Privacy Policy

1. Introduction

This Privacy Policy explains how Floworks Solutions Private Limited and One Floworks Technologies, Inc. (collectively "Floworks", "We", "Us", or "Our") collect, use, store, and protect personal data when you visit www.floworks.ai or use the Floworks Platform. By using our Website or Platform, you consent to the data practices described in this Privacy Policy. If you do not agree, please do not use our Website or Platform.

2. Data We Collect

2.1 Information You Provide Directly

• Name, job title, company name, and email address when you register, book a demo, or contact us.
• Payment information (processed and stored securely by Stripe; Floworks does not store card details).
• Content you upload or submit to the Platform, such as prospect lists, ICP definitions, or campaign materials.
• Communications and correspondence when you contact our support team.

2.2 Information Collected Automatically

• IP address, browser type, device type, operating system, and referring URL.
• Pages visited, time spent on pages, clicks, and other interaction data via Google Analytics.
• Log files generated during your use of the Platform (standard hosting analytics).
• Cookies and similar tracking technologies (see Section 7 below).

2.3 Information from Third-Party Integrations

If you connect your account to third-party services (e.g., Google Workspace, LinkedIn, CRM tools), Floworks may receive limited data from those services solely to deliver the requested functionality. Floworks does not retain data obtained through Third-Party APIs to develop, improve, or train generalized AI or machine learning models. Such data is used only to provide the specific services you request and is discarded once those services are completed.

3. How We Use Your Data

Floworks uses your data for the following purposes:

• To provide, operate, and improve the Platform and Services.
• To process payments and manage your subscription or service agreement.
• To personalize your experience on the Platform.
• To communicate with you about your account, new features, updates, or promotional offers (you may opt out at any time).
• To respond to your inquiries and provide customer support.
• To comply with legal obligations and enforce our Terms.
• To conduct security monitoring, fraud detection, and auditing.
• To analyze usage trends and improve the performance of our Platform (via Google Analytics).

4. Legal Basis for Processing

Where applicable, Floworks processes personal data on the following legal bases:

• Contractual necessity — to perform the contract we have with you or to take steps prior to entering into a contract.
• Legitimate interests — for analytics, security, fraud prevention, and improving our Services.
• Consent — where you have given explicit consent (e.g., marketing communications).
• Legal obligation — where processing is necessary to comply with applicable law.

5. Data Security

Floworks is ISO 27001, SOC 2 Type 2, and Google CASA Tier 2 certified. We employ industry-leading security measures to protect your data, including:

• End-to-end encryption of data in transit and at rest.
• Strict access controls and role-based permissions.
• Regular penetration testing and security audits.
• Incident response protocols to address data breaches promptly.

In the event of a data breach that affects your personal data, Floworks will notify you without undue delay and take immediate steps to mitigate any harm.

6. Data Retention

Floworks retains personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by applicable law.

• Account and profile data is retained for the duration of your active subscription and deleted within 15 days of account termination, subject to legal retention requirements.
• For SOC 2 compliance, certain security and access logs may be retained for up to 14 days post-termination before deletion.
• Payment records are retained as required by financial regulations.

7. Cookies

Floworks uses cookies to enhance your experience on the Website. The following types of cookies are used:

• Essential Cookies: Required for the Website to function properly (e.g., session management, login).
• Analytics Cookies: Used via Google Analytics to understand how visitors interact with the Website. This data is aggregated and anonymized where possible. You can opt out of Google Analytics tracking by using the Google Analytics Opt-out Browser Add-on.

You may control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Website.

8. Data Sharing and Third Parties

Floworks does not sell, rent, or trade your personal data. We may share your data with trusted third parties only in the following circumstances:

• Service providers who assist us in delivering the Platform (e.g., Stripe for payment processing, Google Analytics for analytics, cloud hosting providers). These parties are contractually bound to process your data only as instructed by Floworks and in compliance with applicable data protection laws.
• Legal authorities when required to comply with a court order, subpoena, or applicable law.
• In connection with a merger, acquisition, or sale of assets, where your data may be transferred to a successor entity (you will be notified in advance).

All third-party service providers are evaluated for data security compliance before being engaged.

9. International Data Transfers

Floworks operates globally through its Indian entity (Floworks Solutions Private Limited) and its US entity (One Floworks Technologies, Inc.). Your data may be transferred to and processed in India, the United States, or other countries where our service providers operate.

Where data is transferred internationally, Floworks ensures appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or equivalent mechanisms as required by applicable law.

10. Your Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to request correction of inaccurate or incomplete data.
• Right to erasure — to request deletion of your personal data (subject to legal retention obligations).
• Right to restriction of processing — to request that we limit how we use your data.
• Right to data portability — to receive your data in a structured, commonly used format.
• Right to object — to object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at business@floworks.ai. We will respond to your request within 30 days.

11. Children's Privacy

The Platform is not directed at children under the age of 13. Floworks does not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at business@floworks.ai and we will take steps to delete such data.

12. Third-Party Links

The Website may contain links to third-party websites. Floworks is not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Privacy Policy

Floworks may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of material changes by posting the updated policy on the Website and updating the "Last Updated" date. Your continued use of the Website or Platform after any changes constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Floworks Solutions Private Limited
One Floworks Technologies, Inc.
Email: business@floworks.ai
Website: www.floworks.ai