Privacy Policy

1. Introduction

ProcessFlow, Inc. ("Company," "we," "us," or "our"), a Delaware corporation, operates the StoreManager browser extension and the website at storemanager.14x.app (collectively, the "Service").

This Privacy Policy describes what data we collect, how we use it, and your rights regarding that data. By installing or using StoreManager, you agree to the practices described in this policy.

2. Data We Collect

2.1 Device Identity

When you install StoreManager, a unique device identifier is generated and stored in your browser. This identifier is sent to our servers to create and maintain your account. We also collect your browser profile identifier to support account continuity.

2.2 Email Address

If you sign in with your browser account or initiate a Pro subscription, we collect your email address. We store a one-way hash of your email on our servers for account recovery and subscription management. Your full email address is shared with our payment processor when you subscribe to a paid plan.

2.3 Subscription and Payment Data

When you subscribe to a paid plan, payments are processed by a third-party payment processor. We do not store your credit card number or full payment details. We do store:

• Your payment processor customer identifier
• Your subscription identifier
• Subscription plan (weekly or yearly)
• Subscription status (active, canceled, or past due)
• Current billing period end date

2.4 Usage Data

We track the following usage counters to enforce free-tier limits and display your usage:

• Number of translations performed
• Number of pricing country credits used
• Number of screenshots processed
• Estimated time saved (aggregate minutes per feature)
• Rate-limit timestamps (to prevent abuse)

2.5 Credential Metadata

To enable features across browser sessions, we store metadata about your connected developer accounts on our servers:

• App Store Connect: Issuer ID and Key ID only
• Google Play: A flag indicating whether credentials are configured
• Pricing preferences: Base price, base currency, data source, and base territory

2.6 Translation Content

When you use the translation feature, the text you submit (app names, descriptions, keywords, and other metadata) is sent through our server to a third-party AI translation service. This text is processed in real time and is not stored on our servers after the response is returned. The third-party AI provider's own data policies apply to how they process the request.

2.7 Crash Reports

When the extension encounters an unexpected error, an anonymous crash report may be sent to our error-monitoring service. These reports contain:

• Error type and message (with sensitive data such as private keys and tokens automatically removed before transmission)
• Stack trace (code location where the error occurred)
• Extension version number
• Browser type and version

Crash reports do not contain your name, email address, browsing history, app content, private keys, or any personally identifiable information. Reports are used solely to identify and fix bugs. No crash data is stored locally on your device.

2.8 Identity Recovery Cookie

To help recover your account if your browser sync data is cleared, we set a persistent cookie on the storemanager.14x.app domain. This cookie contains only your device identifier — no email, name, or other personal information. The cookie has a 10-year expiration and is HttpOnly (not accessible to website scripts).

2.9 Product Analytics

We collect anonymous usage analytics to understand how the extension is used and improve the product. This may include interaction data within the extension's interface and feature usage events. Credential values and sensitive inputs are automatically excluded from analytics data. Analytics data is used solely for product improvement.

3. Data Stored Locally on Your Device

The following data is stored in your browser's local storage and never leaves your device:

• Private keys and credentials: App Store Connect .p8 files and Google Play service account files
• Extension preferences: Language selections, pricing preferences, data source settings
• Session data: Translation progress, pricing calculations, and other working data
• Checklist data: Per-app submission checklists

4. Data We Do NOT Collect

• Browsing history or web activity outside of supported store pages
• Advertising identifiers or behavioral tracking for ads
• Location data
• Contacts, files, or other device data

5. How We Use Your Data

We use the data described above for the following purposes only:

• Account management: Creating and maintaining your account, authenticating your identity, and recovering your account if browser sync data is lost
• Service delivery: Enabling translation, pricing, and checklist features
• Quota enforcement: Tracking usage against free-tier limits and Pro subscription entitlements
• Payment processing: Managing subscriptions and billing through our third-party payment processor
• Abuse prevention: Enforcing rate limits on translation requests
• Product improvement: Analyzing usage patterns to improve features and user experience

