Privacy Policy

• Account and identity information, such as name, business email, organization, role, authentication information, and account settings.
• Billing and transaction information, such as plan, invoice status, payment references, subscription dates, add-ons, credits, and usage. Full payment card data is generally handled by our payment processor rather than stored by Flacron.
• Workspace and CRM data, including company records, contacts, leads, campaigns, opportunities, tasks, notes, messages, suppression records, consent metadata, meeting information, proposals, and customer lifecycle information.
• Connected-account data from services you authorize, such as Gmail, Microsoft 365, calendars, CRMs, ad networks, messaging platforms, and data providers, limited to the permissions granted and operational need.
• Communications content, including inbound and outbound emails, replies, drafts, attachments, SMS or WhatsApp content where enabled, chat messages, and support communications.
• Voice and call data where enabled, including numbers, call metadata, transcripts, summaries, dispositions, and recording references. Recording and transcription may require notice or consent under applicable law.
• Advertising and attribution data, including ad accounts, campaign settings, audiences, creatives, budgets, spend, conversion events, UTM parameters, lead forms, and downstream revenue outcomes.
• Super Intelligence and automation data, including prompts, generated drafts, scores, classifications, confidence values, model and prompt versions, approval events, workflow actions, and audit logs.
• Usage, device, security, and log information, such as IP address, browser, device information, timestamps, feature usage, API calls, provider errors, cookies, and diagnostic events.
• Information from licensed or authorized public/business data sources used for B2B prospecting, enrichment, verification, or intelligence, subject to provider rights and applicable law.

• Provide, secure, operate, maintain, and support the Platform.
• Authenticate users, enforce permissions, isolate tenants, detect abuse, and investigate security incidents.
• Power lead sourcing, enrichment, verification, scoring, segmentation, CRM, outreach workflows, inbox features, meeting scheduling, advertising, attribution, and reporting.
• Generate Super Intelligence-assisted drafts, recommendations, classifications, summaries, forecasts, campaign plans, and workflow suggestions.
• Process subscriptions, invoices, credits, refunds, add-ons, usage, and service entitlements.
• Communicate service, security, billing, compliance, and support notices, and send marketing communications where permitted.
• Improve product performance and reliability using aggregated, de-identified, or otherwise lawfully processed information.
• Comply with legal obligations, enforce agreements, preserve suppression and consent records, and protect rights and safety.

For personal information that a customer uploads, imports, syncs, or directs FLA to process on its behalf, the customer generally determines the purposes and means of processing and is responsible for lawful collection, notice, consent or other legal basis, recipient eligibility, and instructions. Flacron acts as a processor or service provider to the extent required by applicable law and contractual terms. For account administration, billing, security, fraud prevention, product operations, and our own business records, Flacron may act as an independent controller or business.

FLA is designed for business-to-business workflows, but B2B contact information can still be personal information. Customers must use prospect data only where they have a lawful basis and must honor opt-outs, suppression records, provider restrictions, local marketing laws, and applicable privacy rights. FLA does not confer permission to contact any person merely because data is available through the Platform.

Customers using SMS, WhatsApp, voice, call recording, or automated calling features are responsible for obtaining any legally required consent, honoring do-not-call and opt-out requirements, providing mandated disclosures, observing quiet hours, and complying with applicable telecommunications and recording laws. Flacron may require evidence of consent or disable features where legal or provider requirements are not satisfied.

When a customer connects an advertising platform, FLA may process audience definitions, customer lists, conversion events, campaign data, and related performance information under the customer’s instructions. Customers are responsible for lawful audience creation, custom-audience permissions, sensitive-category restrictions, platform policy compliance, required notices, and any consent needed for tracking or remarketing technologies.

We may use third-party Super Intelligence providers to process content and generate outputs. We select providers and configurations based on product requirements, security, commercial terms, and available controls. Customers should not submit information they are not authorized to process. Automated scores and recommendations are designed to support human business decisions and should not be used as the sole basis for decisions with legal or similarly significant effects on individuals.

• Service providers and subprocessors that support hosting, Super Intelligence, email, telecom, analytics, billing, customer support, security, data processing, and product operations.
• Connected third-party platforms when you direct us to transmit, synchronize, publish, send, or retrieve information.
• Professional advisers, auditors, insurers, financing parties, or acquirers subject to appropriate confidentiality or transaction safeguards.
• Government authorities, regulators, courts, or other parties when required by law or reasonably necessary to protect rights, safety, security, or prevent fraud and abuse.
• Other workspace users according to roles, permissions, assignments, and collaboration settings.

We do not sell personal information in the ordinary meaning of exchanging it for money. Certain advertising or analytics activities may constitute "sharing," "targeted advertising," or similar regulated activity under some laws; where applicable, we will provide required choices.

We retain information for as long as reasonably necessary to provide the Services, fulfill contracts, comply with legal obligations, resolve disputes, enforce agreements, maintain security and auditability, and preserve suppression, consent, unsubscribe, billing, and compliance evidence. Customer-configurable retention settings may apply to messages, recordings, visitor signals, Super Intelligence drafts, and other content. Some records may remain in backups for a limited period after deletion.

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, tenant isolation, encryption in transit, encryption at rest where appropriate, managed secrets, logging, backups, and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Information may be processed in countries other than where you live. Where required, we use legally recognized transfer mechanisms and contractual protections. Customers remain responsible for verifying whether their use of FLA is lawful in each target jurisdiction.

Depending on your jurisdiction, you may have rights to request access, correction, deletion, portability, restriction, or objection; to opt out of certain sale, sharing, targeted advertising, or profiling; or to withdraw consent. Rights may be subject to legal exceptions and identity verification. Requests may be sent to contact@flacronenterprises.com.

FLA is a business platform and is not directed to children. We do not knowingly offer accounts to children under 13, or a higher minimum age where local law requires. Customers must not use FLA to unlawfully target children or collect children’s data.

We may update this Privacy Policy periodically. Material changes will be communicated through the Platform, email, or another reasonable channel where required. Continued use after an effective update constitutes acceptance to the extent permitted by law.