Privacy Policy

Flannel Technologies, Inc. ("Flannel," "we," "us," or "our") respects your privacy. This Privacy Policy describes how we collect, use, share, and protect personal information when you visit our websites, interact with our marketing communications, register for or use our software-as-a-service offerings (collectively, the "Services"), or otherwise engage with us.

Scope. This Privacy Policy applies when Flannel acts as the controller of personal information — for example, when you visit our website, sign up for a trial, attend our events, or communicate with our sales or support teams. When Flannel processes personal data on behalf of a business customer (an "Organization") in connection with the Organization’s use of the Services, Flannel acts as a processor and that processing is governed by the agreement between Flannel and the Organization, including Flannel’s Data Processing Addendum. If you have questions about how an Organization handles your data within the Services, you should contact that Organization directly.

1. INFORMATION WE COLLECT

1.1 Information You Provide to Us.

We collect information that you submit to us directly, including:

Account and Profile Information — such as your name, email address, employer, job title, phone number, password, and profile photo when you register for or use the Services.
Communications and Support — information you share in emails, chats, support tickets, surveys, sales conversations, or marketing forms (including contents of your messages and attachments).
Billing Information — billing contacts, addresses, and tax identifiers. Payment card information is collected and processed by our third-party payment processor; Flannel does not store full payment card numbers.
Content and Inputs — content, files, and other inputs you submit to the Services. When you submit such content as an employee or agent of an Organization, this content is generally Customer Data that Flannel processes on behalf of that Organization under our Data Processing Addendum.
Recruiting Information — if you apply for a job, the information in your resume, application, and interview notes.

1.2 Information Collected Automatically.

When you use the Services or visit our websites, we and our service providers automatically collect:

Device and Connection Data — IP address, device identifiers, browser type and version, operating system, language settings, and approximate location (derived from IP).
Usage Data — pages and features accessed, actions taken, referring and exit URLs, time stamps, error reports, and performance data.
Cookies and Similar Technologies — see Section 6 (Cookies and Tracking Technologies) below.

1.3 Information from Third Parties.

We may receive information about you from third parties, including:

Single sign-on and identity providers if you authenticate using a third-party service.
Marketing partners, data enrichment vendors, and publicly available sources (e.g., business contact databases) to help us understand and reach prospective customers.
Service providers, fraud-prevention vendors, and security partners that help us operate and protect the Services.
Your Organization, if it provisions accounts on your behalf.

1.4 Sensitive Information.

We do not seek to collect special categories of personal data (such as health, biometric, racial or ethnic origin, religious beliefs, sexual orientation, or precise geolocation) through the Services or our website. Please do not submit such information to us unless we have specifically requested it.

2. HOW WE USE INFORMATION

We use the information described above to:

Provide, operate, secure, maintain, and improve the Services and our websites;
Create and administer your account, authenticate you, and personalize your experience;
Process transactions, send invoices, and collect payments;
Respond to your inquiries and provide customer support;
Send service-related communications (e.g., security alerts, updates, billing notices) and, with your consent where required, marketing communications;
Analyze usage trends and conduct research and analytics to develop new features and improve performance, in a manner consistent with our commitments to Organizations regarding Customer Data;
Prevent fraud, abuse, and unauthorized access, and enforce our agreements and policies;
Comply with applicable laws, regulations, legal process, and lawful requests from government authorities; and
Establish, exercise, or defend legal claims.

2.1 AI Features.

Where the Services include features that use artificial intelligence or machine learning, we will not use Customer Data, Inputs, or Outputs (as defined in our Terms of Service and Data Processing Addendum) to train, fine-tune, or otherwise develop general-purpose machine learning or artificial intelligence models, except as strictly necessary to provide, secure, support, and maintain the Services, or with the Organization’s express prior written consent. Aggregated and de-identified data may be used as permitted by our Terms of Service and Data Processing Addendum.

2.2 Legal Bases (EEA, UK, and Switzerland).

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under applicable data protection laws:

Performance of a contract — to provide the Services and respond to your requests;
Legitimate interests — to operate, secure, and improve our business, communicate with you, and prevent fraud and misuse, subject to balancing those interests against your rights;
Consent — for certain marketing communications and cookies, where required by law (you may withdraw consent at any time); and
Compliance with legal obligations — to comply with laws, regulations, and legal process.

3. HOW WE SHARE INFORMATION

We share personal information in the following circumstances:

With Service Providers and Subprocessors — vendors and partners that help us operate the Services and our business, including cloud infrastructure, analytics, customer support, payment processing, communications, marketing automation, and security providers. These providers are contractually obligated to protect personal information and use it only as instructed by Flannel.
With Your Organization — if you access the Services through an Organization, we may share your activity, profile, and content with that Organization (which controls your account).
With Other Users — content you submit to the Services may be visible to other users of your Organization or to third parties based on settings configured by you or your Organization.
For Legal and Safety Reasons — to comply with applicable laws, regulations, or legal process; to respond to lawful requests from government authorities; to enforce our agreements and policies; and to protect the rights, property, or safety of Flannel, our users, or the public.
In Corporate Transactions — in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business, in which case personal information may be transferred to the relevant counterparty subject to confidentiality protections.
With Your Consent — for any other purpose with your consent.

