Privacy Policy

Last updated: February 3, 2026

Overview

We respect your privacy. This policy explains what information we collect, why we collect it, and how we handle it when you use our platform to build chatbots.

Information we collect

The information we collect varies depending on how you use our service:

  • Account and contact information: Information you provide (e.g., email) when signing up, chatbot configuration settings, website URLs provided for crawling, and usage analytics.
  • Technical information: Device, browser, and interactions necessary to provide the service.

How we use information

We use the information we collect for the following purposes:

  • To provide and maintain your account, enable chatbot creation and management, process website content you submit, and communicate with you about updates, features, and support.
  • To secure our service, prevent abuse, debug technical issues, and comply with legal obligations.

We do not sell your personal data. Furthermore, we do not use your customer data or chatbot configurations to train our artificial intelligence models.

Sensitive information

When configuring chatbots, ensure you do not include sensitive data in knowledge base content or system prompts.

Analytics

We use minimal analytics to understand how our service is used and to improve functionality:

  • Dashboard analytics: We track usage of builder features, chatbot configuration activities, and deployment status to improve the platform experience.

We do not use marketing trackers. If you enable end-user identification or bring your own analytics for your chat users, your privacy and cookie policies apply as the data controller; we act as a processor.

Storage and retention

We store data in our application databases (e.g., Supabase). We retain account information, chatbot configurations, and related data while your account is active and for a reasonable period thereafter. We retain all data only as long as needed for the purposes described above or as required by law.

Data processors

We use trusted service providers to host and process data. These providers process data on our behalf under appropriate agreements.

  • Supabase (authentication, database, and storage)
  • Clerk (authentication and user management)
  • OpenAI (AI model inference and embeddings)
  • Google (Gemini) (AI model inference and embeddings)
  • Anthropic (AI model inference)
  • Perplexity (AI model inference and search)
  • Upstash (serverless redis KV store for caching)
  • Vercel (hosting and infrastructure)
  • AWS, GCP, Azure (cloud infrastructure and storage)

We reserve the right to change, add, or remove data processors without prior notice as necessary to operate and improve our service.

Your rights

Depending on your location, particularly if you are in the EEA, UK, or Switzerland, you have rights under data protection laws (such as GDPR), including:

  • The right to access, correct, or delete your personal data.
  • The right to restrict or object to certain types of processing.
  • The right to data portability.
  • The right to withdraw consent (where applicable).

You can manage your account data directly through the dashboard. To exercise these rights, please contact us.

Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes using encryption for data in transit and at rest, and enforcing strict access controls to our internal systems.

International Transfers

Our service is operated globally. To provide the service, we may transfer, store, and process your information in countries outside of the European Economic Area (EEA), United Kingdom, or Switzerland, including the United States.

When we transfer personal data, we ensure appropriate safeguards are in place, such as using Standard Contractual Clauses (SCCs) approved by the European Commission, to ensure your data remains protected according to applicable data protection laws.

Children's Privacy

Our Service is not directed to children under the age of 18. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us.

Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Service after such changes constitutes your acknowledgment of the modified policy.

Contact

Questions or requests? Email us at contact@flowagently.com.

Sealant AI AS, Bergen, Norway