Children's Privacy Policy

1. Overview & Scope

FlowCMS ("we," "our," or "us") operates a suite of content management and developer tools designed for professionals, businesses, and creative teams. Our services are not directed to children under the age of 13. We do not knowingly collect, use, or disclose personal information from children under 13 without verifiable parental consent, in full compliance with the Children's Online Privacy Protection Act (COPPA) and applicable international privacy regulations.

If you are under 13, please do not attempt to register for or use FlowCMS services without your parent or guardian's permission and supervision.

2. Information We Collect

We are designed for adult professionals and developers. We do not intentionally solicit or collect personal information from children under 13. However, if a child under 13 inadvertently provides information while using our platform, we may collect:

• Account Information: Email address, username, and password (only if an account is created)
• Technical Data: IP address, browser type, device identifiers, and usage logs
• Content Data: Text, media, or configuration data uploaded during sessions

3. Parental Consent & Verification

Before allowing a child under 13 to use FlowCMS in a manner that requires personal information, we will obtain verifiable parental consent. Our verification methods may include:

• Electronic signature or verified email confirmation
• Submission of a consent form via postal mail or fax
• Use of secure payment verification methods
• Government ID verification (handled securely and deleted after validation)

Parents may withdraw consent at any time. Upon withdrawal, we will cease collection and delete the child's data within 30 days, unless legally required to retain it.

4. How We Use Information

When parental consent is provided, we may use a child's information solely for:

• Providing and maintaining requested services
• Account management and security
• Customer support and troubleshooting
• Compliance with legal obligations

We do not condition a child's participation in activities on the provision of more personal information than is reasonably necessary. We never sell, rent, or trade children's personal information to third parties.

5. Data Security & Retention

We implement industry-standard technical and organizational measures to protect children's data, including:

• AES-256 encryption for data at rest and in transit
• Role-based access controls and audit logging
• Regular security assessments and penetration testing
• Strict data minimization practices

We retain children's personal information only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Upon account deletion or consent withdrawal, data is securely purged from our active systems and backups within 30 days.

6. Third-Party Services

FlowCMS does not allow third-party advertising on our platform. We may use trusted service providers for hosting, analytics, and support, but we strictly prohibit them from collecting personal information from children. All third-party agreements include COPPA-compliant data handling clauses.

7. Cookies & Tracking

We use essential cookies to maintain session security and platform functionality. We do not use behavioral tracking, interest-based advertising, or cross-site tracking technologies for users under 13. Analytics cookies are anonymized and never linked to individual children's accounts without parental consent.

8. Parents' Rights & Choices

Parents or guardians have the right to:

1. Review a child's personal information
2. Request deletion of a child's data
3. Withdraw consent and opt-out of further collection
4. Update or correct inaccurate information
5. Refuse to permit further use of a child's data

To exercise these rights, please contact our privacy team using the information below. We will respond to valid requests within 30 business days.

9. Changes to This Policy

We may update this Children's Privacy Policy to reflect changes in technology, law, or our practices. Material changes will be communicated directly to parents who have provided consent. The "Last Updated" date at the top of this page will reflect the most recent revision.