Flow Studio Pro Privacy Policy

Flow Studio Pro does not collect, sell, transmit, or share user data with DevHexLab. Flow definitions, backups, settings, and redacted exports are processed locally in the user's browser, except when the user signs in and directly calls Microsoft services.

DevHexLab does not collect personal data, flow definitions, authentication tokens, browsing history, or Power Automate content through Flow Studio Pro.

The extension can read the current Power Automate or Power Apps page URL after the user opens the extension. This is used to detect the flow ID and environment ID for the active flow page.

Flow Studio Pro may store the following data locally in browser extension storage:

• Extension settings such as tenant ID, application client ID, scopes, and Dataverse URL.
• Local flow JSON backups created by the user or before protected saves.
• Temporary sign-in session state used to call Microsoft APIs.

This data remains on the user's device unless the user exports a file, removes the extension, clears browser extension storage, or chooses to share exported content.

If the user configures Microsoft Entra sign-in, Flow Studio Pro can request tokens from Microsoft identity services and call Microsoft Power Platform or Dataverse APIs directly from the browser.

These requests are sent to Microsoft services, not to DevHexLab servers. Microsoft's own privacy and compliance terms apply to Microsoft identity, Power Platform, Power Automate, and Dataverse services.

Flow JSON is displayed and edited locally in the extension. Redacted exports are generated locally and attempt to mask common sensitive values such as emails, URLs, GUIDs, tokens, passwords, secrets, API keys, signatures, and credential-like fields.

Users should still review exported files before sharing them, especially when a flow may contain business data, internal names, connection references, or environment-specific identifiers.

Flow Studio Pro requests browser permissions for the following purposes:

• Detect supported Power Automate and Power Apps pages.
• Store settings and local backups in browser extension storage.
• Download JSON and redacted JSON export files when requested by the user.
• Open a side panel workspace beside the Power Automate designer.
• Authenticate with Microsoft Entra using the browser extension identity flow.
• Call Microsoft Power Platform and configured Dataverse environment APIs.

DevHexLab does not sell, rent, share, or transfer user data collected by Flow Studio Pro. The extension does not include a DevHexLab analytics or telemetry backend.

Users can clear temporary sign-in state from the extension settings page. Users can remove local extension data by uninstalling the extension or clearing browser extension storage.

For questions about Flow Studio Pro or this privacy policy, contact DevHexLab through the contact page.