1. Information we collect
We collect information in three ways:
Information you provide directly
- Account details such as your name, work email, company, and role.
- Content you submit through forms (demo requests, contact, newsletter).
- Billing details processed by our payment provider; we do not store full card numbers.
- Support communications and feedback you send to us.
Information collected automatically
- Device and browser information (type, OS, language, screen size).
- Log data such as IP address, referring URL, pages viewed, and timestamps.
- Product usage events when you use the Flowstate AI application.
- Cookies and similar technologies, as described in our Cookie Policy.
Information from third parties
- Authentication providers when you sign in with single sign-on.
- Integrations you connect (e.g. Jira, GitHub) — limited to the scopes you grant.
- Enrichment data from business contact databases used for sales outreach.
2. How we use information
- Provide, secure, and improve the Flowstate AI product and website.
- Respond to demo requests, support tickets, and other enquiries.
- Send transactional emails (account, billing, security notices).
- Send marketing communications you have opted into; you can unsubscribe at any time.
- Detect, investigate, and prevent abuse, fraud, and security incidents.
- Comply with legal obligations and enforce our terms.
3. Legal bases (EEA / UK)
If you are in the European Economic Area or United Kingdom, we rely on the following legal bases: performance of a contract (to deliver the service), legitimate interests (to operate, secure, and improve the service), consent (for non-essential cookies and marketing), and legal obligation (to comply with applicable laws).
4. How we share information
We do not sell your personal information. We share it only with:
- Service providers (cloud hosting, analytics, email delivery, customer support, payments) under data processing agreements.
- Integrations you explicitly connect, scoped to what you authorise.
- Acquirers in the event of a merger, acquisition, or asset sale, with continued protection of your information.
- Authorities when required by law, subpoena, or to protect rights and safety.
5. International transfers
Flowstate AI is headquartered in the United States and processes data in the US and EU. Where we transfer personal data out of the EEA or UK, we rely on Standard Contractual Clauses or another lawful transfer mechanism.
6. Data retention
We retain personal information for as long as needed to provide the service, comply with our legal obligations, resolve disputes, and enforce agreements. Marketing data is retained until you opt out. Product data is retained per your workspace settings and our customer agreement.
7. Your rights
Depending on where you live, you may have the right to:
- Access, correct, or delete your personal information.
- Object to or restrict certain processing.
- Receive a portable copy of your data.
- Withdraw consent at any time (without affecting prior processing).
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, email privacy@flowstate.ai. We respond within 30 days.
8. Security
We use encryption in transit and at rest, least-privilege access controls, and continuous monitoring. Read more on our Security and Trust pages.
9. Children
Flowstate AI is a B2B product not directed to children under 16, and we do not knowingly collect personal information from them.
10. Changes to this policy
We may update this policy from time to time. Material changes will be announced via the product or email. The “Last updated” date at the top of this page indicates the most recent revision.
11. Contact us
Flowstate AI, Inc. — Attn: Privacy
548 Market Street, PMB 41273, San Francisco, CA 94104, USA
privacy@flowstate.ai