6. How We Share Your Data

We share data only with the following categories of third parties, and only as described:

• Cloud infrastructure provider: Account data, usage counters, and subscription status (hosting and database services)
• Payment processor: Email address, subscription plan, and account identifier (billing and subscription management)
• AI translation provider: Text content you submit for translation (real-time translation processing)
• Error-monitoring service: Anonymous crash reports containing only error type, stack trace, extension version, and browser type (bug identification and stability improvement)
• Analytics provider: Anonymous usage data within the extension interface (product improvement)
• Apple / Google: App metadata, screenshots, and pricing — sent directly from your browser using your locally stored credentials (app store listing management)

We do not sell, rent, or share your data with data brokers, advertisers, or any other third parties.

7. Limited Use Disclosure

StoreManager's use and transfer of information received from browser APIs adheres to the Chrome Web Store's Limited Use requirements, including the following restrictions:

• We use data only for the purposes described in this policy and to provide or improve user-facing features of the Service.
• We do not transfer data to third parties except as necessary to provide the Service, comply with applicable law, or as part of a merger or acquisition with user consent.
• We do not use data for personalized advertising.
• We do not sell data to third parties or data brokers.
• We do not use data to determine creditworthiness or for lending purposes.
• Human access to user data is limited to security investigations, legal compliance, and aggregate analysis. Individual user data is not read by personnel except with explicit user consent or as required by law.

8. Data Storage and Security

• All communications between the extension and our servers use HTTPS encryption.
• Private keys and sensitive credentials are stored exclusively in your browser's encrypted local storage and are never transmitted over the network.
• Server-side data is stored in secure, access-controlled cloud databases.
• Account identifiers are randomly generated and cannot be used to identify you personally without additional information.
• Email addresses are stored as one-way cryptographic hashes on our servers.

9. Data Retention and Deletion

• Account data (profile, usage, subscription) is retained for as long as your account exists.
• Translation content is not retained after the response is delivered.
• Identity recovery cookies expire after 10 years or can be cleared by you at any time via your browser settings.

To request deletion of your data, contact us at contact@lume.gg. We will delete your server-side account data within 30 days of a verified request. Uninstalling the extension automatically removes all locally stored data (credentials, preferences, session data).

10. Your Rights

• Access and control local data: You have full control over locally stored data. You can view, export, or delete it by managing the extension in your browser settings.
• Request data deletion: You may request deletion of your server-side data at any time by contacting us.
• Revoke permissions: You can uninstall the extension at any time, which removes all local data and revokes all granted permissions.
• Third-party data: For data held by Apple, Google, or our payment processor, exercise your rights directly with those services.

If you are a resident of the European Economic Area (EEA), United Kingdom, or California, you may have additional rights under GDPR, UK GDPR, or CCPA respectively. Contact us to exercise these rights.

11. Third-Party API Requests

When you use StoreManager to manage your app listings, the extension communicates directly with Apple and Google from your browser using your locally stored credentials. Your app metadata, screenshots, pricing data, and listing content are sent directly to these platforms — they do not pass through our servers.

The extension also fetches current exchange rates from a public third-party API for pricing calculations. Only the base currency code is sent. No personal data is transmitted.

12. Marketing Website

Our marketing website (storemanager.14x.app) does not use tracking cookies, analytics services, or data collection forms — with the exception of the identity recovery cookie described in Section 2.7. Standard web server logs may be maintained by our hosting provider as part of their infrastructure.

13. Children's Privacy

StoreManager is not intended for use by individuals under 18 years of age. We do not knowingly collect data from children. If you believe a child has provided us with data, contact us and we will delete it promptly.

14. International Data Transfers

The Service is operated from the United States. If you use the Service from outside the United States, your data may be transferred to and processed in the United States and other jurisdictions where our service providers operate.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or on our website. The "Last updated" date at the top reflects the most recent revision. Continued use of the Service after changes constitutes acceptance of the updated policy.

16. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: