Cookie Policy

1. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow websites to remember information about your visit — such as your preferred settings or whether you have visited before — to make the experience more consistent.

Cookies are either first-party (set directly by the website you're visiting) or third-party (set by external services like analytics tools). They can be session cookies (deleted when you close the browser) or persistent cookies (remain on your device for a set period).

The FlowAIsys website at flowaisys.in does not use any advertising or social media tracking cookies. We only use analytics cookies — and only if you explicitly consent.

2. Cookies We Use

We operate a strict two-category cookie model:

Category A — Strictly Necessary (No Consent Required)

These cookies are essential for the website to function. They do not track you across websites and cannot be disabled.

Note: fa_cookie_consent is stored in your browser's localStorage, not as an HTTP cookie. It is never transmitted to any server.

Category B — Analytics Cookies (Consent Required)

These cookies are only activated after you click "Accept Analytics" on the consent banner. If you decline, none of these cookies are ever set.

Category C — Third-Party Embedded Services

The booking page embeds Calendly to allow you to schedule a call. If you interact with the Calendly widget, Calendly may set its own cookies governed by Calendly's Privacy Policy. We do not control those cookies.

We load fonts from Google Fonts. Google Fonts may log your IP address when delivering font files, but does not set cookies in modern implementations.

3. What We Do NOT Do

• We do not use advertising or retargeting cookies (no Facebook Pixel, no Google Ads remarketing).
• We do not sell any information collected via cookies to any third party.
• We do not use cookies to build personal profiles or track you across other websites.
• Analytics data is anonymised — IP addresses are masked at the last octet before processing.
• We do not use cookies on client-facing deployments. FlowAIsys's AI agent runs on client-owned infrastructure and processes no web traffic.

4. Legal Basis & Jurisdictional Compliance

India DPDP Act 2023

Under the Digital Personal Data Protection Act 2023, analytics cookies that process personal data (such as IP address) require clear, informed, and revocable consent. We obtain this consent before loading any analytics scripts. You may withdraw consent at any time (see Section 5). FlowAIsys as a company does not store IP addresses — they are anonymised by Google Analytics before storage on Google's servers in the United States.

EU GDPR | Article 6(1)(a) — Consent

Analytics cookies are classified as non-essential. Our legal basis for processing is consent under Article 6(1)(a). Consent is freely given (the site works fully without it), specific (analytics only), informed (this policy), and revocable (withdraw below). We do not rely on legitimate interest for analytics cookies.

UK PECR & UK GDPR

In line with ICO guidance, we require opt-in consent before placing non-essential cookies. The consent mechanism meets the standard of "freely given, specific, informed and unambiguous indication" under UK GDPR Article 4(11).

CCPA — California Consumer Privacy Act

We do not sell personal information. Analytics data shared with Google is subject to Google's data processing terms, which prohibit Google from selling this data. California residents have the right to know, delete, and opt out of sale/sharing — though we do not engage in sale or sharing under CCPA's definition.

Canada — PIPEDA

We obtain meaningful consent before collecting any identifying data via cookies. Canadian users may withdraw consent at any time and have the right to access information held about them.

5. Managing and Withdrawing Your Consent

You may change your cookie preference at any time. Withdrawing consent will stop analytics scripts from loading on subsequent page visits. It does not affect any processing already carried out while consent was active.

You can also control cookies through your browser settings:

• Chrome: Settings → Privacy and Security → Cookies and other site data
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Manage Website Data
• Edge: Settings → Cookies and site permissions → Cookies and site data

You can also opt out of Google Analytics globally via Google's Analytics Opt-Out Browser Add-On.

To opt out of Microsoft Clarity, visit Microsoft's Privacy Statement.

6. Data Transfers Outside India

When analytics cookies are accepted, anonymised usage data is transmitted to Google LLC's servers located in the United States. This transfer is made in accordance with Google's Data Processing Agreement, which incorporates Standard Contractual Clauses (SCCs) for cross-border data transfer.

Under India's DPDP Act, cross-border transfer of personal data requires either government-approved safeguards or explicit user consent. By accepting analytics cookies, you acknowledge that anonymised analytics data will be processed on servers outside India in accordance with the terms described above.

If you are an Indian user who prefers no cross-border data transfer, please click Decline on the consent banner. The website is fully functional without cookies.

7. Data Retention

• Google Analytics — Event data is retained for 14 months (as configured in our GA4 property). After this, data is automatically deleted.
• Microsoft Clarity — Session recordings are retained for 30 days.
• Your consent preference — Stored in your browser's localStorage for up to 12 months. This is local to your device; we never see or store it on our servers.

8. Changes to This Policy

We may update this Cookie Policy periodically. If we make material changes — for example, adding a new type of cookie — we will reset consent banners so existing users are notified and can reconsent.

Minor changes (correction of typos, clarification of existing wording) will be made without notification. The "Last Updated" date at the top of this page reflects the most recent revision.

9. Contact & Grievance Officer

If you have any questions about this Cookie Policy, or wish to exercise your data rights under DPDP, GDPR, CCPA, or PIPEDA, please contact:

FlowAIsys — Data Contact
Kapil Singh
Email: [email protected]
Response time: Within 5 business days.

For India DPDP grievances, requests will be addressed within the 30-day period prescribed under Section 13 of the DPDP Act 2023.