Privacy Policy

Document Last Updated: May 1, 2026

This Privacy Policy is designed to inform you about our practices regarding the use, disclosure and collection of information that you may provide to Treemo, Inc., doing business as Flow2 ("Flow2") . Please be sure to read this entire Privacy Policy before using or submitting information to Flow2. This Privacy Policy applies to our mobile and desktop applications, or if you're visiting our web site at flow2.co . (together, the "Flow2 Service").

This Privacy Policy is incorporated into the Flow2 Terms of Use by this reference. In addition to reviewing this Privacy Policy, you should also read the Flow2 Terms of Use. Your use of the Flow2 Service constitutes your agreement to the terms and conditions in this Privacy Policy. Whenever you submit information via this site or applications, you consent to the collection, use, and disclosure of that information in accordance with this Privacy Policy.

If required by applicable law in the jurisdiction where you are located or by agreement with us, we will not store or permit access to your personal information outside of the jurisdiction where you are located, except with your consent and then only to the extent permitted by that applicable law. Your personally identifiable information will generally be stored and processed in the United States. By using the Flow2 Service and providing information to us, you consent to having your data in the U.S. While in the U.S., your personal information may be accessible to law enforcement and national security authorities of the U.S. If you have questions about Flow2's policies and practices regarding the use of affiliates and service providers in the U.S. to collect, use, disclose, or store personal information, please direct them to Flow2 at the contact information provided in this Privacy Policy.

Flow2 and its affiliates operate this and other websites and wireless internet sites ("sites") and mobile applications. Flow2 is committed to ensuring the privacy and protection of visitors to these Flow2 sites. The following discloses our information gathering and dissemination practices for sites owned or operated by Flow2.

What is Personal Information?

Personal information is information about an identifiable individual and includes information which specifically identifies an individual, such as a name, address, telephone number, email address, or other account number, and information about that individual’s activities when directly linked to that person, such as information about his or her use of the Flow2 Service. Personal information also includes demographic information, such as date of birth, gender, geographic location and preferences when such information is linked to other personal information that identifies you, though Flow2 does not ask for date of birth, or gender. Personal information does not include “aggregate” information. Aggregate information is data we collect about a group or category of products, services or users, from which individual user identities have been removed. In other words, information about how you use a service may be collected and combined with information about how others use the same service. Aggregate data helps us understand trends and our users’ needs so that we can better consider new features or otherwise improve and augment the Flow2 Service.

Children’s Information

If you are under the age of 18, you may only use the Flow2 Service and disclose information to us with your parent’s or guardian’s express consent. Please carefully review this Privacy Policy with your parent or guardian and make sure you understand it. We collect very limited personal information through the Flow2 Service from a child under 13 where that student’s school, district, and/or teacher has agreed to obtain parental consent for that child to use the Services and disclose personal information to us for use with the Flow2 Service. If you are a child under 13, please do not send any personal information about yourself if such parental consent has not been obtained. Further, please do not send any personal information other than what is necessary to participate in the Flow2 Service.

In the event that Flow2 learns that it has collected personal information from a child under age 13 without parental consent being obtained by his or her school, district, and/or teacher, or if we learn a student under 13 has provided us personal information beyond what we request from him or her, we will delete that information as quickly as possible. If you believe that Flow2 might have any information from or about a child under 13 in violation of this paragraph, please contact Flow2's privacy officer at [email protected].

Information We Collect:

Traffic Data:

As you navigate within the Flow2 sites and apps, we automatically track and collect information about your computer, mobile phone, tablet or other equipment that you use to access the sites. This information includes IP address, device specifications, domain server, browser specifications, mobile identification number and telecommunications identifying information. As you use our services, we may collect information about your traveling to and use of channels and other features on Flow2 sites, and also which may include third party websites, mobile sites, mobile and desktop applications and other sites you visit. Some of this traffic data is used in what we provide users for analtics while some data is used internally for quality control and measurement purposes.

