Product disclosure

Privacy and safety

What Flowined reads

Flowined reads a LinkedIn editor only when you explicitly use its writing control. For contextual suggestions, it may also read the surrounding post or parent comment, or a limited recent portion of the active message conversation. This context is sent only for that request and is not saved automatically. Flowined does not collect your connections, unrelated profiles, or general browsing activity.

AI processing

When you request an AI suggestion, your selected draft and applicable context are sent to the Flowined server and then to DeepSeek using the personal API key connected to your own account. DeepSeek charges your own account directly; Flowined does not use a shared provider key. Data may be processed outside your country. AI output can contain errors, so you must review it before applying it. Private messages require an additional, separate opt-in.

Storage and deletion

Flowined records operational metadata such as account ID, request status, character counts, model, and latency. Legacy extension history stores text only after you enable it and explicitly choose Save; those entries expire after 30 days. Content created in the Flowined web workspace autosaves to your personal workspace and keeps revisions, archive, and recoverable-trash state. LinkedIn context is never autosaved. You can delete workspace content and permanently remove items after moving them to trash.

Account and provider credentials

The web dashboard stores its session in secure, HttpOnly cookies. The browser extension stores its separate session in trusted extension storage that LinkedIn content scripts cannot read. Both sessions refer to the same Supabase account and profile, but tokens are never transferred between the webpage and the extension. Connecting the extension requires your explicit approval and sends it only a short-lived, single-use authorization code bound to that extension and browser. The code is exchanged for a new, independent extension session; signing out of the website does not sign out the extension. Your personal DeepSeek API key is verified with DeepSeek, encrypted using authenticated encryption before it is stored, and isolated to your account. Only its masked final characters are shown after connection. The unencrypted key, encryption secret, and Supabase administrator credential are never shipped in the extension or returned by account APIs. You can replace or disconnect your key at any time, and deleting your account removes it.

LinkedIn policy risk

LinkedIn prohibits extensions that overlay or modify its website. Flowined's inline control can therefore conflict with LinkedIn policy even though it never submits, posts, comments, messages, or engages automatically. Users should review LinkedIn's current terms before enabling the inline assistant.