Privacy Policy

1. Information We Collect

We collect information necessary to provide AI consulting, implementation, workflow automation, and AI system services:

• Business information (name, address, phone, email, services offered)
• Call recordings and transcripts from AI-handled calls
• Lead contact information (name, phone, email) captured during calls
• Appointment and scheduling data
• SMS message content
• Website analytics (via Plausible, cookieless and GDPR-compliant)
• Marketing attribution cookies on flowchainlabs.com (ad-platform pixel cookies used to measure which ad campaigns drive assessment bookings; hashed email and phone are forwarded to the ad platform server-side to deduplicate browser events). You can disable these by enabling tracking-protection in your browser or installing a privacy extension.

2. How We Use Your Data

• Provide and improve AI implementation, workflow automation, and AI system services
• Schedule appointments and manage leads on your behalf
• Send transactional SMS and email communications
• Generate analytics and reports for your dashboard
• Comply with legal obligations (TCPA, CAN-SPAM)

3. Data Storage & Security

Your data is stored on SOC 2 Type II certified infrastructure with row-level security ensuring clients can only access their own data. All data is encrypted in transit (TLS) and at rest. Payments are processed through a PCI-DSS Level 1 certified payment processor. We never store credit card numbers.

4. Data Sharing

We do not sell your data. We share data only with sub-processors necessary to deliver our services. By category:

• Voice AI infrastructure provider: speech-to-text, text-to-speech, and call handling
• Telecommunications provider: SMS delivery and phone routing
• Calendar and scheduling provider: appointment coordination
• Payment processor: PCI-DSS Level 1 certified, payment authorization only
• Transactional email provider: receipts and notifications
• Database and authentication provider: SOC 2 Type II certified, US-region hosting
• Marketing analytics and ad-attribution provider: campaign attribution and audience matching for marketing on flowchainlabs.com (data is hashed before forwarding)

Our current sub-processor list (with vendor names, locations, and the data each handles) is available on request to privacy@flowchainlabs.com. We notify customers of material sub-processor changes before they take effect.

5. TCPA Compliance

We comply with the Telephone Consumer Protection Act. SMS communications honor opt-out requests immediately (reply STOP). We do not send messages during quiet hours (9 PM to 8 AM local time). Consumers can opt out at any time.

6. Data Retention

We retain your data only as long as needed to deliver the service, meet legal and tax obligations, and resolve disputes. Upon service cancellation, your account data is retained for 90 days then permanently deleted, unless a longer period is required by law. You may request earlier deletion at any time, subject to records we are legally required to keep.

7. Your Rights

Regardless of where you live, you may exercise the following rights over your personal data by contacting us:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your data (subject to legal retention requirements)
• Receive a portable copy of your data in a common machine-readable format
• Object to or restrict certain processing
• Withdraw consent at any time, where processing is based on consent

We respond to verified requests within the timeframe required by applicable law (generally 30 to 45 days). We do not charge a fee to exercise these rights, except where a request is manifestly unfounded, excessive, or repetitive, as permitted by law. We never discriminate against you for exercising them.

8. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you the right to:

• Know what categories of personal information we collect, use, and disclose
• Request access to and deletion of your personal information
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information
• Limit the use of sensitive personal information
• Not be discriminated against for exercising any of these rights

We do not sell your personal information for money. We may "share" hashed identifiers (such as email and phone) with advertising partners for cross-context behavioral advertising and measurement, as "share" is defined under the CPRA and described in Section 4. To opt out of this sharing, email privacy@flowchainlabs.com with the subject "Do Not Share," or enable tracking protection in your browser. To exercise any other California right, email the same address. You may use an authorized agent to submit a request on your behalf.

9. GDPR & International Users

If you are located in the European Economic Area, the United Kingdom, or another region with data protection laws, you have the rights described in Section 7 under the GDPR or your local equivalent. Our legal bases for processing are: performance of a contract (to deliver our services), legitimate interests (to operate and improve the business), consent (for marketing cookies and communications you opt into), and legal obligation. We process and store data in the United States. Where we transfer personal data internationally, we rely on appropriate safeguards such as Standard Contractual Clauses. You have the right to lodge a complaint with your local supervisory authority.

10. Children’s Privacy

Our services are intended for businesses and are not directed to children. We do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you directly. Your continued use of our services after changes take effect constitutes acceptance of the revised policy.

12. Contact

For privacy inquiries or to exercise any of the rights above, contact us at privacy@flowchainlabs.com or hello@flowchainlabs.com. FlowChainLabs LLC is based in Dallas, Texas, USA.