Legal
Privacy Policy
Last updated: May 7, 2026
01
Introduction
FocalFlowAI.com is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using FocalFlowAI.com you agree to the practices described in this policy.
02
Information We Collect
We collect the following categories of information:
- Account information — your name and email address provided through Google Sign-In.
- Gmail data — incoming email content from your inbox, limited to identifying and processing booking inquiries. We read only what is necessary to provide the service.
- Google Calendar data — event dates and times, used solely to surface availability information within the platform.
- Studio and package information — business details, package names and rates, availability settings, and preferences you enter during onboarding and in settings.
- Inquiry and client information — inquiry data, notes, deliverable records, and workflow state that you enter or that is automatically imported from your inbox.
- Payment information — subscription billing is handled entirely by Stripe. FocalFlowAI.com never stores your card number, CVV, or full payment details. We receive only a Stripe customer ID and subscription status.
03
How We Use Your Information
We use your information solely to provide and improve the FocalFlowAI.com service, including:
- Generating AI-assisted draft email responses using Anthropic's Claude API.
- Checking your Google Calendar availability when composing responses.
- Managing your inquiry pipeline and workflow state.
- Processing subscription payments through Stripe.
- Sending product and account-related notifications to your registered email address.
04
What We Do Not Do
- We never sellyour personal data or your clients' data to any third party.
- We never use your data for advertising or marketing purposes unrelated to FocalFlowAI.com.
- We never share your data with third parties except Stripe (payment processing) and Anthropic (AI draft generation), both of whom are bound by strict data processing agreements.
- We never read emails beyond what is necessary to identify and process booking inquiries for you.
05
Google API Disclosure
FocalFlowAI.com's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- We access Gmail solely to read booking inquiries and, with your explicit approval, to send responses you have reviewed and authorized. We do not read, store, or analyze other email content.
- We access Google Calendar solely to check availability for scheduling purposes within the platform.
- We do not use Google user data to develop, improve, or train generalized AI or machine learning models.
- We do not transfer Google user data to third parties except as necessary to provide the service, as described in this policy.
06
Data Storage and Security
Your data is stored in a secure cloud database (Supabase) with row-level security enabled, ensuring that each user can only access their own data. OAuth tokens for Gmail and Google Calendar are encrypted at rest. We use industry-standard TLS encryption for all data in transit. While we implement reasonable security measures, no system is completely secure, and we cannot guarantee absolute security of your data.
07
Data Retention
Your data is retained for as long as your account is active. If you delete your account or your account is terminated, your data will be permanently and irreversibly deleted from our systems within 30 days. Backup copies may persist for up to an additional 30 days before being purged from backup storage.
08
Your Rights
You have the right to:
- Access — request a copy of the personal data we hold about you.
- Correction — request correction of inaccurate or incomplete data.
- Deletion — request deletion of your account and all associated data.
- Revocation — revoke Gmail and Google Calendar access at any time through your Google account at myaccount.google.com/permissions.
To exercise any of these rights, contact us at info@focalflowai.com. We will respond within 30 days.
09
Cookies
FocalFlowAI.com uses only essential session cookies that are strictly necessary for authentication and maintaining your signed-in state. We do not use tracking cookies, advertising cookies, or any third-party analytics cookies.
10
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email to the address associated with your account, at least 14 days before the changes take effect. Your continued use of FocalFlowAI.com after the effective date constitutes your acceptance of the revised policy.
11
Contact
If you have questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us at info@focalflowai.com.