10.1 Roles
You are the Data Controller of your personal data; Flumes AI is the Data Processor.
10.2 Purpose of Processing
We process personal data solely to provide the Service: reply generation, classification, follow-ups, and performance improvement.
10.3 Security Measures
We implement appropriate technical and organizational measures:
Encryption at rest and in transit
Role-based access control
Use of secure cloud infrastructure (Supabase, Google Cloud)
10.4 Subprocessors
We may use subprocessors (e.g., Supabase, OpenAI) under strict agreements. A list is available on request.
10.5 Transfers Outside the EU
We ensure transfers outside the EU comply with GDPR, using Standard Contractual Clauses or Data Privacy Framework membership.
10.6 Data Subject Rights
You may request access, correction, deletion, restriction, portability, or object to processing.
Contact:
alex@flumes.ai
10.7 Retention
We retain data only as long as necessary for Service provision or legal compliance.