Privacy Policy

FlowCore AI's Responsibilities and Roles

FlowCore AI is the controller of your Personal Data as described in this Privacy Policy unless otherwise stated. However, this Privacy Policy does not apply to the extent that we process Personal Data as a processor or service provider on behalf of our customers, including where we offer various cloud products and services. In such cases, our customers, not FlowCore AI, control whether they provide you with a subscription to our platform and what information they submit to our service. This information may include contact information, professional information, or other information a customer chooses to submit. Agreements between our customers and us govern any use of this content by FlowCore AI.

For situations where a customer uses our cloud products and services and is the controller of Personal Data, please get in touch with the respective customer directly for detailed privacy information. FlowCore AI is not responsible for our customers' privacy or data security practices, which may differ from those set forth in this Privacy Policy. If you wish to exercise any rights under applicable data protection laws regarding Personal Data submitted to us by or on behalf of a customer, please inquire with the applicable customer directly. If you wish to make your request directly to FlowCore AI, please provide us with the name of the customer who submitted your Personal Data to us. We will refer your request to that customer and support them as needed in responding to your request within a reasonable timeframe.

Personal Data We Collect and Data Sources

a. Covered Data Processing Activities

This Privacy Policy pertains to the handling of Personal Data that we gather through the following means, as elucidated in this section:

• When you furnish information to us.
• When you engage with our websites and digital platforms.
• When you attend events or visit our premises.
• When other sources supply us with your data, as described in more detail below.

b. Information You Provide To Us

We collect various types of information about you based on our current practices, including practices from the past 12 months. The following categories of information are collected:

• Contact and Professional Data: This includes contact and professional information about you that you provide to us in person, through our websites, or through communications. This can be when you register for events, download content, or visit our offices. Contact data may include your name, telephone number, email address, and mailing address, while professional data may include your job title, the organization you work for, and your industry. If you attend an event, we may also receive your contact and professional details when you scan your attendee badge or provide us with your business card or other methods.
• Biographical, Community, and Support-related Data: We may collect various types of biographical, community, and support-related information about you through our community support forums, help center, and other interactive features. This can include biographical information like your occupation, organization name, and areas of expertise. You may also provide us with user-generated content or feedback, participate in surveys, contests, promotions, sweepstakes, activities, or events. When you seek customer support, we may ask for your contact information and a summary of the problem you are experiencing.
• Job Applicant Data: When you apply for a job with FlowCore AI, you may provide us with your contact and professional information, including your resume and work history. You may also provide us with sensitive information like your Social Security Number, passport, or other government identifier, as well as your racial or ethnic origin or other Personal Data related to your job application.

c. Personal Data We Collect From Other Sources

During our business operations and in the 12 months preceding the effective date of this Privacy Policy, we receive Personal Data and other information from third-party sources for business or commercial purposes. This information usually falls into three categories:

• Business contact information: This includes Personal Data such as your name, job title, business email, phone number, and address, as well as information about your company and social media profiles like LinkedIn. We receive this information from third-party sources for marketing and business intelligence purposes, including identifying potential new customers, analyzing business opportunities, and providing our audience with relevant content and advertising. We may combine this information with other non-personal and Personal Data we possess or that you have provided to us to analyze business opportunities or send you tailored content.
• Third-party platform usernames and identifying information: We receive details about you, such as your username or pull requests, from third-party platforms for various business purposes like program management or technical reasons. For example, suppose you participate in an open-source project or our public bug bounty program. In that case, we may receive details about you to help manage your participation and provide you with updates.
• Job applicant data: If you apply for a job at FlowCore AI, we may receive Personal Data about you from third-party sources for business purposes, such as thorough background checks, publicly available sources like social media accounts, feedback about your application and interviews, and other third parties that may provide feedback about your application.
• As a processor or service provider, FlowCore AI may also receive Personal Data about you to perform its obligations under its contract with a third party. FlowCore AI partners may also share your business contact information with FlowCore AI as part of their recommendation to your company to become a FlowCore AI customer. Finally, suppose FlowCore AI is interested in partnering with, acquiring, investing in, or partnering with, acquiring, or investing in your employing or retaining the company. In that case, FlowCore AI may receive Personal Data about you through the (potential or completed) transaction for business purposes.

Cookies, Device Data, and Third-Party Services

a. Our website does not track you

Our website does not use analytics, advertising, social media, or other tracking cookies, and it does not use pixels, beacons, fingerprinting, or similar technologies to track visitors. It does not set cookies of its own or store information on your device, and it does not load analytics or advertising services from other companies. Our pages load their fonts, scripts, and images from our own domain.

