verified_user Privacy Policy

Your data stays yours.
Always.

We only use your data to run your workflows — never to train models, never to sell, never to access without your permission.

Built with enterprise-grade security and permission-first architecture.

Designed for teams where data sensitivity matters most.

block No model training key Permission-based access shield Enterprise-grade security

Last updated: March 2026  ·  Questions? [email protected]

Plain english

What this actually means for you

block

We don't train AI on your data

Your communications and workflows never feed into any AI model — shared or private.

sell

We don't sell or share your data

We are a subscription business. Your data has zero commercial value to us beyond running your workflow.

manage_accounts

We only access what's needed for your workflow

Minimum permissions only. We request scoped access — not unrestricted entry to your accounts.

logout

You can revoke access anytime

Disconnect instantly from settings. Your data is purged from our systems within 30 days.

Transparency

How your data is handled

1

You connect your tools

Gmail, Calendar, task apps — via OAuth. You decide exactly what gets connected.

2

Data is processed securely

Your data is encrypted in transit (TLS 1.3) and at rest (AES-256). No raw storage beyond operational necessity.

3

Outputs are generated

Draft replies, follow-up alerts, summaries — created for your review, not sent autonomously.

4

You review before anything happens

Nothing is sent, moved, or acted on without your explicit approval. Always.

Access clarity

What we access — and what we don't

check_circle We access

✓ Email metadata for classification
✓ Calendar data for scheduling
✓ Task context you've connected

cancel We don't access

✗ Personal data unrelated to work
✗ Anything outside connected tools
✗ Data you haven't permitted

api We use official APIs from providers like Google, Microsoft, and Slack — no scraping or unsafe access.

Protection

How your data is protected

lock

Encryption everywhere

AES-256 encryption at rest. TLS 1.2+ in transit. Every byte, always.

api

OAuth-based APIs only

We never store your credentials. Access is token-based and strictly scoped.

admin_panel_settings

Role-based access control

Only the team members who need access to run your workflow can see your data.

delete_sweep

Minimal retention

Your data is only retained as long as needed to run your workflows. You can request deletion anytime.

Your rights

You stay in control

task_alt

You approve every action

Nothing executes without your explicit sign-off. FlowAIsys is advisory, not autonomous.

link_off

You can disconnect anytime

Revoke access from your Google or Microsoft settings. Instant effect, no friction.

delete

You can delete your data

Email [email protected] and we'll purge your data within 30 days, confirmed in writing.

history_toggle_off

Strict Retention Policy

Your data is only stored as long as needed to run your workflows. You can request deletion anytime.

tune

You control what gets automated

You define the scope. We only operate within the boundaries you set.

Honest limits

What we don't do

Knowing what a company won't do is as important as what it will.

cancel

We do NOT train models on your data

cancel

We do NOT send anything without approval

cancel

We do NOT access data outside your workflow

cancel

We do NOT store unnecessary information

“We built FlowAIsys to handle sensitive executive workflows — security is not a feature, it's the foundation.”

forum

Still have questions about your data?

We're happy to walk you through exactly how your data is handled — no jargon, just straight answers.