Flujo Labs
AI Workflow Automation Services
Effective Date: 1/8/2025
Last Updated: 1/8/2025
1. INTRODUCTION
Flujo Labs (“Company,” “we,” “us,” or “our”) is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy (“Policy”) explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us in any capacity.
This Policy applies to all users of our website, clients who engage our AI workflow automation services, and any other individuals whose personal information we process in connection with our business operations.
By using our services or providing us with your personal information, you consent to the collection, use, and disclosure of your information as described in this Policy.
2. INFORMATION WE COLLECT
2.1 Personal Information
We may collect the following categories of personal information:
2.1.1 Contact Information
- Full name and business name
- Email address
- Phone number
- Mailing address
- Business registration details
- Job title and company information
2.1.2 Business Information
- Business processes and workflow requirements
- System access credentials (encrypted and secured)
- Integration requirements and technical specifications
- Business objectives and automation goals
- Financial information related to service payments
2.1.3 Technical Information
- IP address and device information
- Browser type and version
- Operating system and device specifications
- Website usage data and analytics
- API credentials and system configurations
- Log files and error reports
2.1.4 Communication Data
- Email correspondence and attachments
- Phone call recordings (with consent)
- Chat messages and support tickets
- Meeting recordings and notes
- Feedback and survey responses
2.2 Automatically Collected Information
We automatically collect certain information when you interact with our services:
2.2.1 Website Analytics
- Pages visited and time spent on site
- Referral sources and search terms
- Device and browser characteristics
- Geographic location (general area)
- Cookies and similar tracking technologies
2.2.2 Service Usage Data
- Workflow execution logs and performance metrics
- System integration activity and API usage
- Error reports and diagnostic information
- User interaction patterns and feature usage
2.3 Third-Party Information
We may receive information about you from third-party sources:
- Social media platforms and professional networks
- Business directories and public databases
- Referral partners and affiliate networks
- Payment processors and financial institutions
3. HOW WE USE YOUR INFORMATION
3.1 Primary Purposes
We use your personal information for the following purposes:
3.1.1 Service Delivery
- Providing AI workflow automation services
- Developing and implementing custom solutions
- System integration and technical support
- Performance monitoring and optimization
- Training and documentation delivery
3.1.2 Business Operations
- Processing payments and maintaining accounts
- Communicating about services and support
- Managing client relationships and contracts
- Conducting business analysis and planning
- Maintaining accurate business records
3.1.3 Legal and Compliance
- Complying with applicable laws and regulations
- Protecting our legal rights and interests
- Preventing fraud and unauthorized access
- Maintaining security and data protection
- Responding to legal requests and investigations
3.2 Marketing and Communications
With appropriate consent, we may use your information for:
- Sending service updates and notifications
- Providing relevant marketing communications
- Conducting customer satisfaction surveys
- Sharing industry insights and best practices
- Inviting participation in events or webinars
3.3 Improvement and Development
We use aggregated and anonymized data for:
- Improving service quality and effectiveness
- Developing new features and capabilities
- Conducting research and analytics
- Enhancing user experience and interface
- Optimizing system performance and reliability
4. INFORMATION SHARING AND DISCLOSURE
4.1 General Principles
We do not sell, rent, or lease your personal information to third parties. We may share your information only in the following circumstances:
4.1.1 Service Providers
We may share information with trusted third-party service providers who assist us in:
- Cloud hosting and infrastructure services
- Payment processing and financial services
- Email and communication platforms
- Analytics and performance monitoring tools
- Legal and professional advisory services
All service providers are contractually bound to maintain confidentiality and use information only for specified purposes.
4.1.2 Business Partners
With your consent, we may share information with:
- Integration partners and technology vendors
- Referral partners and affiliate networks
- Joint venture partners for collaborative projects
- Certified consultants and implementation specialists
4.1.3 Legal Requirements
We may disclose information when required by law or when we believe disclosure is necessary to:
- Comply with legal obligations and court orders
- Protect our rights, property, or safety
- Investigate fraud or security incidents
- Respond to government requests and investigations
- Enforce our terms of service and agreements
4.2 Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this Policy.
4.3 Anonymized Data
We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you for research, marketing, or business development purposes.
