1. Introduction
Flexsee AI ("we," "our," or "us") provides AI-powered predictive analytics for e-commerce businesses. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.
2. Information We Collect
2.1 Information You Provide
- Account Information: Email address, name, organization details
- E-commerce Data: Product catalogs, customer data, order history (from Shopify, WooCommerce, or other platforms)
- Integration Credentials: API keys for third-party services (encrypted)
- Payment Information: Processed securely through Stripe (we don't store card details)
2.2 Automatically Collected Information
- Behavioral Data: When you install Flexsee.js tracking, we collect website visitor behavior (page views, clicks, cart actions)
- Usage Data: How you use our platform (features accessed, models trained, predictions run)
- Technical Data: IP address, browser type, device information, log data
3. How We Use Your Information
- AI Predictions: Train custom machine learning models to predict customer behavior
- Marketing Integrations: Export predicted audiences to Meta Ads, Klaviyo, and other platforms
- Service Delivery: Provide, maintain, and improve our platform
- Analytics: Understand usage patterns and optimize our services
- Security: Protect against fraud, abuse, and security threats
- Communications: Send service updates, security alerts, and support messages
4. Data Sharing and Disclosure
4.1 Third-Party Integrations
When you export audiences or predictions to third-party platforms, we share relevant data with:
- Meta (Facebook): Hashed customer emails/phones for Custom Audiences (SHA-256)
- Klaviyo: Customer emails and product recommendations for email campaigns
- Shopify/WooCommerce: Sync product and customer data for predictions
You control which integrations to enable and can disconnect them at any time.
4.2 Service Providers
- AWS: Cloud hosting and data storage (EU-West-1 region)
- Stripe: Payment processing
- Email Service: Transactional emails and notifications
4.3 Legal Requirements
We may disclose your information if required by law, court order, or to protect our rights and safety.
4.4 Merchant and Protected Customer Data
When you connect your store (e.g. Shopify), we process customer and order data only for stated purposes: to train AI models, generate predictions and recommendations, and export audiences to your chosen integrations (e.g. Meta, Klaviyo). We do not sell this data. We retain it only while your account is active and for the duration needed to provide these services; when you disconnect your store or close your account, we delete your store’s customer and order data as described in Data Retention. We honour customer consent and opt-out (e.g. via your store’s privacy settings and our tracking pixel).
5. Data Security
We implement industry-standard security measures:
- Encryption: Data encrypted in transit (HTTPS/TLS) and at rest (AES-256)
- Access Controls: Role-based access, multi-factor authentication
- Secure Storage: API keys and tokens encrypted in AWS Secrets Manager
- Regular Audits: Security reviews and vulnerability scans
6. Data Retention
We retain your data for as long as your account is active or as needed to provide services. When you close your account:
- Account data deleted within 30 days
- Training data and models deleted immediately
- Logs retained for 90 days for security purposes
7. Your Rights (GDPR & CCPA)
You have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Portability: Export your data in machine-readable format
- Objection: Object to processing of your data
- Restriction: Request restricted processing
To exercise these rights, email us at privacy@flexsee.ai
8. Cookies and Tracking
We use cookies and similar technologies for:
- Essential Cookies: Authentication, security, and core functionality
- Analytics: Understanding how you use our platform
- Flexsee.js Tracking: When installed on your store, collects visitor behavior for AI predictions
You can manage cookie preferences in your browser settings.
9. International Data Transfers
Your data is processed in the European Union (AWS EU-West-1). If transferred outside the EU, we use standard contractual clauses and adequate safeguards.
10. Children's Privacy
Our service is not intended for users under 18. We do not knowingly collect information from children.
11. Changes to This Policy
We may update this Privacy Policy periodically. We'll notify you of significant changes via email or platform notification. Continued use constitutes acceptance of the updated policy.
12. Contact Us
For privacy-related questions or to exercise your rights:
- Email: privacy@flexsee.ai
- Support: hello@flexsee.ai
- Website: flexsee.ai
