Privacy Policy

Who we are

This site is owned by Fluxovai LLC, a limited liability company organized in the State of Wyoming, United States. Fluxovai LLC is the controller of the personal data described in this policy: it decides why and how that data is processed. You can contact us about this policy or about your data at:

• Address: 30 N Gould St Ste R, Sheridan, WY 82801, United States
• Email: compliance@fluxovai.com

The company's remaining details are set out in the terms and conditions.

Scope of this policy

This policy covers the personal data of people who visit this site, write to us, or request or purchase our services, including the contact people of client companies.

It also covers the demonstrations we offer to businesses interested in our services, at fluxovai.com/demos, which you enter with your email address, verified with a one-time code.

When, while providing a service, we handle personal data held in a client's systems or on its behalf (for example, logs, documents or contacts), we do so as a processor: we follow the client's instructions under our written agreement with it. In that case the client is the controller, and its own privacy policy applies to that data.

Personal data we collect

• Data you send us through the contact form: your name, your email address, the subject you choose and the text of your message, together with any other information you choose to include in it.
• Data you send us through a purchase request form: in addition, the name of your company or your professional name and a description of what you need.
• Data used to give you access to a demonstration: the email address you type to enter, the one-time code we send you to sign in, and the record of your visits (date, time, IP address and demonstration visited).
• Data you enter while trying a demonstration. In the appointment demo, for example, the service, day and time you choose and the name you type. We ask you to use a made-up name, and the system rejects email addresses and phone numbers. This data is linked to a random identifier, not to your email address. What you type to ask for an appointment in your own words is used to find slots and is not stored.
• If you ask us to email you an appointment confirmation or a case summary in a demonstration: the test data it contains (for example, the service, the date, the name and company you typed, or the case answers and score) and the email address you used to enter the demonstration, which is where we send it. We do not ask you for any other address.
• If you try a demonstration on Telegram: the identifier of your chat with our bot, the language of your Telegram app and the messages you send it, and, alongside them, the email address you used to enter the demonstration, so we can send you the confirmation if you ask for it and check that your spot in the demonstration is still valid. We do not store your Telegram name, username or photo, even though Telegram shares them with the bot. Your conversation with the bot (what you type and tap, and its replies) is kept for 24 hours so you can see it in the demonstration’s business view; voice notes are neither stored nor transcribed.
• Data you send us through a demonstration's form: your name, your company's name, your email address and your message, together with the demonstration you are writing from.
• Data you give us when you purchase a service: your company details, what you need, sessions, reports, working hours and payment history. The detail is set out in the terms and conditions.
• Technical data used to protect the forms: your IP address, your browser's user agent and other technical signals analyzed by Cloudflare Turnstile to tell people apart from automated programs. It is collected only on the pages that contain a form (contact, purchase requests and demonstrations).
• Technical logs: like any web server, the infrastructure hosting the site temporarily logs IP addresses to prevent abuse.

Your name, email address and message (and, in purchase requests and demonstration forms, your company) are required: without them we cannot reply to you or handle your request. Please do not include sensitive information in your message, such as health or financial data, or information about other people without their permission.

Why we use your data and on what legal basis

The General Data Protection Regulation (GDPR) and its United Kingdom and Swiss equivalents require us to tell you the legal basis for each use of your data:

• To reply to your message and, if you ask for it, to prepare a diagnosis or a proposal. Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) or, if your message is not about hiring us, our legitimate interest in answering the inquiries we receive (Article 6(1)(f)).
• To give you access to the demonstration you asked for, only to you and for the 48 hours of your spot, and to make it work while you try it, including on Telegram and, if you ask, by emailing you the confirmation of a test appointment. Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in limiting how many people use it at the same time and preventing abuse (Article 6(1)(f)).
• To provide the services you purchase, manage our relationship with you, apply the promotions in force and keep the record of work done. Legal basis: performance of the contract (Article 6(1)(b)).
• To invoice and keep accounting records. Legal basis: compliance with the tax and accounting obligations to which we are subject (Article 6(1)(c)) and, where those obligations arise from the law of a country outside the European Union, our legitimate interest in complying with them (Article 6(1)(f)).
• To protect the site and the forms against automated submissions, fraud and abuse. Legal basis: our legitimate interest in keeping the site and its users secure (Article 6(1)(f)).
• To follow up commercially with our clients and to decide which services we offer, bringing together information about your company and the work done. Legal basis: our legitimate interest in managing and improving our business (Article 6(1)(f)).
• To comply with legal obligations and requests from competent authorities, and to establish, exercise or defend legal claims. Legal basis: legal obligation (Article 6(1)(c)) or our legitimate interest (Article 6(1)(f)).

Where we rely on our legitimate interests, we have weighed them against your rights and freedoms, and you can object at any time (see Your rights).