Because of this, our website does not show a cookie banner. If we ever add a technology that needs your consent, we will ask for your consent before it is loaded, and we will update this Privacy Policy first.

b. Technical data when you visit our website

Like every website, ours is delivered over the Internet, in our case through Amazon Web Services (Amazon S3 and Amazon CloudFront). To send you the pages and keep the website secure, this infrastructure necessarily processes technical data such as your Internet Protocol (IP) address, browser type, device type, and the time and address of each request. We use this data only to deliver the website and keep it secure.

c. The contact form (HubSpot)

The Contact Us page contains a form provided by HubSpot, Inc., which acts as our service provider. When the form loads, your browser connects to HubSpot's servers, and HubSpot may process technical data such as your IP address and browser details, as well as error and performance information, to deliver the form and protect it from misuse. What you enter in the form is sent to HubSpot, which stores it for us in its European data center, and we use it as described in this Privacy Policy. HubSpot's own use of data is described in its privacy policy.

When the form loads, HubSpot's content delivery network sets one cookie, "__cf_bm". It is used only to tell people from automated bots, it is strictly necessary for the form to work securely, it expires after about 30 minutes, and it is not used for tracking or advertising. We do not install HubSpot's tracking code on our website, so HubSpot does not use cookies on our website to follow your visits or build a profile of you. The form is loaded only on the Contact Us page; no other page of our website connects to HubSpot.

d. Data Collected from FlowCore AI Products and Ancillary Products

This passage describes the collection and use of data by FlowCore AI, a service provider that offers products that collect customer and usage data. The company uses this data to improve its products and services and better understand customer behavior to create new features and provide threat-related insights. Ancillary Data, including account usernames, user-agent, browser versions, URLs visited, usage and click activities, login history, identity confirmation, and device data, is collected and used with FlowCore AI products to improve security and enhance the customer experience. The FlowCore AI browser plugin is an example of a product that collects Ancillary Data, including details about the user's login session, IP address, user agent, and website address.

It's worth noting that if you want to opt out of the Ancillary Data collection through the FlowCore AI browser plugin, you should refer to the section on Information Choices provided by FlowCore AI. Additionally, you may want to review FlowCore AI' privacy policy to understand better how your data is collected, used, and shared.

e. Email

Marketing emails we send may contain beacon technology (a tiny image) that lets us see whether an email was opened or a link in it was clicked. This applies to emails only; our website does not use beacons.

How We Use Personal Data

FlowCore AI utilizes the Personal Data it gathers in various ways, depending on your method of communication with us, how you engage with our websites, and any stated preferences you have conveyed to us. Generally, we use your Personal Data to operate our business and conduct our regular operations. Apart from the purposes mentioned in this Privacy Policy, we may also employ your Personal Data to carry out the subsequent activities, which we have done so in the last 12 months leading up to the effective date of this Privacy Policy:

FlowCore AI uses Personal Data, including contact data, Ancillary Data, and metadata, for various purposes related to our products and services. We may send you transactional communications, notices, updates, security alerts, and administrative messages regarding our products and services that may be useful to you and your organization. We aim to help you use our products and services effectively and provide tailored communications based on your activity and interactions with us.

We also use your Personal Data to support safety and security. This includes verifying accounts and activity, monitoring suspicious or fraudulent activity, and identifying violations of policies regarding the use of our products and services. We may also process Personal Data for security reasons, such as registering visitors to our offices and managing non-disclosure agreements that visitors may be required to sign.

Furthermore, we may use your Personal Data to market and promote our products and services. This includes sending promotional communications that may be of specific interest to you and your organization based on your usage of our products and services. We may send these communications by email and display FlowCore AI' marketing communications on other companies' websites and applications and third-party platforms like Facebook, Twitter, and Google. FlowCore AI also uses communication to encourage engagement and maximize the benefits you and your organization can gain from our products and services. This includes information about new products and features, survey requests, newsletters, and events that may interest you and your organization.

Additionally, we may occasionally run contests or other special promotions. If you register for one, we may process your Personal Data, such as contact information, biographical information, and contract-related data, to perform our contract with you. We may also use the Personal Data collected in these contests and promotions to send you promotional material about FlowCore AI or our partners.

When processing payments, we use Personal Data such as contact information, contract-related data, financial information, biographical information, and payment information to process payments to the extent that doing so is necessary to complete a transaction and perform our contract with you or your organization.

Finally, when you apply for a job with FlowCore AI, we process your Personal Data, such as contact, job applicant, and biographical data, to assess your application and to evaluate and improve the recruitment system, our application tracking, and recruitment activities.

FlowCore AI also uses your Personal Data to communicate with you regarding your job application or opportunities within our company. We may use your Personal Data to send you new hire and employee experience information and verify your information, including through reference checks and background checks where allowed by law.

In addition, we may use your Personal Data for other legitimate interests, such as to comply with legal requirements, protect our legal rights and interests, and protect against misuse or abuse of our products and services. This may include using your Personal Data in connection with legal claims, compliance, regulatory and audit functions, and protecting personal property or safety.

If we process your Personal Data for a purpose not listed above, we will obtain your consent before doing so. For example, we may request your permission to publish testimonials or featured customer stories to promote our products and services.

Legal Bases for Processing Personal Data (for European Economic Area Individuals)

Suppose you are an individual in the European Economic Area (EEA). In that case, FlowCore AI collects and processes personal data by applicable EU laws and only where we have a legal basis for doing so. This includes situations where we need the data to provide their products and services, satisfy a legitimate interest, obtain your consent, or comply with a legal obligation.

If FlowCore AI is using your personal data based on your consent, you have the right to withdraw your consent at any time. If we use it based on a legitimate interest, you have the right to object to using your data for that purpose. However, in some cases, objecting may mean you can no longer use our products and services.

It's important to note that under the EU's General Data Protection Regulation (GDPR), individuals have several other rights related to their personal data, including the right to access their data, request that it be corrected or deleted, and restrict or object to its processing. If you have concerns about how FlowCore AI handles your personal data, contact us directly or seek advice from a legal professional.

Personal Data Shared by FlowCore AI

Service Providers.

It is important to note that sharing Personal Data with service providers and partners/resellers may involve transferring data to countries where privacy laws may differ from those in your home country. It is essential to carefully review the privacy statements of these third parties and ensure that appropriate safeguards are in place to protect your data.

Furthermore, as a user, you have the right to understand how your data is being used and to control your personal data sharing. Therefore, reviewing the company's privacy policy to collect your information is essential. If you have any concerns, you should contact the company to seek clarification or make any necessary changes.

It is essential to understand that while sharing Personal Data with third parties is sometimes necessary for business purposes, it also carries certain risks. It is critical to carefully review the privacy policies of companies and third-party service providers to ensure that appropriate safeguards are in place to protect your data.

Furthermore, it is essential to note that in some cases, such as when responding to valid legal requests, companies may be obligated to share your Personal Data without your consent. However, they should only share the minimum information necessary to comply with the request.

As a user, you have the right to understand how your data is being used and to control the sharing of your Personal Data. Therefore, reviewing the company's privacy policy to collect your information is essential. If you have any concerns, you should contact the company to seek clarification or make any necessary changes.

In summary, it is essential to carefully review the privacy policies of companies and third-party service providers to ensure that appropriate safeguards are in place to protect your data. Users should also be aware of their rights and can control sharing of their Personal Data.

Recruitment Data.

It is essential to understand that when applying for a job, you voluntarily share your Personal Data with the company, and they may need to share it with third parties for business purposes. However, it is essential to carefully review the company's privacy policy to understand how they handle your Personal Data and to ensure that appropriate safeguards are in place to protect your data.

When sharing your Personal Data with affiliate companies, service providers, or government authorities, the company should only share the minimum necessary information to accomplish the intended purpose. Additionally, the company should have appropriate agreements with third-party service providers to protect your Personal Data.

As an applicant, you have the right to understand how your data is being used and to control the sharing of your Personal Data. Therefore, it is essential to review the company's privacy policy and ask any questions or raise concerns you may have.

In summary, when applying for a job, you voluntarily share your Personal Data, and the company may need to share it with third parties for business purposes. It is essential to review the company's privacy policy to understand how they handle your Personal Data and to ensure that appropriate safeguards are in place to protect your data.

FlowCore AI' Security Measures

FlowCore AI places great importance on security and has implemented a comprehensive information security program that includes industry-standard administrative, technical, and physical safeguards to prevent unauthorized access to Personal Data. However, it's important to note that no security system can be 100% perfect. The Internet's inherent nature means we cannot guarantee absolute protection against intrusion or unauthorized access to data, including Personal Data. It's your responsibility to safeguard your password(s) and maintain the security of your devices to ensure the safety of your information.

International Data Transfers

Your Personal Data may be processed outside of your jurisdiction and in countries that do not have an adequacy decision by the European Commission or your local legislature/regulator. These countries, such as the European Economic Area, may provide different data protection than your jurisdiction. However, we take steps to ensure that the recipient of your Personal Data provides adequate data protection. For example, if required, we may enter into standard contractual clauses approved by the European Commission for data transfer (as outlined in Article 46 of the General Data Protection Regulation), or we may seek your prior consent for international data transfers.

Children

FlowCore AI's websites are not intended for children, and we do not knowingly collect Personal Data from children under 13. If you are a parent or guardian and suspect that your child has provided us with Personal Data without your consent, please get in touch with us through the "Contact Us" section below. We will take prompt action to delete such information from our systems. It's important to note that FlowCore AI has not knowingly sold Personal Data, including data of minors under the age of 13 without affirmative authorization, to third parties in the 12 months before the effective date of this Privacy Policy.