5. DATA SECURITY AND PROTECTION
5.1 Security Measures
We implement comprehensive security measures to protect your personal information:
5.1.1 Technical Safeguards
- Encryption of data in transit and at rest
- Secure authentication and access controls
- Regular security audits and vulnerability assessments
- Firewalls and intrusion detection systems
- Backup and disaster recovery procedures
5.1.2 Administrative Safeguards
- Limited access on a need-to-know basis
- Employee training on privacy and security
- Regular review of access permissions
- Incident response and breach notification procedures
- Vendor management and due diligence processes
5.1.3 Physical Safeguards
- Secure facilities and restricted access areas
- Environmental controls and monitoring systems
- Secure disposal of physical and electronic media
- Protection of equipment and storage devices
5.2 Data Retention
We retain personal information only as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required by law. Specific retention periods include:
- Client Data: Duration of service agreement plus 7 years
- Financial Records: 7 years from transaction date
- Communication Records: 3 years from last contact
- Website Analytics: 2 years from collection date
- Marketing Data: Until consent is withdrawn
5.3 Data Breach Response
In the event of a data breach, we will:
- Immediately assess and contain the incident
- Notify affected individuals within 72 hours when required
- Report to relevant regulatory authorities as mandated
- Implement additional security measures to prevent recurrence
- Provide ongoing support and assistance to affected parties
6. YOUR PRIVACY RIGHTS
6.1 Access and Control
You have the following rights regarding your personal information:
6.1.1 Right to Access
- Request a copy of personal information we hold about you
- Obtain information about how your data is processed
- Receive data in a structured, commonly used format
6.1.2 Right to Rectification
- Correct inaccurate or incomplete personal information
- Update contact details and business information
- Amend records to reflect current circumstances
6.1.3 Right to Erasure
- Request deletion of personal information in certain circumstances
- Withdraw consent for processing activities
- Object to continued processing of your data
6.1.4 Right to Restriction
- Limit how we process your personal information
- Suspend processing pending resolution of disputes
- Restrict processing to specific purposes only
6.2 Marketing Communications
You may opt out of marketing communications at any time by:
- Clicking unsubscribe links in emails
- Contacting us directly at info@flujolab.com
- Updating your communication preferences
- Withdrawing consent for marketing activities
6.3 Exercising Your Rights
To exercise any of these rights, please contact us at:
- Email: privacy@flujolab.com
- Subject Line: “Privacy Rights Request”
- Include: Your name, contact information, and specific request
We will respond to your request within 30 days and may require verification of your identity to protect your privacy.
7. INTERNATIONAL DATA TRANSFERS
7.1 Cross-Border Processing
Your personal information may be transferred to, stored, and processed in countries other than your country of residence, including but not limited to:
- Malaysia (primary data processing location)
- Singapore (client service operations)
- United States (cloud services and analytics)
- European Union (compliance and legal services)
7.2 Transfer Safeguards
When transferring personal information internationally, we ensure appropriate safeguards are in place:
- Adequacy decisions by relevant data protection authorities
- Standard contractual clauses approved by regulatory bodies
- Binding corporate rules and certification schemes
- Specific consent for sensitive data transfers
8. COOKIES AND TRACKING TECHNOLOGIES
8.1 Cookie Usage
Our website uses cookies and similar technologies to:
- Remember your preferences and settings
- Analyze website traffic and user behavior
- Provide personalized content and recommendations
- Enable social media features and integrations
- Measure the effectiveness of marketing campaigns
8.2 Cookie Categories
We use the following types of cookies:
8.2.1 Essential Cookies
Required for basic website functionality and cannot be disabled.
8.2.2 Analytics Cookies
Help us understand how visitors interact with our website.
8.2.3 Marketing Cookies
Used to deliver relevant advertisements and track campaign performance.
8.2.4 Preference Cookies
Remember your choices and provide enhanced features.
8.3 Cookie Management
You can control cookies through your browser settings:
- Block or delete cookies from our website
- Set preferences for specific cookie categories
- Receive notifications when cookies are being used
- Opt out of targeted advertising through industry initiatives
9. CHILDREN’S PRIVACY
Our services are not intended for children under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take immediate steps to delete such information and terminate any associated accounts.
Parents or guardians who believe their child has provided personal information to us should contact us immediately at privacy@flujolab.com.
10. CHANGES TO THIS PRIVACY POLICY
10.1 Policy Updates
We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or business operations. We will notify you of material changes by:
- Posting an updated version on our website
- Sending email notifications to registered users
- Providing prominent notice of significant changes
- Updating the “Last Updated” date at the top of this Policy
10.2 Continued Use
Your continued use of our services after any changes to this Policy constitutes acceptance of the updated terms. We encourage you to review this Policy regularly to stay informed about our privacy practices.
11. CONTACT INFORMATION
11.1 Privacy Inquiries
For questions, concerns, or requests related to this Privacy Policy, please contact us:
Privacy Officer
Flujo Labs
Email: privacy@flujolab.com
Business Email: info@flujolab.com
Business Hours: 9:00 AM – 6:00 PM MYT (Monday-Friday)
11.2 Regulatory Contacts
If you believe we have not adequately addressed your privacy concerns, you may contact the relevant data protection authority in your jurisdiction.
Malaysia:
Personal Data Protection Department
Ministry of Communications and Multimedia Malaysia
12. GOVERNING LAW
This Privacy Policy is governed by and construed in accordance with the laws of Malaysia, including the Personal Data Protection Act 2010 (PDPA) and other applicable privacy legislation.
This Privacy Policy is effective as of [Date] and supersedes all previous versions. We are committed to protecting your privacy and maintaining the highest standards of data protection.
FLUJO LABS
Professional AI Workflow Automation Services
