Terms of Service

Welcome to FlowPilot Studio ("FlowPilot" or the "Service"), operated by Zen Coders, S.C. ("we," "us," or "our"), a company registered in Mexico (RFC: ZCO180607U55). These Terms of Service ("Terms") govern your access to and use of our website at flowpilot.studio (the "Website"), our software-as-a-service (SaaS) application, and any related services, features, content, or applications offered by us (collectively, the "Service").

By accessing or using the Service, you agree to be bound by these Terms. If you are using the Service on behalf of an organization (such as a VFX or animation studio), you represent that you have the authority to bind that organization to these Terms, and "you" and "your" will refer to that organization. If you do not agree to these Terms, do not access or use the Service.

We may update these Terms from time to time. Your continued use of the Service after any changes constitutes your acceptance of the updated Terms. We will notify you of material changes via email or in-Service notice at least 30 days before they take effect.

1. Description of the Service

FlowPilot is a SaaS application that enables users to build AI-powered data visualizations, charts, and tables from databases connected to Flow Production Tracking (formerly known as ShotGrid) ("FPT"). Users connect their FPT instance to FlowPilot via a REST API wrapper and use natural language queries to generate visualizations.

The Service may include features such as:

• Integration with FPT databases for real-time data retrieval.
• AI-driven natural language processing for query interpretation and visualization generation.
• Customizable charts, tables, and dashboards.
• Event-driven automations triggered by changes in your FPT instance.
• Live Data exports for embedding or sharing specific datasets.
• Collaboration tools for sharing visualizations within your organization.

We reserve the right to modify, suspend, or discontinue any part of the Service at any time, with reasonable notice where practicable.

2. Eligibility

You must be at least 18 years old or the age of majority in your jurisdiction to use the Service. By using the Service, you represent and warrant that you meet this requirement and that you are not barred from using the Service under applicable laws.

3. Account Registration and Security

To access the Service, you must create an account ("Account") by authenticating through your FPT instance using the FPT App Session Launcher. This is the same authentication mechanism used by ShotGrid Desktop. Your FPT password is never transmitted to or stored by FlowPilot. If your FPT instance uses SSO, 2FA, or SAML, those protections apply to the FlowPilot authentication flow as well.

Once authenticated, FlowPilot stores an encrypted session token that grants access to your FPT instance on your behalf. All session tokens are encrypted at rest using AES-256-GCM encryption.

Script Credentials: If you configure automations or webhook-driven features, you may provide FPT script credentials (script name and API key). These are encrypted at rest using AES-256-GCM, with encryption keys stored separately from the database in the hosting provider's encrypted environment configuration, requiring compromise of multiple independent systems to access credential data. Script credentials are used solely to execute automation actions against your FPT instance on your behalf. You can revoke script credentials at any time through your Account settings, and we recommend using FPT script keys with the minimum permissions required for your automations.

You are responsible for:

• Maintaining the security of your FPT credentials and any devices used to access the Service.
• All activities that occur under your Account, whether authorized by you or not.
• Notifying us immediately of any unauthorized access or use of your Account at support@flowpilot.studio.

We may suspend or terminate your Account if we suspect any breach of these Terms or unauthorized activity.

4. Subscription and Payment Terms

4.1 Subscription Model

The Service is offered on a subscription basis ("Subscription"). Subscriptions may be available in different tiers (e.g., Free, Starter, Pro, Enterprise), each with varying features, usage limits, and pricing. Details of available Subscriptions are provided on the Website or during the signup process.

Subscriptions are billed on a recurring basis (monthly or annually) unless canceled. All Subscriptions automatically renew at the end of the term unless you cancel before the renewal date.

4.2 Payment

You agree to provide valid payment information and authorize us (or our third-party payment processor, Stripe) to charge your payment method for all fees associated with your Subscription. All payments are non-refundable except as required by law.

Prices are exclusive of applicable taxes, which you are responsible for paying. We may adjust pricing with at least 30 days' notice, but changes will not apply to your current Subscription term.

If payment fails, we may suspend your access to the Service until payment is received.

4.3 Free Tier

We offer a free tier of the Service with limited usage. The free tier does not require payment information. We reserve the right to modify or discontinue the free tier at any time.

4.4 Cancellation

You may cancel your Subscription at any time through your Account settings. Cancellation takes effect at the end of the current billing period, and you will retain full access to paid features until then. No refunds will be issued for partial periods. Canceling your Subscription does not delete your Account — your Account and its data will remain accessible on the free tier. To request Account deletion, see Section 9.

5. User Data and Content

5.1 Your Data

By using the Service, you connect data from your FPT instance ("User Data"). You retain all rights to your User Data. We access your User Data solely to provide the Service — specifically, to fulfill your queries and generate visualizations in real time.

We do not store your User Data. All User Data is pulled directly from your FPT instance via its REST API, processed transiently in memory, and discarded immediately after the response is generated. No copies, backups, or derivatives of your User Data are retained by us.

We do not use your User Data to train AI models. The AI components of the Service operate solely on FPT schema metadata (field names, entity types, API capabilities) and your natural language queries. Your actual production data — the contents of your FPT database — is never sent to any AI or language model.

Schema Caching: To improve performance, we temporarily cache your FPT schema metadata (entity types, field definitions, and field types) in your browser's IndexedDB storage with a 10-minute time-to-live. This metadata is also provided to the AI to interpret your natural language queries. Schema metadata describes the structure of your data (e.g., "Shots have a Status field"), not the data itself (e.g., not the actual status values of your shots).

You represent and warrant that:

• You have all necessary rights, consents, and permissions to connect your FPT instance to the Service.
• Your use of the Service complies with your FPT license terms and applicable data protection laws (e.g., GDPR, CCPA).

