🦅
HORUS FLOW
Home
← Back to Home

Privacy Policy

Last updated: April 28, 2026

1. Data Controller

Horus Tech Ltd ("we", "us") is the data controller for personal information collected through the Horus Flow Intelligence platform. We are registered in the United Kingdom.

2. Information We Collect

  • Account Data: Email address, name (optional), and hashed password.
  • OAuth Data: When signing in via Google or GitHub, we receive your email and display name. We do not store OAuth tokens.
  • Usage Data: API request counts, endpoints accessed, and timestamps for rate limiting and analytics.
  • Payment Data: Processed securely by Stripe. We do not store credit card numbers.
  • Technical Data: IP address, browser type, and access logs for security purposes.

3. How We Use Your Data

  • To provide and maintain the Service
  • To authenticate your identity and manage API access
  • To process payments and manage subscriptions
  • To enforce rate limits and prevent abuse
  • To communicate service updates and security notices

4. Data Sharing

We do not sell your personal data. We share data only with:

  • Stripe: For payment processing
  • Cloudflare: For CDN and DDoS protection
  • Law enforcement: When legally required

5. Data Security

  • Passwords are hashed using bcrypt with per-user salts
  • All connections use TLS 1.2+ encryption
  • API keys are generated using cryptographically secure random bytes
  • JWT tokens use httpOnly, secure, SameSite cookies

6. Data Retention

Account data is retained for the lifetime of your account. Usage logs are retained for 90 days. You may request deletion of your account at any time by contacting us.

7. Your Rights (GDPR)

If you are in the EU/UK, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request deletion of your data
  • Export your data in machine-readable format
  • Object to processing

8. Cookies

We use a single essential cookie (horus_token) for authentication. We do not use tracking cookies or third-party analytics cookies.

9. Children

The Service is not intended for individuals under 18 years of age.

10. Changes

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated revision date.

Contact

For privacy inquiries, contact us at privacy@horustek.pro.