Privacy Policy

What FlowNest is

FlowNest is a project management and QA workspace: tasks, boards, cycles, docs, and, with the capture extension, recorded bug evidence.

Account data

When you sign up, we store your name, email, and a hashed password. Workspace content you create, such as tasks, comments, docs, and captures, is stored to provide the service.

What the capture extension records

The FlowNest Video Capture extension records only when you explicitly start a capture on a tab, either by clicking its toolbar icon or the on-page recorder. While a capture runs, it collects the following for that tab only:

• A video of the tab.
• Network requests: URL, method, status, timing, headers, and request and response bodies.
• Console messages.
• A list of your actions: which control you clicked, and page navigations.

It records the label of a field, never the text you type into it. It does not run in the background, does not track your browsing, and collects nothing when no capture is active.

Redaction before upload

Before a capture leaves your browser, the extension removes authorization headers and masks token and password style fields in request and response bodies, so common secrets are not uploaded. You remain responsible for what is visible on screen in the video itself.

Where captures go

When you send a capture, its video and log upload to your own FlowNest workspace: files go to Cloudflare R2 storage, and metadata goes to the FlowNest API. Only members of that workspace can open it, unless you create a share link.

Share links

If you copy a capture's share link, anyone with that link can view that one capture without signing in. The link uses an unguessable code and exposes only that single capture, never your workspace, your other captures, or any listing. You can discard a capture at any time.

Connecting the extension

To connect, the extension signs you in through FlowNest using OAuth with PKCE, and stores an access token locally in your browser. You can disconnect at any time from the extension popup.

Permissions the extension uses

The extension requests these browser permissions:

• debugger (read the tab's network and console while capturing)
• tabCapture and offscreen (record the video)
• scripting (show the on-page recorder bar)
• activeTab and tabs (know which tab you chose to record)
• downloads (let you save a capture to your computer)
• identity (sign in to FlowNest)
• storage (remember your connection and an in-progress capture)
• site access (attach the recorder to the site you are testing, granted by you)

Data retention

Captures you do not keep or attach are removed automatically after a retention window (30 days on the Free plan), and their storage is returned to your workspace. You can delete captures and your account at any time.

What we do not do

FlowNest keeps a few hard lines around your data:

• We do not sell your data.
• We do not use it for advertising.
• The extension does not collect data for any purpose other than producing the capture you asked for and sending it to your workspace.

Data in transit

Traffic between the app, the extension, and FlowNest is encrypted over HTTPS.

Contact

Questions about this policy or your data: support@flownest.id