Privacy Policy
Effective date: March 26, 2026 · Last updated: March 26, 2026
1. Introduction
FlowSight LLC ("FlowSight," "we," "us," or "our"), a Delaware limited liability company, operates the website at flowsight.pro (the "Website"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our Website or interact with us through our contact forms.
This Privacy Policy applies only to information collected through the Website. The processing of merchant payment data through the FlowSight platform is governed by a separate Data Processing Agreement (DPA), available upon request at admin@flowsight.pro.
2. Data Controller
For personal data collected through this Website, FlowSight acts as the data controller (responsable del tratamiento under Mexico's LFPDPPP). For merchant transaction data processed through our platform, FlowSight acts as a data processor (encargado) on behalf of our customers.
Contact: admin@flowsight.pro
3. Information We Collect
3.1 Information You Provide
- Email address (via "Book a Demo" or "Request Access" forms)
- Company name and monthly payment volume (if provided in the form)
- Any additional information you voluntarily include in form submissions
3.2 Information Collected Automatically
- Server logs: IP address, browser type and version, pages visited, date and time of access
- We do not use third-party analytics tools, tracking pixels, or advertising cookies on this Website
3.3 Cookies
This Website uses only essential cookies required for basic functionality (e.g., CSRF protection on forms). We do not use analytics, advertising, or third-party tracking cookies.
4. How We Use Your Information
| Purpose | Legal Basis |
|---|---|
| Respond to demo requests and inquiries | Consent (LFPDPPP Art. 8); Pre-contractual steps (GDPR Art. 6(1)(b)) |
| Provide access to the FlowSight platform | Performance of contract (LFPDPPP Art. 12; GDPR Art. 6(1)(b)) |
| Send product updates and relevant communications | Consent (LFPDPPP Art. 8; GDPR Art. 6(1)(a)) |
| Website security and fraud prevention | Legitimate interest (GDPR Art. 6(1)(f)); Legal obligation (LFPDPPP Art. 10) |
5. Data Retention
- Demo/access requests: 12 months from submission, or until you request deletion
- Platform accounts: Duration of the beta or active subscription, plus 30 days
- Server logs: Managed by our hosting provider (GitHub Pages) per their privacy statement. FlowSight does not independently retain server access logs from the marketing website.
6. Your Rights Under Mexican Law (ARCO Rights)
Under Mexico's Federal Law on Protection of Personal Data (LFPDPPP), you have the right to:
- Access (Acceso) — Request a copy of the personal data we hold about you
- Rectification (Rectificación) — Request correction of inaccurate or incomplete data
- Cancellation (Cancelación) — Request deletion of your personal data
- Opposition (Oposición) — Object to the processing of your personal data
To exercise your ARCO rights, send your request to admin@flowsight.pro including:
- Your full name and contact information
- A clear description of the personal data in question
- The specific right you wish to exercise (Access, Rectification, Cancellation, or Opposition)
- Any documents supporting your request
- Your preferred method of response
We will respond within 20 business days of receiving your complete request. If approved, changes will be implemented within 15 business days of our response, per LFPDPPP Art. 32.
You may revoke your consent at any time by contacting us at the email above. Revocation will not affect the lawfulness of processing prior to withdrawal.
7. Your California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the CPRA:
- Right to Know: You may request the categories and specific pieces of personal information we have collected about you
- Right to Delete: You may request that we delete the personal information we have collected from you
- Right to Correct: You may request that we correct inaccurate personal information
- Right to Opt-Out: We do not sell or share your personal information for cross-context behavioral advertising
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
To exercise these rights, contact us at admin@flowsight.pro. We will respond within 45 days per CCPA §1798.130.
Categories of personal information collected: Identifiers (email address, IP address); Internet or electronic network activity (pages visited, browser type).
8. Your Rights Under EU/EEA Law (GDPR)
If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation:
- Right of access, rectification, erasure, restriction, and data portability
- Right to object to processing based on legitimate interests
- Right to withdraw consent at any time
- Right to lodge a complaint with your local data protection authority
We will respond to your request without undue delay and within one month of receipt, per GDPR Art. 12(3). This period may be extended by two further months where necessary, taking into account the complexity and number of requests.
9. International Data Transfers
Your personal data may be transferred to and processed in the United States, where FlowSight's servers are located. We protect these transfers through:
- The EU-U.S. Data Privacy Framework (DPF) for certified sub-processors
- Standard Contractual Clauses (EU Commission Decision 2021/914) as a supplementary safeguard
To request a copy of applicable Standard Contractual Clauses, contact us at admin@flowsight.pro.
10. Third-Party Service Providers
We use the following service providers who may process your personal data on our behalf:
| Provider | Purpose | Data Processed |
|---|---|---|
| Formspree | Form submissions processing | Email address, form content |
| Google Cloud Platform | Website and platform hosting | Server logs, IP addresses |
11. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS), access controls, and regular security reviews. No method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.
12. Children's Privacy
Our Website and platform are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we learn we have collected data from a child under 18, we will delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Continued use of the Website after changes constitutes acceptance of the revised policy.
14. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:
FlowSight LLC
Email: admin@flowsight.pro
Website: flowsight.pro