Cookie Policy

Cookies are small text files a website stores in your browser. Similar technologies, such as localStorage and sessionStorage, keep information in your browser in the same way. This policy covers both, on chatinflow.com and in the ChatinFlow app.

We use first-party cookies and browser storage that our website and app need to work, or that remember a choice you made. Our brand fonts, part of how our website looks, load from Adobe Fonts on every page (see "Third-party services").

One thing is optional: a partner referral cookie, which we set only if you arrive through a partner's link and choose Allow. You can withdraw that consent at any time in Privacy settings, linked at the bottom of every page.

We do not use analytics, advertising or social media cookies, and we do not load third-party analytics or advertising scripts.

• chatinflow-session keeps you signed in. Our API (api.chatinflow.com) sets it for chatinflow.com and its subdomains the first time your browser sends it a request, for example when you sign in or send a form. It contains only an encrypted session identifier; the session itself is stored on our server. It expires 2 hours after your last activity and cannot be read by scripts on the page.

• XSRF-TOKEN protects forms against cross-site request forgery by showing that a request came from our own pages. It is set and renewed together with the session cookie and expires the same way.

• NEXT_LOCALE remembers the language of the website. It is set on your first visit and when you change the language, and expires after 1 year.

• chatinflow-theme remembers whether pages should load in the light or dark theme. It contains only light or dark and expires after 1 year.

• x_workspace_slug remembers which workspace you last opened in the app. It is set only after you sign in, is removed when you sign out, and expires after 30 days.

• cif_affiliate is set only with your consent. If you arrive through a partner's link (chatinflow.com/r/...) and choose Allow, it remembers the partner's code for 30 days so the partner is credited if you subscribe. It contains only that code, cannot be read by scripts on the page, and is removed as soon as you withdraw consent in Privacy settings. Partners see the plan, the amount and date of each subscription payment they are credited for, and whether a refund is under review, never your name or email address.

None of these cookies is shared with third parties or used to recognize you on other websites.

We also keep a few entries in your browser's localStorage, which stays until you clear it, and sessionStorage, which is cleared when you close the tab. These entries stay in your browser; our servers do not read them.

On the website:

• chatinflow:cookie-consent remembers that you closed the cookie notice, so it doesn't appear again.

• chatinflow:privacy remembers your choice in Privacy settings (partner referral allowed or not) and when you made it, so we can honor it on every page.

• chatinflow:theme stores your light or dark theme choice.

• cif:visit-modal stops our occasional offer window from reappearing for 30 days after you close it, or for 180 days after you click through.

• Our free tools keep the sets you save and the calendar days you pin only in your browser.

In the app, after you sign in:

• Interface settings and progress, such as list or grid view, recently used automation steps, whether you have finished the product tour or dismissed a checklist or banner, and drafts of messages and community posts you are writing, so you don't lose them.

• Short-lived sessionStorage entries that carry you through a sign-in or payment redirect, for example the page to return to after you sign in, or an email address you typed before being sent to the sign-in page.

Adobe Fonts. Our brand fonts are served by Adobe Fonts (use.typekit.net and p.typekit.net). Adobe Fonts does not set cookies to serve fonts. To deliver them, Adobe receives your IP address, which it says it does not store, along with technical information such as which fonts were served and the address of our website, which it uses for font licensing and billing. The fonts are part of our brand and load on every page, on the basis of our legitimate interest in presenting our website as it is designed. You have the right to object: write to privacy@chatinflow.com. If you do not want your browser to contact Adobe, you can block use.typekit.net and p.typekit.net with your browser or a content blocker; the site then uses fonts already on your device. See Adobe's privacy information for Adobe Fonts.

Payment providers. When you buy a subscription or top up your balance, the payment form comes from Paddle (in a window on our page) or Stripe (on Stripe's own page). Only then does your browser load their code, and they may set their own cookies to process the payment and prevent fraud. These cookies are covered by the privacy policies of Paddle and Stripe.

Social media links. The links to our profiles on Instagram, Facebook, LinkedIn and YouTube are plain links. Nothing from these networks loads until you click one.

Privacy settings, linked at the bottom of every page and from the cookie notice, list everything the site uses and let you allow or withdraw the partner referral cookie. Your choice is stored in your browser (chatinflow:privacy). Withdrawing consent removes the cookie straight away; it does not affect a partner credit that was already earned.

The cookie notice itself only tells you what we use and links to Privacy settings; clicking "Got it" only records that you have seen the notice. Answers given to our earlier notice ("Accept" or "Essentials only") do not count as consent to anything. If we ever add another optional cookie, such as analytics, we will update this policy and ask for your consent before setting it.

You can also block or delete cookies and site data in your browser settings. If you block the necessary cookies listed above, you won't be able to sign in and some features will stop working. Deleting site data for chatinflow.com also clears your choices, so the notice appears again and the defaults apply.

We never set the partner referral cookie without your consent, whatever your browser sends, so a Global Privacy Control (GPC) or Do Not Track signal has nothing further to switch off: we do not sell personal data or share it for advertising. We do not change what the site loads based on these signals.

We may update this Cookie Policy from time to time. Each revision is published on this page with a new version number and effective date.

Questions about cookies? Read our Privacy Policy or email privacy@chatinflow.com.