FioriFlow Privacy Policy

Last updated: 29 June 2026 · Provided by Codedigital.

FioriFlow is a browser extension for SAP Fiori users. This policy explains exactly what data the extension handles. In short: FioriFlow stores your settings locally and uses a random device identifier to check your Pro licence. It does not collect your browsing history, personal information, or any SAP business data.

What we store on your device

• Settings — your configured systems, keyboard shortcuts, and risky-word list. Stored locally in the browser (chrome.storage) and synced across your own signed-in browser profile by the browser itself.
• Licence cache — your current tier (Free/Pro) and its validity, cached locally so the extension works offline.
• Device token — a random identifier generated on first run (e.g. a UUID). It contains no personal information and is not derived from you, your machine, or your SAP account.

What we transmit, and to whom

• Licence check — the extension sends your device token to our licensing backend (fioriflow-api.onrender.com) to return your current tier. The token is the only identifier sent; no email, name, or SAP data is included.
• Payments — if you upgrade to Pro, checkout is handled entirely by Stripe. Your payment details are entered on Stripe’s hosted page and processed by Stripe; FioriFlow never sees or stores card data. Stripe associates your subscription with your device token so we can grant Pro. See Stripe’s privacy policy.
• Your SAP system — the OData test client sends the requests you compose directly to the SAP host you are using. Those requests do not pass through, and are not logged by, FioriFlow’s servers.

What we do NOT collect

• No browsing history, page content, or analytics/tracking.
• No personal or contact information (other than what you provide to Stripe at payment).
• No SAP business data, credentials, or session tokens.

Data retention

Local data stays on your device until you remove the extension or clear its storage. Your device token and subscription status are retained in our licensing database for as long as your subscription is active, so that Pro continues to work; you can end this at any time by cancelling your subscription, after which the entitlement lapses.

Permissions

FioriFlow requests only the access it needs: storage (save settings and the licence cache), alarms (periodically re-check the licence), access to SAP Fiori domains (to provide its features on those pages), and access to our licensing endpoint. All code runs locally in the extension; no remote code is downloaded or executed.

Your choices

You can clear all locally stored data by removing the extension. To request deletion of the device token and subscription record associated with your install, or with any question about this policy, contact us at cowijin@protonmail.com.

Changes

If this policy changes, we will update the date above and post the revised version at this URL.