Privacy Policy

We collect the following categories of information:

• Account information — your name, email address, organization, and role, provided when you or your administrator create an account.
• Connected-service data — when you connect a third-party account (such as Google), we access data from that service to provide the Service, as described below.
• Usage data — information about how you interact with the Service, including log data, device and browser information, and diagnostic events.

We use information to:

• Provide, maintain, and improve the Service;
• Keep your CRM records current by organizing your email, calendar, and meeting activity into accounts, contacts, and deals;
• Generate AI summaries, coaching insights, and suggested next steps for your revenue team;
• Secure the Service and prevent fraud or abuse; and
• Comply with legal obligations.

When you connect your Google account, Flo requests read-only access to the following, and only to provide the features described:

• Gmail (read-only messages and metadata) — to associate email conversations with the relevant accounts, contacts, and deals, and to generate summaries and suggested follow-ups.
• Google Calendar (read-only) — to surface upcoming meetings and match them to the right accounts and deals.
• Google Meet (read-only) — to associate meeting recordings and transcripts with the relevant accounts and deals and to generate call insights.

Flo does not send email, modify, or delete any content in your Google account. You can revoke Flo’s access at any time from your Google Account’s security settings or from within the Service.

Flo’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google user data to provide or improve user-facing features that are prominent in the Service’s user interface.
• We do not transfer or sell Google user data for serving advertisements.
• We do not use or transfer Google user data to determine creditworthiness or for lending purposes.
• We do not allow humans to read Google user data unless we first obtain your affirmative agreement for specific messages, doing so is necessary for security purposes (such as investigating abuse), to comply with applicable law, or the data has been aggregated and anonymized for internal operations.

Service features that use artificial intelligence are powered solely by Anthropic’s Claude models, accessed through the Anthropic API. Under Anthropic’s commercial terms, the prompts we send and the outputs we receive are not used to train Anthropic’s models. Google user data processed this way is not used to train generalized AI or machine-learning models, and its use complies with the Limited Use requirements above.

We do not sell your personal information. We share information only with:

• Service providers (subprocessors) who host and support the Service under contractual confidentiality and data-protection obligations;
• Other users within your own organization, consistent with your organization’s configuration; and
• Authorities when required by law or to protect the rights, safety, and security of users and the Service.

We retain information for as long as your account is active or as needed to provide the Service, and thereafter as required to comply with our legal obligations, resolve disputes, and enforce our agreements. We protect information using encryption in transit and at rest, access controls, and audit logging. No method of transmission or storage is completely secure, but we work to protect your data using industry-standard safeguards.

You may access, correct, export, or delete your information, and revoke third-party connections, at any time. To disconnect Google access, visit your Google Account permissions. Depending on your location, you may have additional rights under applicable privacy laws; contact us to exercise them.

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above and, where appropriate, provide additional notice.

If you have questions about this Privacy Policy or our data practices, contact us at support@clickandflow.xyz.