Who we are

Flora is made by StellarClouds Private Limited. If you have a question about this policy or about your data, email kkammaje@gmail.com.

This policy covers the Flora Chrome extension, the Flora service it talks to, and this website.

What Flora collects

Your account

You sign in with Google. We ask Google only for your basic profile: your email address, your name, your profile picture, and Google's ID for your account. We use these so that Flora knows who you are and can keep your chats and memory together. We also store the time zone of your browser, so that Flora knows what "today" means for you.

We do not receive a Google password or a Google access token. Flora cannot read your Gmail, Drive, or anything else in your Google account.

Your session

After sign-in, the extension stores a sign-in token in Chrome's extension storage on your computer. Our server stores only a one-way hash of that token. The session ends when you sign out, or after 180 days without use.

Your chats

When you ask Flora something in the side panel, we store the conversation: your messages, Flora's answers, and the data Flora read from the SAP app to answer you. Before we store it, we mask things that look like passwords, tokens, or keys. We keep chats so that you can open them later from the History screen.

Questions typed into the small filter box on a Fiori list are answered the same way, but are not kept as chats.

Your memory

Flora remembers things so that it works better for you over time. The Memory screen in the extension shows all of them. They include:

• Things you told it. What a phrase means to you, how you like things done, and notes you asked Flora to keep.
• Records you open. The name of a record you looked up and the screen it lives on, so that Flora can find it again by name.
• Who you are in SAP. Your SAP user ID, name, email, language, time zone, client, system, and your launchpad default values such as company code or plant. Flora reads these from the launchpad each time you ask a question and keeps one copy per SAP system.
• Where things are. Which tab or field holds a given topic in an app.

Some of what Flora learns is about the app, not about you. For example, which field an app uses for a search, or that a phrase means the same thing for everyone who uses that app. Flora may file these as general knowledge about the app and use them for other Flora users of the same app. Before it does, it checks that the text holds no personal data, such as names, email addresses, or long numbers. The SAP host name of each system where an item was seen is kept with it.

Your SAP systems

We store the host name of each SAP system you use Flora on, so that memory and chats can be grouped by system. We never store your SAP password. Flora uses the SAP session already open in your browser.

Ratings

If you give an answer a thumbs up or thumbs down, we store the rating, the reasons you tick, and any comment you type. With the rating we keep a copy of the chat up to that answer, so that we can look into what went wrong even after the chat itself has been deleted. You can remove a rating, and its copy, by clearing the rating in the extension.

Usage

For each request to the AI model we record which model was used, how many tokens it used, and when. We keep no text with these records. We use them to understand costs and limits.

What Flora reads from your screen, and when it is sent

Flora works only on the SAP sites you enable. The extension asks Chrome for access to a site when you press "Enable on this site". It never asks for access to all websites up front.

On an enabled site, the extension reads the Fiori app in your browser: the app name, the filter bar and its values, the visible list, the fields of an open record, open dialogs, and the buttons on the screen. It also keeps a short record, in the page's own memory, of the data calls the app makes, so that Flora can learn how the app saves changes. This stays in your browser and is thrown away when the page closes.

None of this is sent anywhere until you ask Flora something. When you do, the extension sends your question, a text description of the screen you are on, your SAP user details, and the host name of the SAP system to our server. While answering, Flora may read more from the app, such as rows of a list or the fields of a record, and send those too. There is no background upload, no telemetry, and no heartbeat.

Flora can also change things in SAP, such as setting filters, opening records, editing a draft, or running an action. Edits, actions, and button presses that change data run only after you approve them on a card in the side panel.

Who else sees your data

We share data only with the services needed to run Flora. We do not sell it and we do not use it for advertising.

• Anthropic provides the AI model (Claude). Each time you ask something, we send your question, the screen description, your SAP user details, your relevant memory, and the data Flora read from the app, so the model can answer. We send it under Anthropic's commercial API terms. See Anthropic's privacy policy.
• TypeSafe provides a small second model (Jev) that helps Flora decide where a memory belongs and whether a new question changes the topic. It may receive the phrase you taught Flora, notes you asked it to keep, your recent questions, and the text of your memories. See TypeSafe.
• Google handles sign-in. Google learns that you signed in to Flora. See Google's privacy policy.
• Fly.io hosts our server, and Neon hosts our Postgres database. Both run in Frankfurt, Germany. They store the data on our behalf and do not use it for their own purposes.

Flora support. People who run Flora can see your email, name, sign-up date, how many chats and systems you have, and your usage. They cannot read your chats unless you tick "Let Flora support read my chats" in the Account screen. You can untick it at any time.

Where your data is stored

Our server and database run in Frankfurt, Germany, in the European Union. Anthropic, TypeSafe and Google process requests on their own infrastructure, which may be outside the EU.

On your computer, Chrome's extension storage holds your sign-in token and your basic profile (name, email, picture). Chats are not stored in your browser. They are loaded from our server when you open History.

How long we keep it

Data	Kept for
Chats and their messages	90 days after the last message, then deleted
Memory: things you told Flora, notes, who you are in SAP	Until you delete them
Memory: records you opened	Stop being used 90 days after last use; deleted when you clear your memory
Ratings and their chat copy	Until you clear the rating
Usage counts (model, tokens, time)	Kept as accounting records; they hold no text
Sign-in session	Until you sign out, or 180 days without use
Account (email, name, picture, time zone)	Until you ask us to delete it

How to delete your data

• One memory. Open Memory in the extension and delete the item. You have a few seconds to undo.
• All memory. Open Account in the extension and press "Clear my memory". This deletes everything in the Memory screen, including who you are in SAP. It does not delete your chats or ratings.
• A rating. Clear the thumbs up or thumbs down on the answer. This also deletes the chat copy kept with it.
• Chats. Chats delete themselves 90 days after the last message. To delete them sooner, email us.
• Your whole account. Email kkammaje@gmail.com from the Google address you signed in with. We will delete your account and everything tied to it: chats, memory, ratings, sessions, systems and usage counts.
• Sign out. Signing out ends your session and removes the token and profile from your browser. Your data on the server stays until you delete it.

Logs and security

Our server logs errors and timings. It does not log your messages, your screen content, your email, or your IP address. We count requests per user and per IP address to stop abuse, but these counts live in memory only and are never stored.

All traffic between the extension and our server uses HTTPS. Sign-in tokens are stored hashed. Only people who run Flora can reach the database.

This website

This site is a static page. It sets no cookies and uses no analytics. It loads its fonts from Google Fonts, which means Google sees your browser's request for the font files. Our hosting provider, Fly.io, keeps standard server logs.

Children

Flora is a tool for people who use SAP systems at work. It is not meant for children under 16.

Changes

If we change this policy, we will update this page and the effective date at the top. If a change matters to you, we will tell you in the extension.

Contact