Privacy & your data

How your workspace and connections work.
Updated October 14, 2026.

Your private workspace

Each Flori account has a separate workspace. Other users cannot browse your tasks, projects, notes, meetings, backups, or connections. Your email is your sign-in name; Flori does not currently verify it or send password reset emails. Passwords and recovery codes are stored as cryptographic hashes. Save your recovery code when you create an account.

What is stored

Flori stores your account information, the workspace content you enter, the five most recent previous workspace versions, and the connections you enable. The app runs on Cloudflare Workers and uses Cloudflare D1 for storage. Your browser retains a local copy of your workspace to preserve edits while a tab is open. Sign out on shared devices to clear that account’s local copy.

Google Calendar

Connecting Google Calendar is optional. Flori requests read-only access to your calendar list and events so you can select calendars, see your schedule, and open meeting links beside your tasks. Calendar authorization does not request Gmail or Google Drive access and cannot edit Google events or send invitations. Drive and Gmail are separate optional connections with their own consent.

Google access and refresh tokens are encrypted before storage on the server. Flori keeps the list of available calendars and a bounded cache of events from the calendars you select, covering the past 7 days and next 92 days. Event data includes titles, times, descriptions, locations, and meeting links. The cache is refreshed while you use Flori. Google event data is not included in Flori’s AI planning requests or its agent workspace API.

To remove this connection, open Connections → Calendar → Disconnect. This deletes the saved Google credentials, calendar cache, and pending connection attempts from Flori, and requests revocation at Google when no other Google connection remains in your Flori account. Google may revoke all permissions for an app together; Flori preserves sibling connections when you disconnect just one service. You can also remove Flori under your Google account’s connections.

Flori uses Google user data only to provide the connected productivity features you request. It does not sell that data, use it for advertising, or use it to train generalized AI models. Flori’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Google Drive & Docs

The Drive connection uses Google’s hosted file picker and the drive.file permission. Google describes that permission as allowing changes to selected files; Flori only reads file metadata and, when you request a preview, a bounded plain-text excerpt of a Google Doc. Flori cannot see files you have not selected. Documents and attachments stay in Google Drive. Adding a source to a task or project always requires your review, and copying document text is optional.

Gmail

Gmail is a separate, optional read-only connection. Google’s permission covers reading mailbox messages and settings; Flori uses it to search up to 20 message previews at a time and read a selected message. Flori does not send, delete, archive, label, or mark messages as read, and it does not download attachments. Email bodies are fetched on demand, are not cached, and only become workspace content if you explicitly include them when creating or updating a task. Refresh credentials remain encrypted on the server. This permission requires Google’s restricted-scope verification for a public rollout.

Slack

Flori requests only Slack’s commands permission to support the “Send to Flori” message shortcut. It does not request conversation history or permission to post messages. When you invoke that shortcut, Slack sends the selected message, channel, workspace and your Slack identity to Flori. The message is routed only to the Flori account that connected that exact Slack identity and workspace. A private confirmation modal may appear; no channel message or direct message is posted.

Up to 30 selected messages are held encrypted for review. They expire after 30 days during the next scheduled cleanup, or can be dismissed earlier. Turning one into a task requires a review in Flori. Disconnecting Slack removes your connection and pending captures; it leaves the Slack workspace app installed so other people are not disconnected.

Captured sources and assistants

Source links and text you explicitly add become part of your workspace and its backups. They can be read by assistants you authorize and included in the project context of AI features you enable. Raw mailboxes, Drive files, Slack history, connection credentials, and pending Slack captures are not exposed through Flori’s assistant tools. Google data is not used to train generalized AI models.

Optional AI and assistants

AI is off until you add your own Anthropic API key. When you explicitly request a plan, or enable background checks and mark a task Ready for agent, Flori sends your prompt and the relevant project and task context to Anthropic. Background checks run every 30 minutes and can prepare drafts for review. They cannot browse, send messages, publish, or purchase anything. New accounts start with background checks paused. Proposed tasks are shown for review before they are added. An assistant connected through Flori sign-in (OAuth) or a manual token can access only the scope you grant. Its reads and updates may transmit your project content to that assistant’s provider under that provider’s terms. Connections do not automatically import your conversations. Revoke a connection in Connections to stop future access. Flori stores progress and results from agent runs; full result and context content is retained for the latest 100 runs per workspace when background maintenance runs. Small records remain to prevent duplicate work. Credentials for Google and Anthropic are never exposed through assistant tools.

Your controls

Export your workspace from Settings. Disconnect optional services individually and revoke assistant tokens at any time. Moving a task or note to Trash keeps it recoverable; recent workspace backups may also contain older content. Signing out ends the current session. Password recovery invalidates existing sessions and assistant tokens.

Flori has no advertising trackers. Its operator and hosting provider can administer the service and its stored data; a private workspace is not end-to-end encrypted. For account help or a request to remove your stored workspace, contact aleksandar.perak33@gmail.com.