How Long Does FlowCore AI Keep Your Data?

We retain your Personal Data for a duration that aligns with the original purpose of data collection or as required to adhere to legal obligations, resolve disputes, and enforce our agreements. The retention period for Personal Data is decided by assessing the quantity, type, and sensitivity of the Personal Data that is being processed, the potential risk of harm that could result from unauthorized use or disclosure of the Personal Data, and whether we can fulfill the objectives of processing by utilizing alternative methods. Additionally, we consider relevant legal requirements, such as applicable statutes of limitation.

Information Choices

Your Privacy Choices

The preceding sections explain how we collect, use, and share your Personal Data. Here, we outline how you can unsubscribe, opt out, or adjust settings related to our processing of your Personal Data.

Direct Email Marketing: If you no longer wish to receive direct email marketing communications from FlowCore AI, click the "unsubscribe" button in our emails. Please note that you cannot unsubscribe from critical transactional emails that pertain to our Online Services, such as those related to security and your FlowCore AI account.

Direct Marketing via Phone or Postal Mailings: If you would like to withdraw from phone calls or marketing communications from FlowCore AI, please send us a notice requesting to do so at dpo at flowcore.ai.

Analytics and cookies. Our website does not use analytics tools or advertising cookies, so there is nothing to opt out of. The only cookie that can be set is the security cookie "__cf_bm" described above, which is strictly necessary for the contact form to work and expires after about 30 minutes. You can block or delete cookies at any time in your web browser settings. If you block that cookie, the contact form may not work, and you can email us at info at flowcore.ai instead.

Your European Privacy Rights

As a European Union data subject, you have rights under the General Data Protection Regulation to request information on how we collect, use, and disclose your Personal Data as a data controller to the extent applicable law allows.

Right to Access. You have the right to access your Personal Data held by us.

Right to Rectification. You have the right to correct any inaccurate Personal Data that we hold about you and, where necessary, to ensure that such data is complete and up-to-date, taking into account the purposes for which it was collected and processed.

Right to Erasure (or “Right to be Forgotten”). You have the right to have your Personal Data erased or deleted, also known as the "right to be forgotten," under certain circumstances outlined in applicable data protection laws.

Right to Restrict Processing. You have the right to restrict our processing of your Personal Data.

Right to Data Portability. You have the right to transfer your Personal Data when possible.

Right to Object. You have the right to object to the processing of your Personal Data that is carried out based on legitimate interests, including direct marketing activities, unless we have compelling legitimate grounds for the processing which override your interests, rights, and freedoms or if the processing is necessary for the establishment, exercise, or defense of legal claims.

Right Not to be Subject to Automated Decision-Making. You have the right not to be subjected to automated decision-making, including profiling, that produces legal effects or similarly affects you significantly. FlowCore AI does not currently engage in such practices on our websites or our products and services.

If you would like to make a request and exercise your rights described above, please send an email to dpo at flowcore.ai.

Your California Privacy Rights

If you are a resident of California, you have certain rights under the California Consumer Privacy Act of 2018 ("CCPA"), effective as of January 1, 2020. These rights include the right to know and request information on how we collect, use, disclose, and sell your Personal Data to the extent permitted by applicable law.

Right to Know About Personal Data Collected, Disclosed, or Sold. You have the right to request that we disclose what Personal Data we collect, use, disclose, and sell.

Right to Request Deletion of Personal Data. You have the right to request the deletion of your Personal Data collected or maintained by us as a business. Right to Opt-Out of the Sale of Personal Data. You have the right to opt out of the sale of your Personal Data by us as a business in the event we sell Personal Data.

Right to Non-Discrimination for the Exercise of Your Privacy Rights. You have the right not to receive discriminatory treatment by us for exercising your privacy rights conferred by the CCPA.

Authorized Agent. You may designate an authorized agent to request the CCPA on your behalf by us with a copy of your power-of-attorney document granting that right.

Financial Incentives. We do not provide any financial incentives tied to collecting, selling, or deleting your Personal Data.

If you want to exercise your rights as described above, email us at dpo at flowcore.ai. Our website does not share personal data with advertising or marketing third parties through cookies or similar technologies, so there is nothing to opt out of there.

We will make every effort to verify your identity before fulfilling your request. However, we will not respond to any requests about data we hold on behalf of our customers, as it is not reasonable for us to verify such information.

Contacting FlowCore AI

FlowCore AI welcomes your comments or questions regarding this Privacy Policy. Please get in touch with us at the following email address:

Email: dpo at flowcore.ai

Changes to the Policy

This Privacy Policy may be updated occasionally to reflect changes in our practices and comply with applicable laws and legal requirements. The company may also provide notice of material updates to users. It's essential for users to regularly review the Privacy Policy to stay informed about any changes that may affect them.