We do not sell personal information in exchange for monetary compensation. To the extent disclosures for cross-context behavioral advertising or similar activities constitute a "sale" or "share" under California or other state privacy laws, you can exercise your rights to opt out as described in Section 9 (Your Rights and Choices).

4. DATA RETENTION

We retain personal information for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of information and the purposes for which it was collected. When personal information is no longer needed, we will delete, anonymize, or aggregate it in accordance with our retention policies and applicable law. Where Flannel processes Customer Data on behalf of an Organization, retention of that Customer Data is governed by the agreement with that Organization.

5. SECURITY

We maintain a written information security program with administrative, physical, and technical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. Measures include encryption in transit and at rest, role-based access controls, multi-factor authentication for administrative access, vulnerability management, and incident response procedures. No security program can guarantee absolute security, and you are responsible for safeguarding your account credentials and notifying us promptly of any suspected compromise.

6. COOKIES AND TRACKING TECHNOLOGIES

We and our service providers use cookies, pixels, software development kits, and similar technologies (collectively, "Cookies") to operate our websites and Services, remember your preferences, analyze usage, secure our platform, and (with consent where required) deliver marketing. Categories of Cookies we use include:

Strictly necessary Cookies — required for our websites and Services to function (e.g., session management, authentication, load balancing).
Performance and analytics Cookies — help us understand how visitors interact with our websites and Services so we can improve them.
Functional Cookies — remember your preferences and personalize your experience.
Marketing and advertising Cookies — used to measure the effectiveness of our marketing and, in limited cases, to deliver tailored content.

You can control Cookies through your browser settings and, where required by law, through our cookie consent banner. Some features may not function properly if you disable Cookies. We do not respond to browser "Do Not Track" signals at this time, but we honor Global Privacy Control signals as required by applicable law.

7. INTERNATIONAL TRANSFERS

Flannel is headquartered in the United States, and the personal information we collect may be processed in the United States and in other countries where we or our service providers operate. Where required by applicable law, we use appropriate safeguards for international transfers of personal data, including the European Commission’s Standard Contractual Clauses (and the UK Addendum or Swiss equivalent, as applicable), or rely on other lawful transfer mechanisms.

8. CHILDREN'S PRIVACY

Our websites and Services are not directed to, and we do not knowingly collect personal information from, individuals under the age of 16 (or the equivalent minimum age in the relevant jurisdiction). If you believe a child has provided us with personal information, please contact us at privacy@getflannel.ai and we will take appropriate steps to delete it.

9. YOUR RIGHTS AND CHOICES

Depending on your location, you may have the following rights with respect to your personal information:

Access — request confirmation of whether we process your personal information and obtain a copy.
Correction — request that we correct inaccurate or incomplete personal information.
Deletion — request that we delete your personal information, subject to certain exceptions.
Portability — request a copy of certain personal information in a structured, commonly used format.
Restriction or Objection — request that we restrict or object to certain processing, including processing based on legitimate interests or for direct marketing purposes.
Withdrawal of Consent — withdraw consent for processing based on consent (without affecting the lawfulness of prior processing).
Opt-out of Sale/Share — opt out of any "sale" or "share" of personal information and the use of personal information for "cross-context behavioral advertising" or profiling that produces legal or similarly significant effects.
Non-Discrimination — exercise your rights without discrimination for doing so.
Lodge a Complaint — with your local supervisory authority or data protection regulator.

9.1 How to Exercise Your Rights.

To exercise your rights, contact us at privacy@getflannel.ai. We will respond to your request consistent with applicable law. We may need to verify your identity before fulfilling a request. If your personal information is processed by Flannel on behalf of an Organization, we will refer your request to the Organization or instruct you to contact the Organization directly.

9.2 California Privacy Notice.

California residents have the rights described in this Section 9 under the California Consumer Privacy Act, as amended ("CCPA"). In the preceding 12 months, we have collected the categories of personal information described in Section 1, used it for the purposes described in Section 2, and disclosed it to the categories of recipients described in Section 3. We do not sell personal information for monetary value. To exercise opt-out rights for "sale" or "share" of personal information, including via Global Privacy Control, follow the instructions in this Section 9 or the link on our website. We do not knowingly collect personal information from individuals under 16 years of age. California residents may designate an authorized agent to submit requests on their behalf in accordance with the CCPA.

9.3 Other U.S. State Rights.

Residents of other U.S. states (including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and others with comprehensive privacy laws) may have rights similar to those described in this Section 9. To exercise these rights, contact us as described in Section 9.1. You also have the right to appeal a denial of your privacy request by responding to our denial notice or contacting privacy@getflannel.ai with the subject line "Appeal."

10. UPDATES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. We will indicate the date the Privacy Policy was last updated at the top of this page. Where required by applicable law, we will provide additional notice (such as by posting on our website or sending you an email) and, where required, obtain your consent. Your continued use of the Services after the effective date of any update constitutes your acknowledgment of the updated Privacy Policy.

11. HOW TO CONTACT US

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us at privacy@getflannel.ai, or by mail to Flannel Technologies, Inc., Attn: Privacy, at 2810 N Church Street, PMB #925687,Wilmington, DE 19802.

Individuals located in the European Economic Area, the United Kingdom, or Switzerland may also contact our Data Protection Officer at dpo@getflannel.ai.