Privacy
Effective: October 6, 2026
flatland is a minimal product. We collect only what we need to operate the Service, communicate with you, and understand how the site is used. We do not sell your data, and we do not show ads on this site. This document explains what we collect, why, and how long we keep it.
Data statement
Your model is a file on your computer, and flatland never stores it. By default, the desktop computes on your computer using its bundled engine. If you use flatland's hosted engine, the model is sent to flatland's servers, calculated in memory, and discarded; we do not log its contents. When you use the agent, the model's structure, values, and your conversation are sent through flatland to the AI provider to generate proposals, and flatland keeps only your account, your plan, and what the agent cost.
Privacy processors
| Service | Purpose | Data shared |
|---|---|---|
| Supabase | accounts, sign-in, devices, plan status, AI spend records and the installer download; website funnel events | email address, hashes, plan and Stripe IDs, counts and costs; pseudonymous visitor IDs and campaign information |
| Stripe | subscription billing: Checkout, the Customer Portal and invoices | email address and the plan you choose; Stripe collects your card and billing details directly |
| Resend | transactional email | email address, message content |
| Fly.io | compute API and agent routing hosting | requests in transit, including what the agent sends to the AI providers; request logs without model content, 90 days |
| OpenRouter | routes the agent's requests to the AI model provider | model structure, values and conversation, for each request; US processing and zero data retention requested |
| Google Vertex AI (US) | runs Anthropic's Claude for the agent's model creation and modeling | model structure, values and conversation, for each request; zero data retention requested |
| DeepInfra | runs DeepSeek when the agent is asked only to update assumption values | model structure, values and conversation, for each request; zero data retention requested |
| Vercel | website hosting and edge delivery | request logs without model content |
| Sentry | error tracking | scrubbed server-side error events; no model content, no default PII |
| Slack | operator alerts | account identifiers, counts and costs; never model content |
| Cloudflare Turnstile | bot check on the hosted API's key sign-up form, where it's switched on | browser and device signals and IP address, during the check |
| Ahrefs | cookieless analytics (loads only after consent) | aggregate page views; daily visitor measurement |
| Google Analytics 4 | web analytics (loads only after consent) | cookies, a pseudonymous client identifier, page interactions, approximate location, device and browser type |
Each of these services has their own privacy policy. We have selected providers that take data security seriously.
What we collect
Account data. flatland is invite-only during early access. Your account holds the email address your invite was sent to, your plan, its billing interval, status and dates (the trial's end and the current period's end), your Stripe customer and subscription IDs, and a record of what the agent cost against your plan's AI allowance. We use your email to send your invite and sign-in links and to communicate service updates.
Devices. When you sign in to the flatland app on a computer, we record that device: the computer's name as the app reports it, when it was linked, and when it was last seen. You can see and revoke your devices on your account page.
Service usage data. We log requests to the compute API at a high level: timestamps, endpoints called, and response status codes. We do not log the content of your financial models, your driver values, or your formulas. Your model data is processed in memory and not stored on our servers.
Agent usage. For each request the agent makes, we record its cost, its token counts and the AI model that answered, against your account and device. We do not record your conversation or your model.
Payment data. You pay through Stripe Checkout and manage your plan in the Stripe Customer Portal. Stripe collects your card and billing details; we receive your Stripe customer and subscription IDs and your plan's status and dates, never your full card number.
Hosted API keys. If you hold a key for flatland's hosted API, we keep the email address you signed up with, a hash of the key, its usage counts and, if you added a card, its Stripe customer ID. If Google Analytics was running in your browser when you signed up for a key, the API may send it one event, with no model content, the first time that key computes.
Website analytics. Google Analytics, Ahrefs Web Analytics and our own optional website measurements run only after you allow analytics. They run on public marketing and information pages, not sign-in, account, download or device-approval pages. Google Analytics uses cookies and a pseudonymous client identifier to measure page interactions, approximate location, device and browser type. Google processes IP addresses to derive location but does not log or store them in Google Analytics 4. Ahrefs records aggregate visits without cookies or a persistent visitor identifier; its daily visitor measurement uses a changing hash of IP address and browser information.
Website funnel events. With your analytics consent, our own website measurements record actions such as a page visit or signup submission, a random visitor identifier and marketing campaign parameters such as utm_* or gclid. The attribution is kept in browser localStorage. These events do not read form contents, sign-in or device credentials, or financial models. We store them in our own database to understand which channels bring people to flatland. An invitation-link click does not tell us that an email was sent or that an account was created.
Service records. Account creation, device linking, allowance and error records needed to operate the service are separate from optional website analytics. Declining analytics does not prevent you from requesting access or using your account.
Support communications. If you email us, we retain that correspondence to help resolve your issue.
What we do not collect
- The content of your financial models (assumptions, formulas, computed values)
- Any data from your local file system or development environment
- A cross-site advertising profile or data collected for sale to third parties
- Your payment card details, which Stripe collects directly
How we use your data
- Deliver and operate the Service: sign you in, authenticate your devices, and enforce your plan's AI allowance and rate limits
- Bill your plan through Stripe
- Send transactional emails: invitations, sign-in links, service notices
- Understand usage patterns at an aggregate level to improve the Service
- Respond to support requests
We do not sell your data, and we do not build advertising profiles from it. Our analytics providers (Ahrefs and Google) process usage data on our behalf under their own privacy terms.
Data retention
We retain your account and device records for as long as your account exists. If you request deletion, we will remove your email, account, and device records within 30 days. The record of what the agent cost stays after that, under your account's random identifier and without your email.
Billing records are kept for as long as tax and accounting law requires, generally up to seven years, even after you ask us to delete your account. Stripe keeps its own records under its privacy policy.
Compute API request logs are retained for 90 days for operational purposes, then deleted.
Browser attribution is valid for up to 90 days from its creation. A later campaign does not extend that period. Expired records are discarded when the site next checks them; withdrawing consent removes the browser record immediately. Browser expiry and consent withdrawal do not delete events already recorded on our servers. You can contact us to request access to or deletion of those records.
To request deletion of your data, email info@flatlandfi.com.
Security
A signed-in device's credential is stored only as a hash, and the one-time code that links a device is stored only as a hash and expires after ten minutes. All data in transit is encrypted via TLS. We follow standard practices for access control and secrets management.
No system is perfectly secure. If you discover a vulnerability, please disclose it responsibly to info@flatlandfi.com.
Your rights
You may request access to, correction of, or deletion of your personal data at any time. Email info@flatlandfi.com with your request.
If you are in the EU or UK, you have additional rights under GDPR / UK GDPR, including the right to data portability and the right to lodge a complaint with a supervisory authority.
Choose Decline in the analytics prompt to prevent optional website analytics. To withdraw a previous choice, open Cookie settings and choose Decline. This stops optional collection, removes the site's stored browser attribution and analytics cookies, and reloads the page to unload analytics scripts. Your sign-in state is preserved. We store the consent preference separately so we can remember your choice. If browser storage is blocked, optional analytics remain off.
Changes to this policy
We may update this policy as the Service evolves. We'll email account holders about a material change before it takes effect. The effective date at the top of this page reflects the most recent revision.
Contact
Privacy questions: info@flatlandfi.com
Data deletion requests: info@flatlandfi.com