FlowGrowth Privacy Policy

FlowGrowth, LLC ("we," "us," or "our"), a Wyoming limited liability company, respects the data isolation parameters, corporate confidentiality, and privacy boundaries of our commercial enterprise users. This Privacy Policy details our precise operational data handling procedures regarding the collection, utilize, processing, storage, and defense of personal data and business analytics records when you utilize our automated generation engine available at https://flowgrowth.ai (the "Service").

1. Scope and Jurisdictional Limitations

The Service is engineered, controlled, and delivered exclusively to business entities registered and headquartered within the United States of America. We do not knowingly target, solicit, or collect information from individuals residing within the European Union, European Economic Area, or other non-US jurisdictions.

2. Categories of Data Captured

2.1. Account Profile Credentials: Identifying professional information captured during platform registration, including first and last name, business email address, physical corporate addresses, company domain records, and contact details.

2.2. Creative & Brand Onboarding Data:Corporate data explicitly provided by you to build your "Brand DNA" configuration registry, including website URLs, corporate vector logos, style guidelines, tone matrices, and raw marketing text statements written into manual data fields like the "Manually Verified Claims" panel.

2.3. Connected Ad Network Tokens:To execute preview builds and ad creative drafts, the Service handles API authorization tokens and credential records to communicate with third-party advertising networks (such as Meta's Graph API). These structural variables are strictly encrypted during transport and localized runtime states.

2.4. Merchant Payment Records: Financial profiles, company tax metrics, and credit card credentials are processed completely outside our primary server infrastructure by our third-party merchant processor, Stripe. We do not store or transmit raw credit card data or financial pins inside our localized databases.

2.5. Operational Telemetry and Logs: Information captured automatically via platform execution pathways, including anonymized internet protocol (IP) addresses, browser variants, cookie parameters, execution scripts, diagnostic error codes, and pipeline latency status summaries.

3. Reasons for Processing Data

We process your personal and business data under clear commercial legal bases to fulfill our contractual obligations to you and protect platform operations, specifically:

Operating and stabilizing the automated ad layout pipeline;

Passing tailored text structures and prompt vectors to core downstream artificial intelligence infrastructure networks to fulfill dynamic text-rendering and creative layout loops;

Enforcing our mandatory human-in-the-loop approval confirmation rules regarding live, spend-affecting actions inside connected advertising managers;

Managing billing cycles, subscription transactions, and processing client invoices via Stripe;

Maintaining multi-region network monitoring parameters to detect prompt manipulation, adversarial prompt-injection vectors, tool abuse, or automated API exploitation patterns;

Analyzing diagnostic code logs and telemetry to patch system drops, eliminate timeout errors, and optimize dynamic script execution workflows.

4. Downstream Data Infrastructure and Model Training Disclaimers

To operate our automated ad rendering systems, your custom inputs, business profiles, and ingested text fragments are transmitted programmatically via private API frameworks to downstream artificial intelligence infrastructure networks, including Google Vertex AI, OpenAI, and Anthropic. FlowGrowth utilizes commercial developer API tiers and endpoint configurations designed under such providers' standard terms to treat inputs as private inference queries. While these third-party services maintain operational policies stating that data submitted via developer APIs is not utilized to train, fine-tune, or refine their public foundational baseline systems (including networks supporting text and image models such as Nano Banana 2), FlowGrowth does not operate these downstream platforms. We make no independent warranties regarding their internal compliance, data handling, or potential short-term data retention for abuse monitoring and safety reviews, and we disclaim all liability arising from a third party's failure to strictly adhere to its stated data privacy protections.

5. No Automated Financial Attribution or Spend Data Capture

The Service tracks and ingests advertising network metrics and spend summaries strictly for layout presentation and internal reporting dashboards inside your account portal. FlowGrowth does not store, process, or record your connected ad network funding sources, corporate banking credentials, or direct credit variables. All infrastructure payments and metered token expenditures related to the utilization of the platform are handled natively and securely via Stripe.

6. Cookies and Local Terminal Storage

We employ necessary session identifier cookies, secure tokens, and local terminal storage variables to preserve your authenticated runtime environment, validate UI console parameters, and insulate system verification loops. We do not integrate cross-contextual tracking pixels or behavior-mapping cookies from third-party advertising companies or data broker syndicates for retargeting purposes.

7. COPPA Compliance & Children's Disclosures

FlowGrowth is engineered and restricted exclusively for commercial use by business entities, agencies, and adult marketing professionals. We do not structure the platform to entice minors, nor do we knowingly collect or harvest personal data from individuals under thirteen (13) years of age in strict compliance with the Children's Online Privacy Protection Act (COPPA). If we discover the accidental capture of personal identifiers matching a minor under 13, we will initiate immediate database purging steps to scrub the records completely from our systems.

8. Regulatory State Rights for US Residents (CCPA/CPRA Disclosures)

This section addresses statutory requirements under the California Consumer Privacy Act (CCPA) as amended by the CPRA, alongside related state frameworks (Virginia, Colorado, Utah, Connecticut).

8.1. Data Disclosures Detailed: Within the preceding 12 months, we have shared personal identifiers, transactional histories, and platform network activity with our corporate infrastructure service partners (Stripe, Google Vertex AI, OpenAI) exclusively to perform foundational B2B software functions.

8.2. Non-Selling/Sharing of Profiles: We do not sell your personal data, corporate profiles, or ad assets to data brokers, nor do we share data parameters for cross-contextual behavioral marketing metrics.

8.3. Exercising Your Rights: Eligible US consumers possess specific statutory privileges regarding their stored profiles:

The Right to Access / Know: Discover the specific items of data we collect, process, or transmit;

The Right to Delete: Order the definitive purging of your personal records from our current active cloud tables, subject to legal compliance, tax tracking, or fraud identification exceptions;

The Right to Correct: Resolve errors, omissions, or outdated corporate details.

To register an official data update request, contact our compliance team at privacy@flowgrowth.ai.

9. Secure Retention Gateways

We retain your primary profile data and Brand DNA registries as long as your enterprise subscription remains active, or as required by corporate tax tracking, accounting provisions, and structural security auditing requirements. We implement standard cloud firewalls, transport layer encryption (TLS), isolated environment gates, and strict principal permissions inside our cloud data networks to insulate your data pools from unauthorized exposure or loss. However, because no electronic transmission or storage method is 100% unhackable, we cannot guarantee absolute, impenetrable security.

10. Contacting Our Compliance Desk

If you have questions regarding this Privacy Policy, need to execute your state data erasure rights, or want clarification on how our API infrastructure handles client assets, please contact us at:

Email: privacy@flowgrowth.ai