Personal Data:

If you register as a user on a Flow2 site or redeem or otherwise use promotional codes or similar materials on a Flow2 site, we may request that you provide us with information that personally identifies you. Personal information may include your name, wireless telephone number or mobile identification number, e-mail, zip code, birth date, age, gender and geographic location. We may also ask you to select a user name and password or PIN. In some cases, when you purchase third party goods or services through a Flow2 site, or use promotional materials, you may be asked to provide personal information to a third party provider of the goods or services. That information is subject to the privacy policy of the provider, and this privacy policy does not apply to the collection or treatment of such information via the Flow2 site.

Personal data is also:

Children:

We use a child’s personal information to create a student’s individual account, to customize the Flow2 Service for that student, and for sending notifications or emails from the Flow2 Service via the teacher, or other students. Please note that a student’s parent or guardian, as well as a student’s teacher and an administrator from his or her school and/or district, may be able to view all activity and content associated with such student account, including such child’s personal information.

Use of Your Personally Identifiable Information:

Flow2 operates sites on behalf of some of its customers (for example, other businesses that contract with us to operate mobile storefronts or other services for them). When we operate sites on behalf of such customers, we may disclose your information (including personally identifiable information) to them when you provide it to us as part of registering for those sites or "opting in" for promotions, programs or offerings from those customers. Our customers will use and disclose the information we provide them pursuant to their own policies regarding such information. Flow2 also maintains accounts and other features on Flow2's own sites in cooperation with third parties (e.g., to feature the work of partners), and we may disclose your email address, telephone number or mobile identification number, and other personally identifiable information to such third parties when you provide it to us as part of subscribing to such channels or features. Flow2's customers and other third parties that we cooperate with will use and disclose the information we provide them pursuant to their own policies regarding such information. We recommend that you review those policies before providing us with personal information in connection with sites, promotions, programs or offerings from such third parties, and before subscribing to channels or features we operate in cooperation with third parties.In addition, traffic data and personal data may be used by Flow2 for editorial and feedback purposes, for marketing and promotional purposes, for statistical analysis of users' behavior, for product development, for site improvement, and to inform advertisers of how many visitors have seen or clicked on their advertisements or viewed their promotions. In these cases, data is maintained and reviewed on an aggregate (i.e., group) basis. We may share this information with our customers and other parties, but when we do so it does not include personally identifying information. In addition, we use traffic and personal data to customize and tailor your experience on Flow2 sites, such as to help us display content that we think you may be interested in.

We will also, without further notice to you, disclose your traffic data and personal data to third parties when we believe such disclosure is appropriate to: protect the rights, property or safety of Flow2, the Flow2 sites, our users or others; enforce our terms and conditions of usage; provide the services you directly request from us through the Flow2 sites; comply with law, a court order or other legal process; in the course of responding to any claim by a third party that you are using services provided through the Flow2 sites in connection with an infringing, illegal, harmful or improper activity or that data you provided to a Flow2 site infringes rights of the third party; in response to request for identification in connection with a claim of copyright or trademark infringement by you; and to facilitate the maintenance or hosting of Flow2 sites by an affiliate or service provider engaged to do so, subject to that party's agreement to comply with this Privacy Policy.

Cookies:

Your browser may accept small identifying files ("cookies") from our system. We mostly use cookies to keep users logged into the site and other functions to support web application and services. We may use cookies to keep track of pending transactions, make sure you don't see the same content or offer repeatedly, deliver content that is specific to your interests, save your password so you don't have to re-enter it each time you visit our sites, and for other lawful purposes which comply with this Privacy Policy. Your browser may decline the cookie if it is set to do so. Declining cookies will limit the functionality of our sites.

Linked Sites:

Flow2 sites contain links to third party-operated websites, including third party-operated sites where you may obtain information about or purchase certain products or services. These third parties may collect personal information from you in connection with your use of such sites and products and services promoted or available on them. We are not responsible for the content or privacy practices of any such sites. You should review any third party privacy policy or terms that govern your use of such sites or applications.

Public Communications:

Our sites may include commenting, chat features, instant messaging or message boards. Please remember that any information that you disclose in these areas will become public information, available for use and disclosure by all users. We do not intend to monitor, moderate, screen or otherwise be responsible for the contents of postings or their subsequent use or disclosure. You should exercise caution when deciding to disclose your personal information via features or forums on our site.

