Privacy Policy

01 Who we are

FlowLinks (“FlowLinks”, “we”, “us”, or “our”) is an AI video platform that turns the cameras a business already owns into real-time operational sensors — detecting safety, security, compliance and operations events and alerting the right person. The website at flowlinks.ai and the FlowLinks platform are prodcut of Grey Matterz and are operated by Grey Matterz.

This Privacy Policy describes how we handle personal information — any information that identifies or can reasonably be linked to an individual. It applies to visitors to our website, people who respond to our ads or contact us, our customers and partners, and individuals whose information is processed through the platform.

02 Our two roles

How we handle personal information depends on the context, and we act in one of two roles:

• As a controller / business. For our website, marketing, advertising and sales — and for our own customer and partner accounts — FlowLinks decides why and how personal information is used. This policy governs that activity.
• As a processor / service provider. For the video and operational data processed on behalf of a customer who deploys FlowLinks, the customer is the controller. We process that data only on their documented instructions and under our agreement with them. How individuals captured on a customer's cameras are treated is governed by that customer's own privacy notice — not this one. See section 08.

03 Information we collect

Information you give us

• Contact & enquiry details — your name, email, phone number, company, role, country, and anything you write when you book a demo, request pricing, respond to one of our ads, subscribe to updates, or email or call us.
• Partner / installer details — business and contact information when you apply to or operate within our partner programme.
• Account details — if you use the platform, your login credentials, user profile and role-based permissions.

Information we collect automatically

• Device & usage data — IP address, approximate location derived from it, browser type, operating system, device identifiers, the pages you view, the site that referred you, and timestamps.
• Cookies & similar technologies — small files and identifiers placed on your device. See section 05.

Information from third parties

• Advertising & analytics platforms — when you interact with our ads or visit our site, partners such as Meta (Facebook/Instagram), Google and LinkedIn share measurement and audience data with us.
• Referrals — if a FlowLinks partner or installer introduces you, we receive the contact details they provide.

04 How we use information

We use personal information to:

• Respond to your enquiries and provide demos, quotes and pricing.
• Provide, operate, secure and improve our website and the platform.
• Send you service messages and — where you have asked for them or where permitted — marketing communications you can opt out of at any time.
• Run and measure our advertising, including on Meta and other platforms (see section 06).
• Understand how our website is used so we can improve it.
• Prevent fraud and abuse, and keep our services secure.
• Comply with our legal obligations and enforce our terms.

Where the EU/UK GDPR applies, we rely on these legal bases: your consent (e.g. marketing cookies and emails); performance of a contract (e.g. providing the platform); our legitimate interests in running and growing our business, balanced against your rights; and compliance with a legal obligation.

05 Cookies & tracking technologies

We use cookies and similar technologies that fall into three groups:

• Strictly necessary — required for the site to work (e.g. security, load balancing). These cannot be switched off.
• Analytics — help us understand how the site is used so we can improve it.
• Advertising — used to measure and target our ads, including the technologies described in section 06.

Where required by law, we ask for your consent before setting non-essential cookies. You can also manage cookies through your browser settings; blocking some cookies may affect how the site works.

06 Advertising & social media

We advertise on platforms including Meta (Facebook and Instagram), Google and LinkedIn. To run and measure these ads, we use tools such as the Meta Pixel and Conversions API and similar tags from other platforms. These tools may:

• Tell us when an ad led to a visit, a form submission or another action.
• Help us show ads to people likely to be interested, including through custom and lookalike audiences.
• Set cookies or receive event data such as page views and form submissions.

If you submit a lead form on a social platform, that platform shares the details you provided directly with us so we can follow up. You can control ad personalisation through your Meta ad preferences, Google Ads settings, and industry opt-out tools such as YourAdChoices.

07 How we share information

We do not sell your personal information for money. We share it only as described here:

• Service providers who process data on our behalf — hosting, CRM, email delivery, analytics and advertising platforms — under contracts that limit them to our instructions.
• Partners & installers — where you engage with FlowLinks through a partner, we may share your enquiry with them so they can serve you.
• Corporate transactions — in connection with a merger, acquisition or sale of assets, with appropriate safeguards.
• Legal & safety — where required by law, to enforce our terms, or to protect the rights, safety and security of FlowLinks, our users or the public.

Some advertising cookies (section 06) may constitute a “sale” or “sharing” of personal information under certain US state laws. You can opt out as described in section 12.

08 The platform & your video

When a business deploys FlowLinks, the platform processes camera footage and operational data on that business's behalf. In that context the business is the controller and FlowLinks is a processor (section 02). The following principles apply to how the platform is built:

• You choose where video lives. The same AI can run on the camera, on an on-site box, or on a central server you control — so footage can stay on your premises and, where needed, in-country.
• It is not a facial-recognition identity database. FlowLinks detects events and conditions, not the identities of members of the public.
• Privacy by design. Analytics are aggregate and non-identifying by default; privacy-sensitive attributes are opt-in and are not stored against an identity.
• Encrypted and access-controlled. Data is encrypted in transit and at rest, access is role-based, and actions are logged.
• Customer-controlled retention. The deploying customer sets how long footage and detections are kept.

If you believe your image was captured by a camera running FlowLinks and you want to exercise rights over that footage, please contact the business that operates the camera — they are the controller of that data.

09 Data retention

We keep personal information only for as long as we need it for the purposes described in this policy — for example, to respond to your enquiry, manage our relationship with you, meet legal, tax and accounting obligations, and resolve disputes. Marketing data is kept until you unsubscribe or it is no longer needed. Platform data is retained according to the agreement with the relevant customer. When information is no longer needed, we delete or anonymise it.

10 How we protect data

We use appropriate technical and organisational measures to protect personal information, including encryption in transit and at rest, role-based access controls, access logging, and least-privilege practices. No system is perfectly secure, but we work to protect your information and to respond promptly if an issue arises.

11 International transfers

FlowLinks operates in the United States, India and the UAE, and uses service providers in various countries. As a result, your information may be processed outside the country where you live, including in the United States. Where we transfer personal information from the EU/UK or other regions with transfer restrictions, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum) or another lawful mechanism.

12 Your privacy rights

Depending on where you live, you have rights over your personal information. We honour these requests regardless of where you are; the exact rights and limits depend on the law that applies to you.

How to exercise your rights

Email us at info@flowlinks.ai with your request. We may need to verify your identity before acting, and we will respond within the timeframe required by the applicable law.

13 Children's privacy

Our website and the platform are intended for businesses and are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

14 Third-party links

Our website may link to third-party sites and services that we do not control. This policy does not apply to those sites — please review their own privacy policies.

15 Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page, and — where the change is significant — provide a more prominent notice. Your continued use of our website or the platform after an update means you accept the revised policy.

16 How to contact us

For any question about this policy or to exercise your privacy rights, contact us: