FlowChartAI

GDPR overview

There is no GDPR implementation to report. Searching every collected page — visible text and archived HTML alike — returns no occurrence of the GDPR, of the CCPA, or of Article 27. No data protection officer is named, no EU representative is designated, no Data Processing Agreement is offered and no subprocessor list is published. The privacy policy, which runs to only two numbered sections, describes no right of access, rectification, erasure or portability, and says nothing about international transfers, standard contractual clauses or adequacy decisions. Some European vocabulary does appear — the policy claims a legal basis for processing, invokes legitimate interests and mentions a balancing test — but it stops there. Both the legal entity and the operating entity sit in Hong Kong, outside the European Union, and the only contact published anywhere on the site is a support address.

Who owns the data?

Under section 9 of the Service Terms you keep ownership of everything you upload or generate. Ownership is not the whole story, though: the same clause grants GROW ENGINE LIMITED a free, non-exclusive, perpetual, transferable, irrevocable and worldwide licence to use, reproduce, display, modify, adapt and distribute that content. Because the licence is transferable, and section 14 lets the operator assign its rights during a merger, acquisition or asset sale, a third party could inherit it. You alone remain responsible for the legality of what you upload and for any third-party rights attached to it.

Reuse rights

Because you retain ownership under section 9 of the Service Terms, you may reuse whatever you produce — diagrams, spreadsheets, cleaned video, transcripts — without asking permission, subject to one condition the terms place squarely on you: you are solely responsible for the legality, reliability and appropriateness of the material you upload and the content you generate, including any third-party rights attached to it. That caveat matters most in the downloader module, where the source clip belongs to someone else. On the operator's side, the privacy policy effective February 2026 describes a far wider use of your personal data than the product alone would suggest: alongside running and improving the service, it covers interest-based advertising, real-time ad bidding, cross-device measurement, advertiser reporting and custom audience segments, drawing on device identifiers such as IDFA and GAID. Processing is justified by legitimate interests and by legal obligations. Training AI models on customer data is never mentioned anywhere on the site, in either direction.

Data retention & training

Hosting summary

The site declares nothing about where data is hosted. There is no trust or security page, no hosting section in the privacy policy, and no mention of a country, a region, a cloud provider or a data centre anywhere across the pages collected. What is offered instead is generic reassurance: files are described as encrypted during transfer and processed on secure servers, and one of the vendor's own comparison articles refers to secure cloud processing without permanent storage. Two facts sit outside that silence. The legal entity, GROW ENGINE LIMITED, and the operating entity, Dovi Creative Limited, are both registered in Hong Kong, which is the jurisdiction any dispute would fall under. And a network lookup performed on 23 August 2026 resolves the domain to 155.102.45.12, an address geolocated in Paris and announced by AS24429, Zhejiang Taobao Network. That is a technical observation about a single edge address, not a statement by the publisher about where processing or storage actually happens, and it should not be read as one.