Privacy Policy – Flowenix AI Automation Agency

1. Who We Are

Flowenix is an AI Automation Agency operated by Flowenix LLC, a Delaware limited liability company, providing advanced AI workflows, automation systems, and business tools. Flowenix LLC is the data controller for the personal data described in this policy.
Website: www.flowenix.com
Contact: support@flowenix.com

This policy covers data we collect as a controller — from website visitors, newsletter subscribers, prospects, and clients. Where we process personal data on behalf of a client as part of a service engagement (for example, that client's own customer records flowing through an automation we built), we act as a processor and that processing is governed by our Data Processing Addendum, not by this policy.

2. Data We Collect

We only collect the minimum necessary data to serve you effectively. This may include:

• Personal Information: Name, email, phone number, company name, and business sector. Payment info is processed via third-party gateways.
• Newsletter Data: If you subscribe, your email address, the date and time of subscription, and the page you subscribed from — used to send our newsletter and to demonstrate that you consented.
• Technical Data: Browser and device info, IP address, and server log data generated when you visit the site.
• Project Data: Workflow structures, app access tokens, or CRM credentials only with explicit consent.

3. How We Use Your Data

• Delivering and improving our services
• Client communication and support
• Invoicing and legal compliance
• Marketing (only if you've opted in)

We process this data based on your consent (e.g., newsletter and marketing), the necessity to perform a contract with you (e.g., delivering services), our legal obligations (e.g., keeping accounting records), and our legitimate interest in operating, securing, and improving our business. Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

We do not use your personal data to train, fine-tune, or improve AI models, and we do not make decisions about you that produce legal or similarly significant effects using automated processing alone.

We never sell or rent your data. Doing so is both unethical and against our religious and professional principles.

4. Islamic Data Ethics

In line with Islamic values (Amanah – trust):

• Your data is a trust; we will never use it for deception, profiling, or exploitation.
• We do not use data in systems that promote haram content, riba-based industries, or unethical targeting.

5. Data Sharing

We only share your data with:

• Website and email infrastructure providers — hosting and email delivery providers that operate our site and send our messages
• Workflow automation platforms — including Make.com, which receives newsletter signups submitted through our website (processed in the European Union)
• Payment providers — third-party gateways that process invoices and payments; we do not store full payment card details
• Legal authorities, if required by law

No data is sold. Each vendor is selected for compliance and integrity and is bound by contractual confidentiality and data protection obligations. You can request an up-to-date list of the providers we use by emailing support@flowenix.com.

6. Data Retention

We keep personal data only as long as we need it for the purpose it was collected for:

• Newsletter subscribers: until you unsubscribe, and for up to 12 months afterwards to record that you opted out
• Enquiries and prospects that do not become clients: up to 24 months from our last contact
• Client records and correspondence: for the duration of the engagement and up to 6 years afterwards, to handle disputes and meet accounting and tax obligations
• Invoices and accounting records: as required by applicable tax law
• Credentials and access tokens: revoked and deleted at the end of the engagement, or sooner on request
• Server logs: typically up to 12 months, for security and troubleshooting

You may request deletion at any time. For data we process on your behalf as part of a client engagement, retention is governed instead by our Data Processing Addendum.

7. Your Rights

Depending on where you are located, you have the right to:

• Access your data and obtain a copy of it
• Correct inaccuracies
• Request deletion ("right to be forgotten")
• Receive your data in a portable, machine-readable format, and have it transmitted to another provider where technically feasible
• Restrict how we process your data while a dispute about it is resolved
• Object to processing based on our legitimate interests, and to direct marketing at any time
• Withdraw consent at any time, including for marketing
• Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects
• Lodge a complaint with a data protection authority

Send requests to: support@flowenix.com. We respond within 30 days, and will tell you if we need longer. You can also unsubscribe from marketing emails at any time using the link included in each email or via our Unsubscribe page.

Where to complain. If you are unhappy with how we have handled your personal data, please contact us first at support@flowenix.com so we can try to resolve it. You also have the right to lodge a complaint with the data protection authority in your country of residence or work.

California residents. You have the right to know what personal information we collect, use, and disclose, to request its deletion, to correct inaccurate information, and not to be discriminated against for exercising these rights. As stated above, we do not sell or share personal information as those terms are defined under the CCPA/CPRA.

8. Cookies & Tracking

We keep tracking to a minimum. Our website does not currently use third-party analytics, advertising, or social media tracking cookies, and we do not run advertising pixels or cross-site tracking of any kind.

At present our website sets no cookies of its own and stores nothing on your device. If that changes, we will use only cookies and equivalent local storage that are strictly necessary to make the site work — these do not require your consent under applicable law and are never used to build a profile of you.

Our hosting provider may generate server logs (including IP addresses) for security and reliability purposes, as described in Sections 2 and 6. If we introduce analytics or other non-essential cookies in future, we will ask for your consent first and update this policy before doing so. You can manage or disable cookies in your browser settings at any time.

9. Data Security

We implement strong technical and administrative measures:

• Encrypted storage
• Encrypted transmission (HTTPS/TLS)
• 2FA for critical systems
• Limited internal access, granted only where needed

We continuously audit our systems for security and ethical compliance. No system can be guaranteed completely secure; if a breach affects your personal data and is likely to result in a risk to your rights, we will notify you and the relevant authority as required by applicable law.

10. Children’s Privacy

Our services are directed at businesses, not individuals under the age of consent. We do not knowingly collect personal data from children under the age of consent applicable in their jurisdiction (13 in the United States under COPPA, 16 in the European Union under GDPR unless a lower age is set by a member state). If we become aware such data has been collected, contact us to delete it immediately.

11. International Transfers

Flowenix is operated remotely and relies on third-party service providers located in the European Union, the United States, and other countries to deliver our website and services. As a result, your personal data may be processed in the United States and in other countries outside your home jurisdiction. Where required by applicable law (such as the GDPR), we rely on appropriate safeguards for these transfers — an adequacy decision of the competent authority (including, for certified US recipients, the EU–US Data Privacy Framework), the EU Standard Contractual Clauses, the UK International Data Transfer Agreement or Addendum, or another mechanism permitted by that law. You may request details of the safeguard applied to a specific transfer by emailing support@flowenix.com. If you are a client whose customers' data we process under a service engagement, that processing is instead governed by our Data Processing Addendum.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will post the updated policy on this page with a revised effective date, and where the change is material and we hold your email address, we will notify you by email. Please check this page from time to time for the current version.

13. Contact Us

Email: support@flowenix.com
Flowenix LLC, a Delaware limited liability company
See also our Terms of Service and Data Processing Addendum
Operating in alignment with Islamic values