Mailflow LogoMailflow

Privacy Policy

Last Updated: February 7, 2025

1. Data Controller

Flowful AI
Nicolas Chourrout
Avenue Beau Séjour, 79A
1410 Waterloo, Belgium
VAT: BE 1010.797.804
Email: contact@mailflowai.com

2. Data Collected

  • From Google Sign-In: Name, email, profile picture.
  • From Emails: Signatures, FAQs, tone/phrasing patterns (we do not store raw email content).
  • From Knowledge Base: Webpages, files, Q&A.
  • Automatically: Cookies, usage analytics (via GDPR-compliant tools).

3. How We Use Data

  • We use data collected from Google Sign-In and Email content exclusively to provide and improve MailFlow's email drafting services. We do not store raw email content.
  • We do not use any user data obtained via Google Workspace APIs for developing or training generalized AI models.
  • For billing via Stripe (payment data processed externally).

4. Third Parties

We share data with:

  • Clerk (authentication), Vercel/Render (hosting), Pinecone (AI processing), Supabase (database).
  • All providers are GDPR-compliant and subprocess data under contracts.

5. Data Retention

  • Retained while your account is active.
  • Deleted within 30 days of termination.

6. Security

  • JWT tokens encrypt frontend/backend communication.
  • Database row-level security and access controls.
  • Encryption for stored data.

7. Your Rights (GDPR/CCPA)

  • Request access, correction, or deletion of your data.
  • Withdraw consent or object to processing: contact@mailflowai.com

8. International Transfers

Data may be transferred outside the EU via third parties (e.g., Pinecone). We use Standard Contractual Clauses (SCCs) or other approved safeguards.

9. Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Changes will be posted on our website.

10. AI and Machine Learning Usage

  • No Generalized AI/ML Training: We do not use Google user data for training generalized AI models.
  • Personalized AI Assistance Only: AI features remain specific to your account.
  • No Third-Party Generalized AI Training: We do not share your data for third-party model training.