is held in the European Union. Where a supplier transfers data outside the EU/EEA, that transfer relies on an adequacy decision or on the European Commission's Standard Contractual Clauses.
6. How long we keep it
- Account and calculation data: while your account is active, and deleted on request or within a reasonable period after closure.
- Trial session data: deleted automatically when the session expires.
- Backups: kept for a limited period, then overwritten.
- Server logs and error reports: a limited period for security and debugging.
- Accounting records: seven years, as Swedish law requires.
Export anything you need before closing your account. Once deleted, we cannot recover it for you after the backup window has passed.
7. Security
Your data is encrypted while it travels between you and us. Access to live systems is limited to people who need it. Each workspace's data is kept separate from every other workspace's, and we take backups so that work can be recovered.
No system is perfectly secure. If a breach occurs that presents a risk to you, we will notify the supervisory authority within 72 hours and inform you where the law requires it.
8. Your rights
Under the GDPR you may:
- ask for a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted;
- ask us to restrict or stop certain processing;
- receive your data in a portable, machine-readable format;
- object to processing based on legitimate interest.
Email hello@flowcalc.cloud and we will respond within one month. There is no charge.
If you are in a team workspace, the organisation that owns it controls the data in it and its administrators can access, export and delete it. Requests about that data may need to go to your organisation as well as to us.
You also have the right to complain to a supervisory authority. In Sweden that is Integritetsskyddsmyndigheten (IMY), the Swedish Authority for Privacy Protection.
9. Changes
We will update this policy as the service changes. Material changes will be announced by email or in the application before they take effect, and the date at the top of this page always reflects the current version.