AI Connectors and the flow2 MCP Server:

Flow2 operates a Model Context Protocol (MCP) server at mcp.flow2.co that lets AI assistants such as Claude create and edit your presentations on your behalf. Connecting an AI assistant to your Flow2 account is optional and only happens when you explicitly authorize it through an OAuth2 sign-in.

What we receive when you use the connector:

When you ask a connected AI assistant to use Flow2, the assistant sends the relevant portions of your conversation (for example, the topic, tone, audience, or content you want generated, plus the IDs of flows you ask it to read or edit) to mcp.flow2.co. The MCP server then calls Flow2's API on your behalf, scoped to your account by the OAuth access token issued during sign-in. Tool inputs are processed in memory to fulfill the request and are not retained beyond the request lifecycle. We log per-request metadata (tool name, timestamp, HTTP status, OAuth client ID) for up to 30 days for abuse and reliability monitoring.

Third parties involved in a connector session:

To complete an MCP request, Flow2 may transmit your prompt and content to: Anthropic (Claude API, primary generation), OpenAI (GPT-4o fallback generation and image generation), OpenRouter (alternative model routing, only when you opt in to a non-default model), Cloudflare R2 (preview-image cache), and Treemo, Inc. (the underlying presentation storage platform). Errors are reported to Sentry tagged with environment mcp; payloads are scrubbed of bearer tokens before transmission. Each of these providers operates under its own privacy policy.

Your control:

You can review and revoke connected MCP/OAuth clients at any time from flow2.co/developers. Revocation invalidates the access token immediately; in-flight tool calls fail with HTTP 401 and no further data is sent to the assistant. Deleting your Flow2 account purges associated MCP authorization records along with your other personal information as described above.

Our Security Practices:

Flow2 sites have security measures to protect against the loss, misuse and alteration of the information within our control. We have put in place reasonable physical, electronic and management procedures to safeguard and secure the information we collect. While we encrypt most of your data transmissions through the Flow2 Service, some transmissions may not be encrypted and may be intercepted by third parties. Further, no data transmission over the Internet even if encrypted can be guaranteed to be private. These measures, like any information security effort, may be circumvented or hacked, and we do not guarantee security. Except as otherwise set forth in this Privacy Policy, our internal data security policies restrict access to customers’ personal information to authorized employees or contractors for Flow2 business purposes only. Our employees and contractors are bound by Flow2 policies that require them to maintain the confidentiality of our users’ personal information. Employees and contractors who violate these requirements are subject to disciplinary action, up to and including termination. Your account information is protected by a password for your privacy and security. It is up to you to protect against unauthorized access to your account and Personal Information by selecting and protecting your password appropriately and limiting access to your computer and browser by signing off after you have finished accessing your account.

Lost or Stolen Information:

You must notify us promptly if any user name or password that you use on our sites is lost, stolen or used without permission. Upon notice, we will cancel that user name or password and update our records accordingly.

Contact Us:

To review or modify your user information, or if you have any questions regarding this Privacy Policy, the practices of Flow2, or other matters regarding your experiences with Flow2, please contact us by e-mail, mail, or telephone. Please include your user name and password.

Flow2 Copyright Agent

[email protected]
6210 Phinney Avenue North
Seattle, WA 98103
(888) 390-8068(toll free in US)

Data Changes

If you terminate your account or delete/change your data or content, we usually update our live databases immediately. However, some data may update more slowly or may be impossible to update and remove, and some old data may remain in our archives and records. Also, we may be unable to propagate changes to partners who receive your data or content. If your account is being terminated or suspended, we may maintain some data to prevent re-registration.

Your Right to Control and Access Your Information

You have control over your personal information and how it is collected, used, and shared. For example, you have a right to:

Privacy Policy Will Most Likely Change:

Flow2 reserves the right to update or change this Privacy Policy. Any modified version of this Privacy Policy will be posted on our website at flow2.co, and will be effective immediately upon posting.

Copyright © 2026 Flow2