← Back to Flowgent

Privacy Policy

1. Who We Are

Flowgent Technologies LLC ("Flowgent," "we," "us," or "our") operates the Flowgent platform, a cloud-based service management and client booking solution for field service businesses. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you use our website, platform, and related services (collectively, the "Service").

2. Information We Collect

Information You Provide Directly

• Business owner accounts: Name, email address, phone number, business name, business address, service type, and account credentials.
• Lead/booking submissions: When an end customer submits a booking request through a Flowgent-powered booking page, we collect: name, email address, phone number, service address, service type requested, preferred scheduling, and any notes or descriptions provided.
• Photos and attachments: Lead photos or documents uploaded through booking forms or the dashboard.
• Communications: Messages sent through our support channels.

Information Collected Automatically

• Usage data: Pages viewed, features used, session duration, and interaction patterns within the platform.
• Device and browser data: IP address, browser type, operating system, device type, and screen resolution.
• Log data: Server logs including access times, referring URLs, and error logs.

Information from Third-Party Services

• Authentication: We use Supabase Authentication. If you sign in via a third-party provider (e.g., Google), we receive your name and email address from that provider.
• Voice interactions: If a business uses our AI voice agent (powered by Vapi), call metadata (duration, timestamp, phone number) and transcriptions may be collected to process the booking request.

3. How We Use Your Information

We use personal information for the following purposes:

• Provide the Service: Process booking requests, route leads to the correct business, manage accounts, and deliver notifications.
• Communications: Send booking confirmations, appointment reminders, and service-related emails via Resend.
• Improve the Service: Analyze usage patterns to improve features, fix bugs, and optimize performance.
• Security: Detect and prevent fraud, abuse, and unauthorized access.
• Legal compliance: Comply with applicable laws, regulations, and legal processes.

We do NOT:

• Sell your personal information to third parties.
• Use your personal information for targeted advertising.
• Share end-customer data between different business tenants on our platform.

4. How We Share Your Information

We share personal information only in the following circumstances:

• With the business you booked: When you submit a booking request through a Flowgent-powered page, your contact information and service request details are shared with the business that operates that booking page. That business is the data controller for your booking data.

Service providers:

Provider	Purpose	Data Shared
Supabase	Database and authentication	Account data, booking data
Vercel	Web hosting and CDN	IP address, request logs
Vapi	AI voice agent	Phone number, call audio, transcriptions
Resend	Transactional email	Email address, email content
n8n	Workflow automation	Booking data for routing and notifications

• Legal requirements: When required by law, subpoena, court order, or to protect the rights, property, or safety of Flowgent, our users, or the public.
• Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Storage and Security

• Storage location: Your data is stored in the United States on Supabase (hosted on AWS) and Vercel infrastructure.
• Encryption: Data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
• Access controls: We use row-level security policies to ensure that each business tenant can only access their own data.
• Retention: We retain account data for as long as your account is active. Booking data is retained for 3 years after submission unless the business owner deletes it earlier. You may request deletion at any time.

6. Cookies and Tracking

We use minimal cookies necessary for the Service to function:

• Authentication cookies: Used to maintain your logged-in session. Essential for the Service. Cannot be disabled.
• Preference cookies: Used to remember your display preferences. Optional.

We do NOT use third-party advertising cookies, cross-site tracking cookies, or social media tracking pixels.

7. Your Rights Under Texas Law (TDPSA)

If you are a Texas resident, the Texas Data Privacy and Security Act (TDPSA) grants you the following rights:

• Right to know: You may request a copy of the personal information we hold about you.
• Right to correct: You may request correction of inaccurate personal information.
• Right to delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to opt out: You may opt out of the sale of your personal information (we do not sell personal information) and opt out of targeted advertising (we do not engage in targeted advertising).
• Right to data portability: You may request your data in a commonly used, machine-readable format.

To exercise any of these rights, contact us at privacy@flowgentech.com. We will respond within 45 days.

8. Your Rights Under California Law (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to know: Categories and specific pieces of personal information collected about you.
• Right to delete: Request deletion of your personal information.
• Right to opt out of sale: We do not sell personal information. No opt-out is necessary.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to correct: Request correction of inaccurate personal information.
• Right to limit use of sensitive personal information: We do not collect sensitive personal information beyond what is necessary for the Service.

To exercise these rights, contact us at privacy@flowgentech.com. We will verify your identity and respond within 45 days.

9. Children's Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will delete it promptly. If you believe we have collected information from a child under 13, contact us at privacy@flowgentech.com.

10. Data Processing for Business Tenants

Flowgent acts as a data processor on behalf of each business that uses our platform (the "data controller"). Each business tenant is responsible for:

• Obtaining appropriate consent from their end customers before collecting data through Flowgent-powered booking pages.
• Complying with applicable privacy laws in their jurisdiction.
• Responding to data subject requests from their own customers (we will assist upon request).

Flowgent maintains strict tenant isolation through row-level security policies. One business tenant cannot access another tenant's data under any circumstances.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top and, for material changes, notify you via email or a prominent notice on the Service. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions, requests, or complaints: