Flock Try It Free

Privacy Policy

✦ Effective date: June 4, 2026

Key product concepts

Self-Editing Page

A landing page regenerated as portable code with built-in Owner Mode.

Owner Mode

The private editing experience built into the page, allowing AI-assisted changes by owners.

Design Contract

A structured representation of the page’s layout, content, styles, and components, as well as what the page does, such as form submissions and analytics events.

Lockbox

A small private routing service that helps pages safely handle forms, secrets, email delivery, webhooks, and integration actions.

1

What this policy covers

  • Visiting our website
  • Using our landing page migration tool
  • Generating or editing a self-editing page
  • Using Owner Mode
  • Using the free hosted Lockbox
  • Self-hosting your page or Lockbox
  • Contacting us for support
2

Information we collect

  • Basic website logs like IP address, browser type, device type, pages viewed, timestamps, and error logs.
  • Page migration data like URLs, public page content, styles, scripts, prompts, generated files, and project settings.
  • Owner Mode data like editing prompts, selected page elements, contract changes, preview history, and publish or export actions.
  • Hosted Lockbox data like page ID, action ID, form submission routing data, delivery status, timestamps, and abuse-prevention metadata.
3

Information we do not collect

  • Government ID numbers
  • Payment card numbers for the free product
  • Precise location data
  • Contact databases
  • Private messages unrelated to support
  • Unnecessary visitor profiles
  • Sensitive personal information unless you choose to collect it through your own page
4

How we use information

  • Generate and migrate landing pages
  • Create design and action contracts
  • Power Owner Mode
  • Route forms and page actions through Lockbox
  • Deliver emails or webhooks you configure
  • Provide support
  • Prevent abuse, spam, and fraud
  • Debug and improve reliability
  • Comply with legal obligations
5

AI processing

  • AI may help analyze a landing page, generate a design contract, regenerate page code, edit copy, configure routing, or preview changes.
  • AI processing may happen locally, through a provider you choose, through a provider we use, or through a self-hosted endpoint you configure.
  • We do not use private page content, form submissions, or visitor data to train AI models unless you clearly opt in.
6

Cookies and tracking

  • We use only cookies or local storage needed for authentication, Owner Mode, security, preferences, and basic product functionality.
  • We do not use third-party advertising cookies on the product website.
  • Generated pages may include analytics, pixels, or third-party scripts only if the page owner adds or keeps them.
7

How we share information

  • Service providers for hosting, email delivery, AI processing, security, logging, and infrastructure.
  • AI providers when cloud AI processing is enabled.
  • Destinations you configure, such as email, webhook, CRM, analytics, or automation tools.
  • Legal or safety parties when required to protect rights, security, or prevent abuse.
  • Business transfer parties if we are involved in a merger, acquisition, financing, or sale of assets.
8

Data retention

  • Website logs: up to 30 days
  • Error and security logs: up to 90 days
  • Temporary migration artifacts: up to 7 days if not saved
  • Generated page projects: until deleted by the owner or inactive under our retention rules
  • Lockbox delivery receipts: up to 30 days
  • Successful form submission payloads: not retained by default after delivery
  • Failed delivery payloads: temporarily retained for retry, then deleted
  • Support emails: as long as needed for support and recordkeeping
9

Security

  • Encryption in transit
  • Restricted access to production systems
  • Secret separation from public page code
  • Abuse prevention for Lockbox endpoints
  • Origin validation
  • Rate limiting
  • Minimal logging where practical
10

Your choices and rights

  • Access personal information we hold about you
  • Correct inaccurate information
  • Delete information
  • Export information
  • Object to or restrict certain processing
  • Opt out of sale or sharing where applicable
  • Withdraw consent where processing is based on consent
11

California privacy notice

  • We do not sell personal information.
  • We do not knowingly share personal information for cross-context behavioral advertising.
  • We will not discriminate against you for exercising privacy rights.
12

International users

  • We may process information in countries other than where you live.
  • Where required, we use appropriate safeguards for international transfers.
13

Children

  • The product is not intended for children under 13, or under the age required by local law.
  • We do not knowingly collect personal information from children.
14

Self-hosting and third-party tools

  • If you self-host your page, you control how it's hosted and what tools it connects to.
  • Third-party tools you add are governed by their own privacy policies.
15

Changes to this policy

  • We may update this Privacy Policy from time to time.
  • If we make material changes, we will update the effective date and provide notice where appropriate.