Privacy policy

Last updated: October 20, 2026

1. Information We Collect

We collect information necessary to provide AI consulting, implementation, workflow automation, and AI system services:

• Business information (name, address, phone, email, services offered)
• Call recordings and transcripts from AI-handled calls
• Lead contact information (name, phone, email) captured during calls
• Appointment and scheduling data
• SMS message content
• Website usage analytics through Vercel Web Analytics: the page viewed and when, and when someone clicks a link to schedule a strategy call, the site that sent you, your approximate location (country, region and city), and your device type, operating system and browser. It does not use cookies. Vercel tells visits apart with a hash of the request, which it discards after 24 hours. In your browser, before anything is sent, we cut the page address down to the page and any campaign tags, so a name, email or phone number in a link is never sent.
• Campaign details you choose to share when contacting or booking with us, such as the page or campaign that brought you here. We use the Meta Pixel to measure our ads and show them to people likely to find them useful. If your browser sends a Global Privacy Control signal, the pixel does not load.

Business AI assessment

The self-assessment calculates results in your browser. Answers and your business direction are saved on that device for up to seven days from your last change so you can resume. You can clear them using Start fresh or Clear these answers and start again. Downloading a report does not send the assessment to us. If you choose an available report-sharing form, we receive the answers, business direction, contact details, consent, and campaign attribution to prepare for the conversation. Booking is a separate action through our scheduling provider.

2. How We Use Your Data

• Provide and improve AI implementation, workflow automation, and AI system services
• Schedule appointments and manage leads on your behalf
• Send transactional SMS and email communications
• Generate analytics and reports for your dashboard
• Comply with legal obligations (TCPA, CAN-SPAM)

3. Data Storage & Security

Security controls depend on the specific services you use and the providers involved. If you need documentation for a particular control, contact us and we will share what applies to your engagement.

4. Data Sharing

We do not sell your data. We share data only with sub-processors necessary to deliver our services. By category:

• Voice AI infrastructure provider: speech-to-text, text-to-speech, and call handling
• Telecommunications provider: SMS delivery and phone routing
• Calendar and scheduling provider: appointment coordination
• Payment processors, used only to process payments.
• Transactional email provider: receipts and notifications
• Database and authentication providers, used to store account data and manage account access.
• Website analytics provider: aggregate information about how the website is used.

Our current sub-processor list (with vendor names, locations, and the data each handles) is available on request to privacy@flowchainlabs.com. If you have questions about the providers involved in your engagement, contact us.

5. TCPA Compliance

We comply with the Telephone Consumer Protection Act. SMS communications honor opt-out requests immediately (reply STOP). We do not send messages during quiet hours (9 PM to 8 AM local time). Consumers can opt out at any time.

6. Data Retention

We retain your data for as long as needed to deliver the service, meet legal and tax obligations, and resolve disputes, then delete or anonymize it. You may request earlier deletion at any time, subject to records we are legally required to keep.

7. Your Rights

Regardless of where you live, you may exercise the following rights over your personal data by contacting us:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your data (subject to legal retention requirements)
• Receive a portable copy of your data in a common machine-readable format
• Object to or restrict certain processing
• Withdraw consent at any time, where processing is based on consent

We respond to verified requests within the timeframe required by applicable law (generally 30 to 45 days). We do not charge a fee to exercise these rights, except where a request is manifestly unfounded, excessive, or repetitive, as permitted by law. We never discriminate against you for exercising them.

8. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you the right to:

• Know what categories of personal information we collect, use, and disclose
• Request access to and deletion of your personal information
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information
• Limit the use of sensitive personal information
• Not be discriminated against for exercising any of these rights

We do not sell your personal information for money. We use the Meta Pixel for advertising measurement. If your browser sends a Global Privacy Control signal, the pixel does not load. To opt out or ask about advertising data, email privacy@flowchainlabs.com with the subject "Do Not Share." To exercise any other California right, email the same address. You may use an authorized agent to submit a request on your behalf.

9. GDPR & International Users

If you are located in the European Economic Area, the United Kingdom, or another region with data protection laws, you have the rights described in Section 7 under the GDPR or your local equivalent. Our legal bases for processing are: performance of a contract (to deliver our services), legitimate interests (to operate and improve the business), consent (for marketing cookies and communications you opt into), and legal obligation. Data locations depend on the services and providers involved. Contact us for the locations and transfer arrangements that apply to your engagement. You have the right to lodge a complaint with your local supervisory authority.

10. Children’s Privacy

Our services are intended for businesses and are not directed to children. We do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you directly. Your continued use of our services after changes take effect constitutes acceptance of the revised policy.

12. Contact

For privacy inquiries or to exercise any of the rights above, contact us at privacy@flowchainlabs.com or hello@flowchainlabs.com. FlowChainLabs LLC is based in Dallas, Texas, USA.