5.2 Data Security and Privacy

We implement technical and organizational security measures to protect your information, including:

• AES-256-GCM encryption of all stored credentials at rest, with encryption keys isolated from the database.
• Database-level Row-Level Security (RLS) enforcing organization isolation.
• HTTP-only, SameSite, Secure session cookies.
• Rate limiting at the proxy level.
• Multi-factor authentication on all infrastructure provider accounts.
• Hosting on SOC 2 Type II compliant infrastructure.

Our Privacy Policy (available at flowpilot.studio/privacy-policy) explains how we collect, use, and share your information. By using the Service, you agree to our Privacy Policy.

For integrations with FPT, your FPT instance's own permission model is fully respected. FlowPilot can only access data that the authenticated user has permission to see in FPT.

5.3 AI-Generated Content

Visualizations, charts, automations, and other outputs generated by the Service ("Generated Content") are based on your User Data and natural language queries. We do not guarantee the accuracy, completeness, or suitability of Generated Content. You are solely responsible for reviewing and validating Generated Content before relying on it.

5.4 Live Data Exports

The Service allows you to create scoped export tokens for specific datasets ("Live Data Exports"). Each token grants access to one specific dataset via a unique URL. Live Data Export access is logged, including IP address, user agent, referring source, response time, and row count. You are responsible for managing and revoking export tokens as appropriate.

6. Intellectual Property Rights

6.1 Our Rights

We own all rights, title, and interest in the Service, including software, AI models, algorithms, designs, trademarks, and any modifications or improvements thereto. These Terms do not grant you any ownership rights in the Service itself.

You are granted a limited, non-exclusive, non-transferable, revocable license to access and use the Service for your internal business purposes during your Subscription term, subject to these Terms.

6.2 Your Rights in Generated Content

Subject to your compliance with these Terms, you own the Generated Content created through your use of the Service.

6.3 Feedback

If you provide feedback, suggestions, or ideas about the Service ("Feedback"), you grant us a perpetual, irrevocable, royalty-free license to use and incorporate Feedback without compensation.

7. Prohibited Uses

You agree not to:

• Use the Service for any illegal, harmful, or unauthorized purpose.
• Reverse engineer, decompile, or attempt to derive the source code of the Service.
• Interfere with the Service's operation or security.
• Upload viruses, malware, or harmful code.
• Scrape, crawl, or use automated means to access the Service without permission.
• Share, resell, or sublicense the Service without our written consent.
• Attempt to circumvent usage limits or subscription tier restrictions.
• Violate third-party rights, including FPT's terms of service.

We may monitor usage to enforce these prohibitions and may suspend or terminate access for violations.

8. Third-Party Services and Sub-processors

The Service relies on the following third-party service providers to operate:

All infrastructure provider accounts are protected by multi-factor authentication. Infrastructure providers are independently SOC 2 Type II audited.

Your use of FPT is governed by Autodesk's terms. We are not responsible for third-party services, and your use of them is subject to their respective terms. You authorize us to access your FPT data as necessary to provide the Service.

9. Termination

9.1 Account Deletion by You

You may request deletion of your Account by contacting us at support@flowpilot.studio. There is no self-service account deletion. Upon account deletion:

• Your Account data (organization configuration, saved dashboards, automation rules) is permanently deleted via cascade delete.
• Since we do not store your User Data, no FPT production data is affected.
• Accrued payment obligations survive account deletion.

9.2 Termination by Us

We may terminate or suspend your Account and access to the Service for breach of these Terms, non-payment, or other material reasons, with reasonable notice where practicable. The effects described in Section 9.1 apply upon termination by us.

9.3 Subscription Cancellation vs. Account Deletion

Canceling your Subscription (as described in Section 4.4) does not delete your Account. Your Account remains active on the free tier. To have your Account and its associated data permanently deleted, you must request account deletion as described in Section 9.1.

10. Disclaimers

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.

WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, SECURE, OR THAT GENERATED CONTENT WILL BE ACCURATE OR RELIABLE. AI-GENERATED OUTPUTS MAY CONTAIN ERRORS.

11. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING LOSS OF PROFITS, DATA, OR GOODWILL, ARISING FROM YOUR USE OF THE SERVICE, EVEN IF ADVISED OF THE POSSIBILITY.

OUR TOTAL LIABILITY SHALL NOT EXCEED THE AMOUNT YOU PAID US IN THE 12 MONTHS PRECEDING THE CLAIM.

12. Indemnification

You agree to indemnify, defend, and hold us harmless from any claims, losses, damages, liabilities, and expenses (including attorneys' fees) arising from:

• Your use of the Service.
• Your User Data or Generated Content.
• Your violation of these Terms or applicable laws.

13. Governing Law and Dispute Resolution

These Terms are governed by the laws of Mexico, without regard to conflict of laws principles.

Any disputes arising from or relating to these Terms or the Service shall be submitted to the courts of competent jurisdiction in the State of Mexico or Mexico City.

14. Miscellaneous

14.1 Force Majeure

We are not liable for delays or failures due to events beyond our reasonable control (e.g., natural disasters, wars, pandemics, internet outages).

14.2 Severability

If any provision is held invalid or unenforceable, the remainder of these Terms remains in full effect.

14.3 No Waiver

Our failure to enforce any right or provision does not constitute a waiver of that right or provision.

14.4 Assignment

We may assign these Terms without your consent in connection with a merger, acquisition, or sale of assets. You may not assign your rights under these Terms without our written consent.

14.5 Entire Agreement

These Terms, together with our Privacy Policy, constitute the entire agreement between you and Zen Coders, S.C. regarding the Service.

15. Contact Us

For questions about these Terms, contact us at:

Email: support@flowpilot.studio Website: flowpilot.studio