PlaybookFlow Privacy Policy

Effective date: [26.03.2026]
Last updated: [26.03.2026]

This Privacy Policy explains how PlaybookFlow (“we”, “us”, “our”) collects, uses, stores, and protects personal data in connection with the PlaybookFlow website, application, and related services (the “Service”).

1. Data Controller

The controller of your personal data is:

SAVDEV Mateusz Sawczuk
Email: contact@playbookflow.com

2. Personal Data We Collect

Depending on how you use the Service, we may collect the following categories of personal data:

a. Account and authentication data

• Steam ID
• Steam display name
• Steam profile URL
• Steam avatar and other public profile data made available through authentication or the Steam profile

b. Service usage data

• tactics, notes, labels, and other content you create or save;
• workspace-related data;
• shared link usage data;
• timestamps and activity logs related to your use of the Service.

c. Technical data

• IP address
• browser type and version
• operating system
• device-related technical information
• log files and error reports

d. Communication data

• email address, if you join a waitlist, request access, contact support, or otherwise provide it to us;
• the contents of messages you send to us.

e. Future billing data

If paid plans are introduced, we may collect or receive billing-related information such as billing email, subscription status, and transaction metadata. Payment card details may be processed directly by a third-party payment provider rather than by us.

3. How We Collect Data

We collect personal data:

• directly from you;
• from your Steam login or associated public profile data;
• automatically through your use of the Service;
• from communications you send to us.

4. Purposes of Processing

We process personal data for the following purposes:

• to create and maintain your access to the Service;
• to authenticate users through Steam;
• to provide core functionality, including saving and displaying tactical content;
• to operate private workspaces and shared links;
• to maintain security and prevent abuse;
• to debug, monitor, and improve the Service;
• to communicate with you about support, beta access, service updates, or operational messages;
• to comply with legal obligations;
• to establish, exercise, or defend legal claims.

5. Legal Bases for Processing

Where applicable under data protection law, we process personal data on the following bases:

• performance of a contract or steps taken at your request before entering into a contract;
• our legitimate interests, including operating, securing, improving, and administering the Service;
• your consent, where required, such as for optional communications or non-essential cookies;
• compliance with legal obligations.

6. Sharing of Data

We may share personal data with trusted service providers that help us operate the Service, such as providers of:

• hosting and infrastructure,
• databases and storage,
• email delivery,
• analytics,
• security and monitoring tools.

We may also disclose data:

• if required by law;
• to protect our rights, users, or the integrity of the Service;
• in connection with a business transfer, merger, or reorganization.

We do not sell your personal data.

7. International Transfers

Your personal data may be processed in countries outside your country of residence, depending on the location of our service providers.

Where required, we will use appropriate safeguards for international transfers in accordance with applicable law.

8. Data Retention

We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

• for the duration of your use of the Service;
• for as long as needed to maintain security, resolve disputes, and enforce agreements;
• for legal or regulatory retention periods where applicable.

Waitlist or access-request data may be retained until access is granted, the request is no longer relevant, or you ask us to remove it, unless we need to retain it for legal reasons.

9. Your Rights

Depending on applicable law, you may have the right to:

• access your personal data;
• correct inaccurate data;
• request deletion of your data;
• restrict processing;
• object to certain processing;
• receive your data in a portable format;
• withdraw consent where processing is based on consent;
• lodge a complaint with a competent data protection authority.

To exercise your rights, contact us at contact@playbookflow.com.

10. Whether Providing Data Is Required

Some data is necessary to use the Service. For example:

• Steam-related identification data is required for Steam-based login and account access;
• email is optional in some cases, such as joining a waitlist, but may be required for certain communications or future billing features.

If you do not provide required data, some parts of the Service may not be available.

11. Automated Decision-Making

We do not use personal data to make solely automated decisions that produce legal or similarly significant effects on users.

12. Security

We use reasonable technical and organizational measures to protect personal data. However, no system can be guaranteed to be completely secure.

13. Children

The Service is not directed to children under the age at which they can lawfully use such a service under applicable law. If you believe a child has provided us with personal data inappropriately, contact us.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be published with a new effective date.

15. Contact

If you have questions about this Privacy Policy or your personal data, contact:

SAVDEV Mateusz Sawczuk
Email: contact@playbookflow.com