Privacy Policy
Effective Date: October 21, 2026
1. Information We Collect
We collect information you provide directly to us, such as when you create an account, use our services, or contact us for support. This includes your name, email address, and any content you provide through our AI chatbot and assistant services.
2. How We Use Your Information
We use the information we collect to provide, maintain, and improve our services, including processing your AI interactions, managing your account, and communicating with you about our services.
3. Data Storage and Security
Your data is stored securely using industry-standard encryption. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, or destruction. If something goes wrong while you're using the service, we may capture a masked, privacy-scrubbed recording of the on-screen session at the moment of the error so we can diagnose it — sensitive fields are masked before anything is stored.
4. AI Processing
Your conversations with our AI chatbot and assistant are processed by leading AI providers including Anthropic (Claude), OpenAI (GPT), Google (Gemini), and xAI (Grok). Conversation content is sent to these providers to generate responses. We do not use your data to train AI models. Each organization's data is fully isolated and never shared with other organizations. When you connect third-party services (such as Google Calendar), your data may also be shared with those services in accordance with their privacy policies.
5. Third-Party Services
We integrate with third-party services such as Google Calendar for appointment scheduling. When you connect these services, their respective privacy policies also apply.
6. Data Retention
We retain your data for as long as your account is active or as needed to provide you services, on these specific clocks:
Guest chat. A guest chat transcript is automatically deleted after 24 hours. Any contact record or booking a guest creates during that chat is saved in the business’s own customer records and is not part of the deleted transcript.
Call recordings and transcripts. Recordings of phone calls and their transcripts are kept for 90 days, then deleted.
SMS consent records. Records of texting opt-in and opt-out are kept for 5 years, to prove consent was given or withdrawn.
Account closure. When an account is closed, it stays restorable for 90 days, and you can export your records during that time; after 90 days the workspace data is deleted. If you make a formal deletion request instead, we deactivate the account immediately and delete your data within 30 days.
Records we must keep. Billing, payment, consent, and dispute records are kept for up to 7 years as required by law, then deleted.
7. Our Role for a Business’s Customers
If you’re a customer of a business that uses Flovato, that business controls its own customer relationships and decides how your information is used. We act as that business’s service provider for your data — we process it on the business’s behalf and under its instructions, to provide the service to them.
8. Your Rights
You may request access to, correction of, or deletion of your personal data at any time by contacting us at flovatocom@gmail.com.
9. Contact Us
If you have questions about this Privacy Policy, please contact us at flovatocom@gmail.com or write to us at Flovato, Latrobe, PA.
10. Subprocessors
Some of your data is handled by other companies on our behalf — the carrier that sends your text messages, the processor that takes a payment, the provider that runs the AI model. They are listed, with what reaches each of them, on our subprocessors page.