How we handle your data

Who is responsible

The controller of this data is Mabiloft S.r.l., registered at Via Luigi Cadorna 2, 35020 Albignasego (PD), Italy, VAT number 05157070284.

You can reach us about anything on this page at hello@flowmir.app. A person reads that address.

What we collect

Your email address

The one you type into the form. Nothing is pre-filled and nothing is taken from elsewhere.

Where and in what language you signed up

Which form on the page you used and whether you were reading English or Italian. It tells us which parts of the page do their job.

Your IP address and browser user-agent

Recorded by our server together with the signup. We use them to stop the form being abused — the rate limit that blocks repeated submissions counts on them. The page also asks our server how many people are on the list, and that request carries your IP address and user-agent as every web request does — on every visit, even if you never sign up. Nothing is recorded against you for it beyond the ordinary server logs kept for security, and we do not use any of this to profile you.

Your questionnaire answers, if you answer it

The closed answers, anything you write in the open question, and whether you told us you are available for a call. Answering is optional at every step, and you can stop at any point — the answers given up to that point stay with us.

Anonymous usage measurement

Which parts of the page were reached, whether the form was used, and how far into the questionnaire people get — never what was answered. Sent to PostHog. How you are counted depends on the cookie choice you made, and the next section spells out both sides of it.

Cookies, and what your choice changes

There are no advertising cookies here, and nothing on this site is shared with an advertising network. The choice is only about how the measurement described above works.

If you refuse, or ignore the banner

Nothing is stored on your device. You are counted through a code the server works out from your connection and browser, which is rebuilt with a new secret every day — so tomorrow you are a new visitor to us, and there is nothing to link the two visits. No session is recorded.

If you accept

A first-party cookie and browser storage keep the same identity across visits, so we can see that someone came back rather than counting them twice. We may also record how you move through the page — scrolling, clicks, layout — to see where it loses people. What you type is masked in those recordings: the email field and the written answer are not readable in them.

Either way, we remember the choice

Your answer is kept in your browser under a single key so the banner does not ask again. If you refuse, that key is the only thing this site stores on your device — remembering a refusal is what makes it a refusal.

Changing your mind

Use the cookie choice link in the footer of any page, on this one included. Refusing after having accepted stops the recording and the cookie stops being used; the measurement falls back to the anonymous, single-day counting above.

Why, and on what legal basis

To write to you when Flowmir opens

Your consent, given by submitting the form after reading this. That is the only email you will get from the waiting list.

To decide what we build first

Your consent, given by answering the questionnaire. The answers are read together, as a picture of how tables actually play.

To contact you for a call, only if you said yes

Your consent, given by choosing “Yes, write to me” on the last question. Saying no changes nothing else.

To keep the form from being abused

Our legitimate interest in keeping a public form usable. This is the only purpose your IP address and user-agent serve.

Who else sees it

Nobody buys this data, and we do not sell, rent, or share it for anyone else’s marketing.

It is handled on our behalf by the providers that run our infrastructure — hosting, database, and email — who act as processors under contract and may only do what we instruct. Usage measurement is handled by PostHog on its European infrastructure.

Where it is kept

Data is stored on infrastructure located in the European Union. If a provider ever needed to process it outside the EU, that transfer would have to rest on the safeguards the GDPR requires, and this page would say so before it happened.

How long we keep it

Until Flowmir opens and we have written to you, and in any case no longer than 24 months from your signup. After that the address and any answers attached to it are deleted.

If you ask to be removed earlier, we delete it when you ask — see below.

Your rights

You can ask us for a copy of what we hold about you, have it corrected, have it deleted, object to how we use it, or have it handed to you in a portable form. Where we rely on your consent, you can withdraw it at any time, and withdrawing it does not affect what we did before.

If you think we are handling your data wrongly, you can complain to your national data protection authority — in Italy, the Garante per la protezione dei dati personali.

How to be removed

Write to hello@flowmir.app from the address you signed up with, or tell us which address to remove. We delete the signup and any questionnaire answers attached to it. You do not have to give a reason, and we will not try to talk you out of it.

If this page changes

The date above changes with it. If a change affects what we do with data already collected, we will write to you before it takes effect rather than quietly updating this page.