Privacy policy

The short version

FlowSolve collects very little. When you request a conversation, we keep your answers so we can reply. When you visit this site, we count the visit without learning who you are. When we work inside your business, your information stays yours: we use it only for the work you hired us to do, we never sell it, and we never use it to train AI models for anyone else. Questions go to info@flowsolve.ai.

Who we are

FlowSolve is a Canadian business that works with businesses in Canada and the United States. We follow Canada's federal privacy law, the Personal Information Protection and Electronic Documents Act (PIPEDA), and we give everyone the same rights, wherever they are. One of the founders is accountable for this policy and for answering your questions about it. Ask, and we tell you who that is, and the name of the company behind FlowSolve.

What we collect and why

When you request a conversation

The assessment request form asks for your name, your work email, a line about your business, how many people work there, what is prompting you to get in touch, your timing, and whether you can involve the people who make decisions. We use these answers for one purpose: to understand your business and decide together whether we should work with each other. We write back about your request. We do not add you to a mailing list.

Each assessment request holds your answers, the date and time it arrived, a reference code, and its follow-up status. Vercel, which hosts the site, handles the technical details of every request, such as your IP address, the way any web host does, to serve and protect the site. We do not attach those details to your assessment request.

If saving fails, the site offers to open your email app with your answers already filled in, so nothing is lost. Sending that email is your choice.

When you visit the site

We use Vercel Web Analytics to count page views. It uses no cookies. Each visit is counted with a short-lived code made from the request, which Vercel discards within a day. What we see is which pages were read, roughly where from (country and city), what kind of device, and which site sent you. Nothing names you, and nothing follows you to other sites.

Our private, signed-in Audit tool uses a session cookie to keep an authorized visitor signed in. It is separate from website analytics and is not used for advertising.

When you email us

If you write to info@flowsolve.ai or to a founder, we keep the conversation the way any business keeps its email, so we can follow up and remember what we agreed.

When we work together

For an assessment, we review the business information you agree to share with us. For implementation, we may also work inside the systems where the work happens: email, accounting, CRM, documents, and the tools your team uses. We, and the AI agents we run, act in those systems under the authority you agree to in writing before we begin. What we see there is yours. We use it only for the engagement, and only as far as the agreed authority reaches. Your business stays responsible for the information of its own customers and staff; we handle it on your instructions, the way any provider working inside your systems does.

We also keep what is needed to contract and invoice you, such as your business details and the terms we agreed. We do not collect payment details through this site.

Where it is stored

• Assessment requests live in a private storage area on Vercel, in the United States. Only people with the intake password or administrator access to our Vercel project can open it. Today that means the founders.
• The site itself runs on Vercel and is served from its network around the world.
• Email lives in Microsoft 365.
• During an engagement, your information stays in your systems, in the systems we build for you, and in the tools that run our agents. When an agent works, what it reads passes through the AI model provider it uses, most of which are in the United States, or runs on hardware we control. Where we host something for you, we tell you where it runs.

Because some of this is stored or processed outside Canada, it can be subject to the laws of the country it sits in, including the United States.

Who sees it

Assessment requests and email about your business are read by the founders, Frederick Paatz, Evan Bremer, and Andrew Van Dixhoorn, and by the AI tools we use to do our own work, under the same no-training terms described below. Anyone else we bring in to help is bound by the same rules as this page.

The companies that host our tools see data only as needed to run their service: Vercel for the site, storage, and analytics; Microsoft for email; and, during engagements, the providers of the AI models our agents use. We use AI providers only under business or API terms that say they do not train on what passes through.

We never sell your information. We never share it with advertisers. We never use it to train or tune a model for anyone but you. If a build for you ever calls for a model tuned on your own data, that model is yours, and we agree it in writing first.

We would share information if the law required it, and we would tell you unless the law said we could not.

AI agents and your business

Our agents read, write, and act inside your systems so that work gets done. A few rules hold for every one of them:

• They act under the authority you granted, and no further.
• What they do is recorded, so you can see what happened.
• You decide which actions an agent may take on its own and which wait for a person. We agree that before it runs, and you can change it.
• What they learn about your business is used for your business only. It does not travel to another client.

How long we keep it

• Assessment requests: 12 months from the day they arrive, unless we start working together. Then they become part of the engagement record.
• Email: while the conversation is live and for two years after the last message. Email that records an agreement is kept with the contract.
• Engagement information: for the length of the engagement. Within 30 days after it ends, we return or delete the business information we hold, keeping only what our contract, the law, or an open dispute requires. If you have asked us to keep maintaining what we built, we also keep what that needs.
• Contracts, invoices, and other records the law requires us to keep: as long as the law says. In Canada that is generally six years.
• Analytics: Vercel keeps page-view records for as long as our plan allows. None of them names you.

Ask us to delete something sooner and we will, unless a contract or the law requires us to keep it.

Your rights

Wherever you are, you can ask us to:

• Tell you what we hold about you.
• Correct it.
• Delete it, unless a contract or the law requires us to keep it.
• Stop using it. During an engagement, that may mean stopping the part of the work that needs it.

Write to info@flowsolve.ai. We answer within 30 days. If we ever need longer, which the law allows in a few situations, we tell you why. There is no charge. If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.

How we protect it

Everything sent to this site travels over an encrypted connection. Assessment requests sit in private storage behind a password. Access is limited to the people who need it, and agents act only under agreed authority. No system is perfect. If we ever lose control of your information in a way that could seriously harm you, we tell you, and the regulator, as soon as we can.

Children

This site and our work are for businesses. We do not knowingly collect information from anyone under 18.

Changes

When this policy changes, we update the date at the top. If a change affects how we use what we already hold, we tell the people it affects.

Contact

info@flowsolve.ai