Get started

Legal

Privacy Policy

How we collect, use, and protect your information when you use Flagify.

Last updated: March 28, 2026

1. Information we collect

Account information

When you create a Flagify account, we collect your name, email address, and organization name. If you subscribe to a paid plan, our payment processor (Stripe) handles your billing information — we do not store credit card details on our servers.

Usage data

We collect data about how you interact with the Flagify dashboard, including feature flag configurations, targeting rules, and environment settings. This data is used to provide the service and improve the product.

SDK evaluation data

When your application evaluates feature flags through our SDKs, we receive flag evaluation events. These events include the flag key, the evaluation result, and the user context attributes you send. We do not require personally identifiable information in user context — you control what attributes are sent.

Technical data

We automatically collect IP addresses, browser type, operating system, and device information when you access the Flagify dashboard. Our SDKs transmit the SDK version and runtime environment for compatibility and debugging purposes.

2. How we use your information

We use collected information to:

  • Provide, maintain, and improve the Flagify platform
  • Evaluate feature flags and deliver targeting results to your applications
  • Send transactional emails (account verification, billing receipts, security alerts)
  • Monitor system performance, uptime, and security
  • Provide customer support when you contact us
  • Generate aggregated, anonymized analytics to improve the product

We do not sell your personal information. We do not use your flag evaluation data to build advertising profiles.

3. Data retention

Account data is retained for the duration of your account. When you delete your account, we remove your personal information within 30 days, except where retention is required by law.

Flag evaluation data is retained for 90 days to support analytics and debugging. Aggregated metrics (flag evaluation counts, latency percentiles) are retained indefinitely in anonymized form.

Audit logs (flag changes, permission updates, environment modifications) are retained for 1 year on Pro plans and 2 years on Enterprise plans.

4. Data sharing

We share data only with the following categories of third parties:

  • Infrastructure providers — Cloud hosting and CDN services that process data on our behalf to deliver the Flagify platform
  • Payment processor — Stripe processes billing information for paid subscriptions
  • Email service — Transactional email delivery for account notifications
  • Analytics — Anonymized usage analytics to understand product usage patterns

All third-party processors are bound by data processing agreements. We do not share data with advertisers or data brokers.

5. Your rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Object to or restrict certain processing activities
  • Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at [email protected]. We respond to all requests within 30 days.

6. Cookies

The Flagify dashboard uses essential cookies for authentication and session management. We use a single analytics cookie to understand dashboard usage. We do not use third-party advertising cookies.

Our marketing website (flagify.dev) uses minimal analytics to understand traffic sources. You can opt out through your browser settings.

7. International transfers

Flagify processes data in the United States. If you are located outside the US, your data is transferred to and processed in the US. We use standard contractual clauses and appropriate safeguards for international data transfers where required.

8. Children's privacy

Flagify is a developer tool and is not directed at children under 16. We do not knowingly collect information from children. If you believe a child has provided us with personal data, contact us and we will delete it.

9. Changes to this policy

We may update this privacy policy from time to time. We will notify you of material changes by email or through a notice in the Flagify dashboard at least 30 days before the changes take effect.

10. Contact

For privacy-related questions or requests, reach out to: