Back to DevHexLab

FlowLens Privacy Policy

FlowLens is a DevHexLab browser extension that helps users visualize Microsoft Power Automate flow definitions as dependency graphs.

Effective date: May 3, 2026

Information FlowLens Handles

FlowLens may process Power Automate flow metadata and flow definition JSON in the user's browser. This can include flow names, action names, trigger names, dependency structure, environment identifiers, flow identifiers, connector references, and other configuration values that are present in the flow definition.

If Microsoft OAuth is configured, FlowLens may request a delegated Microsoft access token in order to fetch the current user's Power Automate flow definition from Microsoft services.

How Information Is Used

FlowLens uses flow definition data only to render a visual dependency graph.

FlowLens does not sell user data. FlowLens does not use flow definition data for advertising. FlowLens does not intentionally collect analytics about the contents of a user's flows.

Data Storage

FlowLens runs client-side in the browser. Flow data may be stored temporarily in browser extension session storage so the graph page can render the selected flow.

OAuth configuration, such as client ID, tenant ID, scopes, and token cache data, may be stored in browser extension local storage to support sign-in and live flow fetching.

Users can remove this data by removing the extension or clearing extension storage through the browser.

Data Sharing

FlowLens does not send flow definition data to DevHexLab servers.

When Microsoft OAuth is used, FlowLens communicates with Microsoft identity and Power Platform services to authenticate the user and fetch Power Automate flow data. Those requests are governed by Microsoft's terms and privacy practices.

Permissions

FlowLens requests browser permissions required to detect Power Automate pages, open the graph view, store temporary extension data, and authenticate with Microsoft when live flow access is configured.

Security

FlowLens is designed to operate without a custom backend service. Flow data is processed locally in the user's browser. Users should avoid pasting sensitive exported flow JSON into devices or browser profiles they do not trust.

Changes

This privacy policy may be updated as FlowLens changes. The latest version will be made available on this page.

Contact

For questions about FlowLens or this privacy policy, contact DevHexLab through the contact page.