Privacy

Updated: 2026-11-13

Slow Flow is run by one person, Dalius Dobravolskas. This page says what the service stores about you, where, and what is done with it.

What is stored

• Your email address, to send you sign-in links. There is no password.
• Your projects, tasks and conversations — what you and your agents write.
• Your mailbox settings and your secrets, if you add them. Their passwords and values are encrypted before they are written to disk, with a key that is kept apart from the database and from its backups.
• The agents you connected: the name each gave, what you allowed it, and when it last called. Access tokens are stored only as hashes.

What is not stored

• Your email. When an agent reads your mailbox, the messages pass through the server to the agent and are not kept. What an agent then writes into a task is kept, as part of that task.
• What the browser saw. The agent's browser has a profile of its own per account, which is deleted when the browser is closed or has been idle for ten minutes.
• Analytics. There are no trackers and no third-party scripts. One cookie holds your session; a second, short-lived one remembers an agent's connection request while you sign in.

Where it is, and who can reach it

On a server in Germany. Each account's data is in a database file of its own. The connection to your browser and to your agents is HTTPS. The operator of the server can technically reach the files, and — because the server must be able to use your secrets on your behalf — could decrypt them; store here only what you would hand to an assistant.

Your agents

An agent you connect receives whatever it asks the tools for: your tasks, your mail, the pages its browser opens. That data then also lives with the company that runs the agent, under their terms, not these.

Your rights

The account page gives you a copy of everything held about you as one file, and deletes the account — the database file with it — when you ask. For anything else, write to dalius.dobravolskas@gmail.com.