Private beta disclosure

Privacy and safety

What Flowined reads

Flowined reads only the LinkedIn draft in the post, comment, or message editor you explicitly choose to format. It does not collect surrounding posts, profiles, connections, conversation history, or browsing activity.

AI processing

When you request an AI suggestion, your selected draft is sent to the Flowined server and then to DeepSeek using the personal API key connected to your own account. DeepSeek charges your own account directly; Flowined does not use a shared provider key. Data may be processed outside your country. AI output can contain errors, so you must review it before applying it. Private messages require an additional, separate opt-in.

Storage and deletion

Flowined records only operational metadata such as account ID, request status, character counts, model, and latency. Draft text is stored only when you enable history and explicitly choose Save. Saved drafts expire after 30 days and can be exported or deleted at any time. Private-message saves require another confirmation.

Account and provider credentials

The web dashboard stores its session in secure, HttpOnly cookies. The browser extension stores its separate session in trusted extension storage that LinkedIn content scripts cannot read. Both sessions refer to the same Supabase account and profile, but tokens are never transferred between the webpage and the extension. Your personal DeepSeek API key is verified with DeepSeek, encrypted using authenticated encryption before it is stored, and isolated to your account. Only its masked final characters are shown after connection. The unencrypted key, encryption secret, and Supabase administrator credential are never shipped in the extension or returned by account APIs. You can replace or disconnect your key at any time, and deleting your account removes it.

LinkedIn policy risk

LinkedIn prohibits extensions that overlay or modify its website. Flowined's inline control can therefore conflict with LinkedIn policy even though it never scrapes, submits, posts, comments, messages, or engages automatically. Beta users accept this platform-policy risk.