Flowbox uses the Google API to allow our customers to connect their own Google drive accounts to our platform. This connection enables them to import media from Google Drive directly to Flowbox library, under "Imported" folder. From there, users can create a post with it, moderate it and display it on embed widgets.
Introduction
Flowbox AB (“Flowbox”, “we”, “us”, “our”) respects your privacy. We are committed to handling personal data in a secure, transparent, and lawful way. This Privacy Policy explains how we process personal data when you:
Connect Google Drive and social media accounts (including YouTube) to Flowbox
If you have any questions, please contact us at legal@getflowbox.com.
Who we are
Flowbox AB is the controller of your personal data. This means we are responsible for ensuring that data is processed correctly and securely under applicable data protection laws. Our contact details:
Flowbox AB: Olof Palmes Gata 11 - 111, 37 Stockholm - Sweden
Email: legal@getflowbox.com
What personal data we collect and why
We collect different types of personal data depending on your relationship with us.
Customers, suppliers, and partners: name, contact details, job title, company information. Used to provide services, manage relationships, and communicate.
Website visitors: IP address, device information, browsing activity. Used for security, analytics, and improving our website.
We only process personal data when we have a valid legal basis (for example, fulfilling a contract, complying with law, or legitimate business interests).
Google User and Youtube Data
When a user connects their Google Drive account to Flowbox, we may access the following information:
View and manage (import to Flowbox library) Drive files.
And the following following publicly available for YouTube Data API:
Channel ID and channel name
User profile name, profile image, and profile URL
Video metadata, including:
Video URL
Title and description
Thumbnail images
Publication timestamp
Engagement metrics (likes, comments, views)
Flowbox does not access or store private user data such as email addresses, passwords, or non-public YouTube activity.
Data Usage
We only use Google or Youtube data to:
Enable users to collect their own YouTube content inside Flowbox.
Enable users to import their own media from Google Drive to Flowbox.
Allow post creation.
Allow moderation (approve or reject posts).
Display approved content on user websites via Flowbox widgets.
Provide analytics and reporting on collected content.
We do not use Google user data for advertising, profiling, or any purposes unrelated to the services described above.
Data Sharing
Flowbox does not sell or share Google user data with third parties.
Data may be shared with trusted subprocessors (such as AWS and other technology providers) strictly to provide hosting, storage, and operational support. The full list of subprocessors is available in our Data Processing Agreement.
The company that connects their YouTube account to Flowbox has access to the content collected through their own connection.
Data Storage & Protection
Flowbox stores only metadata from YouTube content (such as video URL, title, caption, thumbnail, publication date, and channel name).
We protect this data using industry-standard security practices, including:
Encryption in transit (HTTPS) and at rest
Role-based access controls
Monitoring and auditing of systems
Annual independent security audits
Data Retention & Deletion
If a user rejects a piece of content, the metadata is deleted within 14 days.
If a user takes no action, the content is automatically deleted after 30 days.
If a piece of content is approved, Flowbox retains the metadata until the user removes it.
Flowbox also provides tools to refresh, update, or delete content as needed. For more details, see our Help Center article on moderation.
Users can also request deletion of their Google user data at any time by contacting us at privacy@getflowbox.com.