Privacy Policy

We collect the minimum data needed to run the platform and support your team. Specifically:

• Account data — name, email, profile photo, hashed password (or SSO provider identifier).
• Workspace data — workspace name, members, roles, integrations, workflows, and run history.
• Billing data — payment method tokens (handled by Stripe; we never see your card), invoices, tax IDs.
• Service logs — server request and error logs (for example IP address, time and the endpoint called) kept by our hosting provider and used for security and debugging, and error reports (see Sentry under "Sub-processors"). The app itself runs no third-party analytics or advertising trackers, and we never sell this data.
• Product usage of in-app tips — when an in-app tip is shown, dismissed or used, we record which tip, the action and your account, to improve the tips. Nothing is stored in your browser for this and no third-party analytics are used.
• Eligibility confirmation — whether you confirmed you meet the minimum age and when you accepted the Terms and this policy (see "Children's data" below).
• Workflow execution data — inputs, outputs, and traces for every run. Stored encrypted at rest.
• Workspace activity log — what members do in a workspace (for example editing a workflow, inviting someone or changing a key), with the time, the country the request came from, a one-way salted hash of the IP address (not the address itself) and the browser type. Owners and admins of that workspace can see it. It never contains passwords, keys, tokens, prompts or run data.
• Sign-up attribution — if you reach the sign-up page from a link on our website or a campaign, we store which page or campaign it was with your account (see "Our website" below).

Our website collects a little more, described in "Our website" below: cookieless, aggregated analytics, newsletter sign-ups and contact-form messages.

• To operate, maintain, and improve the platform.
• To bill you accurately and process payments.
• To send transactional emails (invoices, renewal reminders, security alerts, workspace invitations).
• To send product updates and other non-essential emails, which you can turn off (see "Email" below).
• To understand, in aggregate, which pages of our website are useful and which pages or campaigns lead to sign-ups.
• To investigate fraud, abuse, and security incidents.
• To comply with legal obligations (tax, anti-fraud, court orders).

We do not use your workflow execution data to train AI models. Your data is your data.

Our marketing website, getflow.fluxosuite.com, works differently from the app in four ways:

• Website analytics. We use Vercel Web Analytics on the website (not in the app). It is cookieless: it sets no cookies and stores nothing in your browser. It records aggregated page views (the page, the referring site, campaign parameters such as utm_source, and your approximate location, browser, operating system and device type) and a few events, such as clicking "Start free", switching between monthly and annual pricing, running the demo, choosing a template, using a calculator, sending the contact form or subscribing to the newsletter. Events never include your name, email address or anything you type. Vercel doesn't tie this data to you or to your IP address and doesn't track you across other websites; visitors are counted using a hash of the incoming request that is discarded after 24 hours. We remove other query parameters (such as newsletter confirmation links) from page addresses before they are sent. We use these statistics only to improve the website. Our legal basis is our legitimate interest in understanding, in aggregate, how the website is used.
• Newsletter. If you subscribe, we collect your email address. We use double opt-in: nothing is stored until you click the confirmation link we email you, and only then is your address added to our mailing list, which is kept by Resend (Resend Audiences). Our legal basis is your consent. Every newsletter has an unsubscribe link that works in one click. We keep your address until you unsubscribe; after that we keep only a record that the address unsubscribed, so we don't email it again.
• Contact form. When you send the contact or sales form, we receive your name, email address, company (if you give it), topic and message by email through Resend. We use them only to reply to you and handle your request, and keep them in our inbox for as long as that takes.
• Sign-up attribution. Links from the website to the app's sign-up page carry campaign parameters (which page and button you came from, and any campaign name you arrived with). If you then create an account, we store those values with your account: source, medium, campaign, the website page and the date. We don't store your IP address or browser details for this, and nothing is kept in your browser. We use it only to see, in aggregate, which pages and campaigns lead to sign-ups.

Fluxo Flow uses a bring-your-own-key model: each workspace connects its own AI provider account (such as OpenAI, Anthropic or Google) in Settings → AI Providers. When you run an agent or AI step, the prompt and any attached context are sent to the provider you selected using your API key, so that data is processed under your own provider account and your agreement with that provider — including its retention and training settings. We don't pool customer AI traffic under a Fluxo Flow account and don't resell AI usage. For reference, the providers' current API terms say:

• Anthropic — see their Commercial Terms for how API inputs and outputs are retained.
• OpenAI — API requests are not used for training under their API data usage policy.

We use the following sub-processors to run the platform. None of them receive marketing-style data; each receives only what they need to perform their service:

• Clerk — sign-in, sessions and multi-factor authentication.
• Supabase — primary Postgres database and file storage.
• Stripe — payment processing, subscriptions and invoices. Card details go directly to Stripe; we never see them.
• Resend — transactional email delivery, website contact-form messages, and our newsletter mailing list (Resend Audiences).
• Vercel — application and website hosting, CDN and request logs, and cookieless analytics for our website (Vercel Web Analytics).
• Sentry (Functional Software, Inc.) — error monitoring for the app and website: error messages, stack traces, page paths and browser type. Emails, cookies, request contents, IP addresses and secrets are removed before a report is sent, and it records no sessions or screens.
• Cloudflare Turnstile (Cloudflare, Inc.) — bot protection on our website forms and when you create a workspace: it checks technical signals from your browser and your IP address to tell people from bots.
• Your own AI providers (for example OpenAI, Anthropic, Google or AWS Bedrock) — AI model inference, processed under the provider account and API key you connect (bring your own key). These providers act under your agreement with them, not ours.

The current sub-processor list is at https://flow.fluxosuite.com/docs/security. We will notify customers at least 30 days before adding a new one.

Some workspaces are created or managed by an agency or other business (a "Partner") that offers Fluxo Flow to its own clients under our White-Label Partner Agreement. For data in a Partner-managed workspace, the client is the controller, the Partner acts as the client's processor (or as a controller where it decides how the data is used), and we process the data on the Partner's behalf under our Data Processing Agreement.

Who to contact. If your workspace is managed by a Partner, contact the Partner first about your data and your rights. You can also reach us at privacy@fluxosuite.com; where the request is about the client's data, we may refer it to the Partner or the client.

What a Partner can see. Through its partner dashboard, a Partner sees:

• the workspace's name and number of members;
• run health, such as run and failure counts;
• the workspace's plan and billing state; and
• activity log entries about the Partner's own actions in the workspace.

A Partner does not see workflow content, credentials or run data, unless someone from the Partner is also a member of the workspace, or during a read-only support session. Support sessions last up to 1 hour, are only possible while the workspace owner allows support access (the owner can turn it off in Settings), and are recorded in the workspace's activity log.

Partner branding. We store the logos, colors, names, domains, sender details and postal address a Partner uploads, and show them to that Partner's clients in the app and in emails sent on the Partner's behalf.

• Active accounts — we retain everything for as long as the workspace exists.
• Deleted workflows and workspaces — removed from our active systems as soon as you delete them, including their run history.
• Run history — kept for as long as the workflow exists, so you can review past runs.
• Security and audit records — kept only as long as needed for security, fraud prevention and legal obligations.
• Workspace activity log — kept for the workspace plan's period (30 days on Free, up to 2 years on Elite, or as agreed for Enterprise), then deleted automatically; deleted with the workspace.
• Sign-up attribution — kept with your account and deleted with it.
• Newsletter — your address until you unsubscribe; then only a record that it unsubscribed.
• Contact-form messages — as long as needed to handle your request.
• Website analytics — aggregated statistics only; the visitor hash is discarded after 24 hours.
• Backups — our database provider keeps encrypted backups for a limited period; deleted data ages out of them on that schedule.

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, and to withdraw consent.

• Access + export — Settings → Danger Zone → Export workspace.
• Correction — most fields editable in your account profile and workspace settings.
• Deletion — Settings → Danger Zone → Delete workspace (7-day grace period).
• Other requests — email privacy@fluxosuite.com.

• TLS 1.2+ on all connections.
• Credentials and AI provider keys encrypted at rest (pgcrypto symmetric encryption).
• Row-level security in Postgres — workspaces cannot read each other's data.
• Optional 2FA via TOTP or SMS — strongly recommended for every account.
• An append-only activity log of workspace changes (credentials, roles, plans, workflows and more), visible to workspace owners and admins.

David Investment Group Inc. is headquartered at 10101 S. Roberts Rd. STE 202, Palos Hills, IL 60465, USA. If you access the platform from outside the United States, your data may be transferred to and processed in the United States or other countries where our sub-processors operate. For customers in the EEA, UK, and Switzerland, we rely on the Standard Contractual Clauses (SCCs) approved by the European Commission.

We keep tracking to the minimum needed to run the service:

• No session recording or replay. We don't record your screen, clicks, mouse movements or keystrokes.
• No advertising trackers or cross-site tracking. We don't use Google Analytics, tag managers, ad pixels or similar tools, and we don't sell or share your data for advertising.
• Cookieless website analytics only. Our website (getflow.fluxosuite.com) uses Vercel Web Analytics, which sets no cookies and collects no personal data (see "Our website" above). The app itself sets no analytics cookies and stores nothing in your browser for analytics; it only records first-party usage of in-app tips (see "Data we collect").
• Self-hosted fonts. Our fonts are served from our own servers (or are your device's system fonts), so loading a page makes no requests to Google Fonts or other font services.
• Only strictly necessary cookies: Clerk's authentication cookies keep you signed in; Stripe sets its own cookies on its checkout and billing pages to process payments and prevent fraud; and we set a cookie if a sign-up is blocked by the age check. Your theme and cookie-notice choice are stored in your browser's local storage.

Because these cookies are strictly necessary for the service you ask for, they can't be switched off in the app. You can block or delete cookies in your browser, but you won't be able to sign in without them. We set no third-party cookies of our own. Our website sets no cookies at all. If we ever add optional cookies or other analytics, we will update this policy and ask for your consent first where the law requires it.

We send two kinds of email. Service emails (receipts and invoices, payment problems, renewal reminders, security alerts, invitations, password and sign-in messages) are needed to run your account, so you can't opt out of them while your account is active. Non-essential emails (product updates, tips and other announcements) are optional.

• Every non-essential email has an unsubscribe link that works in one click, with no sign-in needed.
• You can choose which emails you get in Settings → Email preferences.
• Newsletter subscribers who don't have an account can unsubscribe from the link in any newsletter (see "Our website" above).
• Our emails include our postal address: 10101 S. Roberts Rd. STE 202, Palos Hills, IL 60465, USA.

Fluxo Flow is only for people aged 18 or older. We do not knowingly collect data from anyone under 18. If we learn that an account belongs to someone under 18, we close it and delete its data. If you believe a minor has created an account, email privacy@fluxosuite.com and we will close it.

Age verification. We ask for your date of birth when you sign up to confirm you meet the minimum age. We don't store your date of birth: we only record that eligibility was confirmed (and when). If someone doesn't meet the minimum age, we record that the account was blocked and set a strictly necessary cookie on that browser so the check can't simply be retried with a different date.

We may update this policy from time to time. Material changes trigger an email to every workspace owner at least 30 days before the new policy takes effect. The date at the top of this page always reflects the current version.

Questions, complaints, or data-subject requests: privacy@fluxosuite.com. For general support, see https://flow.fluxosuite.com/docs/support or email support@fluxosuite.com.