Flowdexx AI (“Flowdexx,” “we,” “us,” or “our”) provides an embeddable AI-powered chat widget platform for websites (“Service”). This Privacy Policy explains how we collect, use, and protect information when you use our dashboard (“Customers”) and when end users interact with a Flowdexx chat widget embedded on a Customer's website (“Visitors”).
1. Information We Collect
From Customers (account holders):
- Account information: name, email address, password (hashed), company/workplace name
- Billing information (processed via our payment provider; we do not store full card numbers)
- Website configuration data: domain names, widget customization settings, knowledge base content you upload
- Usage data: pages visited in the dashboard, feature usage, API key activity
From Visitors (end users of the embedded widget):
- Chat messages and conversation content submitted to the widget
- Contact details voluntarily provided during a conversation (e.g., name, email, phone number) if the Customer's widget is configured to collect leads
- Technical data: IP address, browser type, device type, referring page, timestamp
2. How We Use Information
We use collected information to:
- Operate, maintain, and improve the Service
- Generate AI responses via third-party AI providers (see Section 3)
- Provide Customers with conversation transcripts, analytics, and lead data
- Send account-related communications (billing, security alerts, service updates)
- Detect, prevent, and address fraud, abuse, or technical issues
- Comply with legal obligations
3. Third-Party Processing
Chat messages are processed through Google's Gemini API to generate AI responses. Depending on the conversation memory mode a Customer configures for their site (stateful or stateless), conversation history may be retained temporarily to provide contextual responses, subject to retention limits set by the Customer or by default platform settings.
We also use cloud hosting and database infrastructure (Firebase/Firestore, Vercel), payment processing, email delivery, and analytics tools who process data on our behalf under their own data protection terms.
We do not sell personal information to third parties.
4. Data Retention
Customer account data is retained for as long as the account is active, plus a reasonable period afterward for legal and backup purposes.
Visitor conversation data is retained according to the retention settings configured by the Customer for their site, or our default retention period if none is set. Customers are responsible for configuring retention in line with their own legal obligations to their Visitors.
Customers may request deletion of their account and associated data by contacting privacy@flowdexx.com.
5. Data Sharing
We share data only with:
- The Customer whose widget a Visitor interacted with (transcripts & leads visible in Customer dashboard)
- Service providers who process data on our behalf, under confidentiality and data protection obligations
- Authorities, where required by law, subpoena, or to protect rights, property, or safety
6. Data Security
We implement industry-standard technical and organizational measures (encryption in transit, access controls, authenticated API access) to protect data. No system is completely secure, and we cannot guarantee absolute security.
7. Your Rights
Depending on your jurisdiction, you may have rights to access, correct, delete, export, or restrict processing of your personal data. Customers can exercise most of these rights directly within the dashboard. Visitors who wish to exercise these rights regarding data submitted through a widget should contact the website operator (our Customer) directly, or contact us at privacy@flowdexx.com and we will route the request accordingly.
8. Children's Privacy
The Service is not directed at children under 13 (or the relevant minimum age in your jurisdiction), and we do not knowingly collect personal information from children.
9. International Data Transfers
Data may be processed in countries other than your own, including the United States, where our infrastructure and sub-processors operate. Where required, we rely on appropriate safeguards for such transfers.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified via the dashboard or by email to Customers. Continued use of the Service after changes take effect constitutes acceptance.
11. Contact Us
Questions about this Privacy Policy can be directed to: privacy@flowdexx.com
Flowdexx AI Inc. • San Francisco, CA