Privacy Policy

• Account and sign-in data: email address, account identifiers, authentication records, and information provided by an enabled sign-in provider such as Google.
• Service and market data: markets you select, coverage and subscription status, and records of service activity needed to provide and protect your account.
• AI research: questions, selected market or business references, and generated answers and evidence used by Ask Your Market.
• Billing data: Stripe customer and subscription identifiers, billing status, invoice and payment-event records, and billing contact information. Stripe collects and processes payment-card details through its payment services; the application does not store your full card number.
• Business profile information: records may include a business's name, category, location, listed services, website, and available professional contact details. Some details may identify an individual, such as a sole proprietor or business contact.
• Technical request data: hosting, security, and delivery providers may process information such as IP address, browser and device details, request time, and requested page to serve and protect the website.

• create and secure accounts and provide sign-in and recovery;
• provide subscribed markets, profiles, observations, and research;
• manage subscriptions, payments, cancellations, and billing support;
• send service, verification, and account-related messages;
• prevent abuse, investigate errors, and maintain service security;
• respond to requests and comply with applicable legal obligations.

Where UK or EU data-protection law applies, we generally rely on the contract with you to provide requested account and subscription features, legitimate interests to secure and troubleshoot the service, legal obligations to retain required records, and consent where the law requires it for a particular processing activity.

Business profiles are assembled from prepared datasets and other sources relevant to a market. We store observations and source-related details to provide dated records and show changes. The dataset can be incomplete or out of date, and it may include publicly available professional contact information.

If you are a business representative or a person whose information appears in a profile, contact us at support@flonsa.com with the profile and the correction or removal you are requesting. We will review the request and take action where appropriate or required by law; some information may be retained or continue to appear where we have a lawful basis to do so.

When Ask Your Market is enabled and you submit a question, we send that question and relevant market or business context to the AI provider configured for the service so it can generate a response. AI questions and results are stored in the application and scheduled for deletion after 90 days. Do not include sensitive personal information in a research question.

We use service providers to host and operate the service, send authentication emails, process payments, and provide AI responses. These providers receive information needed for their services and process it under their own terms and privacy practices. Payment processing is provided by Stripe; authentication emails are sent through Resend; and sign-in may involve Google if you choose that method.

Some providers may process information in countries outside the United Kingdom or your country of residence. Where applicable law requires safeguards for an international transfer, we will use the required transfer mechanism. Contact us to request details about the safeguards applicable to your information.

The website loads fonts from Google Fonts. Your browser contacts Google's font services to retrieve those fonts and may send technical request information as part of that connection.

We do not currently run analytics or advertising trackers. The app's sign-in session identifier is stored in browser local storage and sent to the service with authenticated requests; it is not stored in a session cookie. Social sign-in uses short-lived, HTTP-only cookies to protect the sign-in redirect and its security state. Some app flows also use browser session storage for temporary in-progress state.

If you continue from our website to Stripe-hosted checkout, Stripe may use its own cookies or similar technologies under Stripe's policies.

We keep account and subscription information while needed to provide the service, administer billing, address disputes, protect the service, and meet legal obligations. AI query records are scheduled for deletion after 90 days. Processed Stripe webhook records are scheduled for deletion after 365 days. Business observations may be retained to provide the historical record described by the service. Deletion can take longer where processing is delayed or retention is required for legal, security, or billing reasons.

You can update account details through account settings where that feature is available. You can also contact us to request access to, correction of, or deletion of information associated with you. We may need to verify your request and may retain information needed for billing, security, dispute handling, or legal obligations. The rights available to you depend on applicable law. Depending on your location, you may also have rights to object to or restrict certain processing, request a copy in a portable format, or withdraw consent where consent is the basis for processing. UK residents may complain to the Information Commissioner's Office (ICO). EU residents may complain to the supervisory authority in their country. Rights available to US residents vary by state.

We use reasonable measures intended to protect information, but no internet transmission or storage system can be guaranteed completely secure. We may update this Policy by posting a revised version here and changing the date above.

Privacy requests and questions: support@flonsa.com. Service operator: Vulcan Tech Limited, United Kingdom. Postal address: Office 1606, 182-184 High Street North, East Ham, London, E6 2JA, United Kingdom.