Privacy Policy

1. Introduction

Flusk Technologies Ltd. ("Flusk", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Flusk AI Governance Platform. Please read this policy carefully.

2. Information We Collect

We collect the following categories of information:

• Account Information: Name, email address, organization name, and role when you create an account.
• Usage Data: Information about how you interact with the Platform, including features used, solutions created, and queries executed.
• AI Interaction Data: Prompts, responses, and conversation logs processed through the Platform's AI models.
• Technical Data: IP addresses, browser type, device identifiers, and log data for security and performance monitoring.
• Payment Information: Billing details processed through our payment processor (we do not store full card numbers).

3. How We Use Your Information

We use collected information to:

• Provide, operate, and improve the Platform
• Process transactions and send billing notifications
• Send security alerts, product updates, and administrative messages
• Analyze usage patterns to improve features and performance
• Enforce our Terms of Service and comply with legal obligations
• Provide customer support and respond to inquiries

4. Data Sharing and Disclosure

We do not sell your personal data. We may share information with:

• Service Providers: Trusted third parties who assist in operating the Platform (cloud infrastructure, payment processing, analytics).
• AI Model Providers: Queries processed through third-party AI APIs (Anthropic, OpenAI) subject to their respective privacy policies.
• Legal Compliance: When required by law, court order, or governmental authority.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with advance notice provided.

5. Data Security

We implement enterprise-grade security measures including: AES-256 encryption at rest, TLS 1.3 in transit, SOC 2 Type II certified infrastructure, role-based access controls, audit logging, and regular penetration testing. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. AI conversation logs are retained for 90 days by default (configurable in organization settings). Usage analytics data is retained for 24 months. You may request deletion of your data at any time by contacting us.

7. Your Rights (GDPR & CCPA)

Depending on your location, you may have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to certain processing activities, including profiling.
• Opt-out: California residents may opt out of the "sale" of personal information (we do not sell data).

To exercise these rights, contact privacy@flusk.app.

8. Cookies and Tracking

We use essential cookies for authentication and session management. We use analytics cookies (with your consent) to understand Platform usage. You can control cookie preferences through your browser settings. Disabling essential cookies may impair Platform functionality.

9. International Data Transfers

Flusk operates from Israel, which the European Commission has recognized as providing adequate data protection. For transfers to other countries, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure appropriate safeguards.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or in-app notification at least 30 days before the changes take effect. Your continued use of the Platform after the effective date constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related inquiries, contact our Data Protection Officer at privacy@flusk.app or at Flusk Technologies Ltd., Tel Aviv, Israel. For EU residents, you have the right to lodge a complaint with your local supervisory authority.