We do not send newsletters and we do not sell your personal data. We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

Who we share it with

We only share personal data with the service providers we need in order to run the site and provide our services. They process it on our behalf and only to provide their service to us:

• Cloudflare, Inc. (United States): hosting and delivery of the site, the function that receives the forms, bot protection with Turnstile and, for the demonstrations, email-based access control (Cloudflare Access) and temporary storage of test data.
• Resend (United States): sending the message you write in the form by email, and the confirmations and summaries you ask for in the demonstrations.
• Telegram (Telegram Messenger Inc.), if you try a demonstration on Telegram. Telegram processes your messages as the controller of its own service, under its privacy policy; for users in the European Economic Area it stores them in the Netherlands.
• Purelymail, operated by Add Rabbit LLC (United States): hosting of our email mailboxes, where messages are received and kept.
• HighLevel, the provider of GoHighLevel (United States): our client management and sales system, where client data is stored.

We may also disclose personal data when required by law or by a competent authority.

We do not sell your personal information or share it with third parties for their own marketing purposes.

International transfers

Fluxovai LLC is a United States company. The personal data you give us, including the client data kept in our management system, is processed and stored in the United States, even if you access the site from, or live in, another country.

The European Commission has recognized that organizations in the United States certified under the EU-U.S. Data Privacy Framework ensure an adequate level of protection. According to their data processing agreements, Cloudflare, Resend and HighLevel are certified under that framework and its UK extension, and they also offer the standard contractual clauses approved by the European Commission.

You can ask us for more information about the safeguards that apply to each provider by writing to compliance@fluxovai.com.

How long we keep your data

If you write to us and we do not end up working together, we keep your messages and contact details for a maximum of one year from receipt.

If you purchase a service, we keep your client data for as long as the relationship lasts and, afterwards, for as long as legal and accounting obligations require, for example to support invoices.

If you ask us to erase your data, we erase it without undue delay and at the latest within one month of your request. If the law requires us to keep part of it, we keep only that part, for as long as required, and use it for nothing else.

Data you enter while trying a demonstration is deleted automatically after 24 hours, including the link to your Telegram chat. The messages you send the bot stay on Telegram until you delete the chat. We do not keep the confirmation emails you ask for. Your spot in a demonstration lasts 48 hours. After that we remove you from the active users of Cloudflare Access and delete the encrypted fingerprint of your email address that we keep to count the spots. Cloudflare keeps an inactive user record with your email address, which you can ask us to delete. Messages you send us from a demonstration are kept like any other message.

Technical security data (Turnstile signals and server logs) is kept by Cloudflare for the periods described in its policies. The record of visits to the demonstrations is kept for 24 hours, and the record of changes to the access settings, which may include your email address, for 18 months.

Your rights

You can ask us at any time to:

• confirm whether we process personal data about you and give you a copy of it (access);
• correct it if it is inaccurate or incomplete (rectification);
• erase it (erasure);
• limit its use, for example while we check a correction or an objection (restriction);
• give you the data you provided to us in a structured, commonly used and machine-readable format, or send it to another organization (portability);
• stop using it where we rely on our legitimate interests, unless we have compelling legitimate grounds or need it to establish, exercise or defend legal claims (objection).

To exercise these rights, write to compliance@fluxovai.com or to our postal address. It is free of charge. To protect your information, we may ask you to confirm that you own the email address you used to contact us.

We will reply without undue delay and in any case within one month of receiving your request. If necessary because of the complexity or number of requests, we may extend that period by two further months; if so, we will tell you within the first month and explain why.

If you are in the United States, you can use the same channels to review the personal information we hold about you and to ask us to correct it.

Complaints to a supervisory authority

If you believe that we have not processed your data lawfully, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live, where you work or where the alleged infringement took place. In Spain, that is the Agencia Española de Protección de Datos; in the United Kingdom, the Information Commissioner's Office. The European Data Protection Board publishes the list of authorities in the European Economic Area.

We would appreciate the chance to resolve your concern first: write to us at compliance@fluxovai.com.

Cookies, tracking and Do Not Track signals

This site does not set its own cookies, does not use analytics or advertising tools and does not track your activity over time or across other websites. For that reason nothing changes if your browser sends a Do Not Track signal: there is no tracking to turn off. The typefaces are served from fluxovai.com, without connecting to external servers.

The only third-party component is the Cloudflare Turnstile captcha, which loads only on the pages that contain a form (contact, purchase requests and demonstrations). Cloudflare may use the technical signals it collects across the sites that use its service to improve bot detection, as described in its Turnstile privacy addendum. Details in the Cookie Policy.

The demonstrations also use technical cookies, needed for email-based access and for the demonstration to work. They are not used to track your activity or for advertising. Details in the Cookie Policy.

Security

We use reasonable technical and organizational security measures to protect personal data: the site only works over encrypted connections (HTTPS), the forms are protected against automated submissions, access to the demonstrations requires a one-time code sent to your email address and access to messages is restricted. Even so, no method of transmission or storage is completely secure.

Children

The site is intended for businesses and professionals, not for anyone under 18. We do not knowingly collect personal information from children under 13; if we learn that we have received it, we will delete it.

Changes to this policy

If we change this policy, we will post the new version on this page with its effective date. We keep the previous versions and will send them to you on request. We recommend that you review this policy periodically.