Privacy Policy

This Privacy Policy explains how Flow State Automation LLC(“Flow State Automation,” “we,” “us”) collects, uses, and protects information in connection with Compose(the “Service”), a tool that helps teachers turn their own question banks into multiple fair versions of a test. By using the Service you agree to this Policy.

Who this Service is for

Compose is built for teachers and educators. It is not directed to children, and it is not intended to be a system of record for student personal information or student education records. Please do not upload student names, grades, or other student personal information into your question bank or source materials — Compose only needs your test content.

Information we collect

• Account information. Your email address and, if you provide it, your name. Authentication is handled by our infrastructure provider (Supabase).
• Content you provide. The questions, answer keys, PDFs, images, and other source materials you upload or create, and the tests and versions generated from them.
• Payment information. If you subscribe, your payment is processed by Stripe. We do not receive or store your full card number; we retain only a customer/subscription identifier and your subscription status.
• Usage and technical data. Basic logs needed to operate and secure the Service (e.g., request metadata, error logs, and rate-limit counters).

How we use information

• To provide the Service: importing your PDFs, generating fair versions, proofreading, and exporting documents.
• To process AI operations you initiate (reading your PDFs, rewording variations you review, and re-checking answer keys).
• To manage your account, subscription, trial, and access.
• To secure the Service, prevent abuse, and enforce usage limits.
• To communicate with you about your account (e.g., password resets and billing).

We do not sell your personal information, and we do not use your uploaded content to train our own models. Our AI provider processes your content solely to return the result you requested and does not use it to train its models under our agreement.

How we share information

We share information only with the service providers (“subprocessors”) that make the Service work — for hosting, database and storage, AI processing, and payments. See our Subprocessors page for the current list. Each processes data on our behalf under contractual confidentiality and security obligations. We may also disclose information if required by law or to protect our rights, users, or the public.

Where your data is stored

Your content and account data are stored in the United States with our infrastructure providers. Each teacher’s workspace is isolated by row-level security so your content is visible only to you and to the limited automated processes needed to serve you.

Data retention

We keep your content for as long as your account is active. You can delete individual questions, materials, and tests at any time. If you close your account, we will delete or de-identify your content within a commercially reasonable period, except where we must retain limited records (for example, billing records) to meet legal obligations.

Security

We use industry-standard measures including encryption in transit, row-level security for tenant isolation, scoped access controls, private file storage with signed URLs, and server-only handling of secrets. No method of transmission or storage is perfectly secure, but we work to protect your information and to promptly address issues we discover.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. Residents of California (under the CCPA/CPRA) and the EEA/UK (under the GDPR) have specific rights, including the right not to receive discriminatory treatment for exercising them. We do not sell or “share” personal information for cross-context behavioral advertising. To make a request, contact us at the address below; we will verify and respond as required by applicable law.

Cookies

We use only the cookies necessary to keep you signed in and to operate the Service securely. We do not use advertising or cross-site tracking cookies.

Children’s privacy

The Service is intended for educators who are adults. We do not knowingly collect personal information from children under 13 (or the equivalent minimum age in your jurisdiction). Because Compose is not a student-records system, teachers should not enter student personal information.

Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by additional notice.

Contact us

Flow State Automation LLC — privacy inquiries: admin@fsautomation.ai.