Privacy Policy

1. About This Policy

This Privacy Policy explains how FlowLogic Systems LLC (“FlowLogic,” “we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with the FlowLogic platform at https://app.flowlogicsystems.net and our website at https://flowlogicsystems.net (together, the “Service”).

FlowLogic is a business-to-business product used by sheet metal and mechanical contracting companies. Most of the information we handle is business information about companies and their projects, not consumer information.

If you are an employee or contractor of a company that subscribes to FlowLogic, that company controls your account and decides what data goes into the Service. Questions about that company’s own data practices should go to that company.

2. Information We Collect

2.1 Information You Provide

Account and profile information. Name, business email address, phone number, job title, and role assignment. Authentication is handled by our identity provider; we do not store passwords in readable form.

Company information. Company name, business address, and the shop configuration settings you enter, such as labor rates, crew sizes, fitting and size factors, material costs, overhead, and markup.

Project and job data. Job names, customer and general contractor names, project addresses, takeoff line items, shop plans, work centre assignments, quantities, weights, labor hours and crew days, pricing, and proposals.

Uploaded documents. Drawings, blueprints, plan sets, specifications, submittals, and other project files you upload.

Billing information. Billing contact, billing address, and subscription plan. Payment card details are collected and processed directly by Stripe and are not stored on our systems. We receive only limited information such as the card brand, last four digits, expiration date, and transaction status.

Communications. Messages you send us for support, sales, or feedback.

2.2 Information Collected Automatically

Usage data. Pages and features accessed, actions taken within the Service, jobs opened, exports generated, and timestamps.

Device and log data. IP address, browser type and version, operating system, device identifiers, referring page, and error logs. We may infer approximate location, such as country or region, from IP address for security and fraud prevention. We do not collect precise geolocation from your device.

Cookies and similar technologies. See Section 7 and our Cookie Policy.

2.3 Information From Third Parties

We may receive information from our payment processor about the status of your subscription and payments, and from service providers that help us with security, fraud prevention, and email deliverability.

3. How We Use Information

We use information to:

• provide, operate, and maintain the Service, including generating estimates, shop plans, and proposals from your inputs;
• create and manage accounts, authenticate users, and enforce role-based access;
• process subscriptions, payments, renewals, and invoices;
• send transactional messages such as account notices, proposal delivery, password resets, billing notices, and security alerts;
• provide customer support and respond to your requests;
• monitor, secure, and troubleshoot the Service, including detecting fraud and abuse;
• analyze usage to understand which features are used and to improve the product;
• develop and improve automated blueprint recognition and other machine learning features, as described in Section 5;
• send product and marketing communications, from which you may opt out at any time; and
• comply with legal obligations and enforce our Terms of Service.

4. Legal Basis and Necessity

We process this information because it is necessary to perform our contract with the subscribing company, because we have a legitimate business interest in operating and securing the Service, or because we are required to by law.

5. Automated Processing and Machine Learning

Certain features of the Service use automated document analysis to read uploaded drawings and extract fittings, dimensions, and quantities. To provide these features, uploaded documents may be transmitted to and processed by the third-party artificial intelligence provider identified in Section 6, acting as our subprocessor under contractual confidentiality and security obligations. Under our agreement with that provider, content submitted through the Service is processed to return a result to us and is not used to train the provider’s general-purpose models.

We may use aggregated and de-identified data derived from your use of the Service to improve our own models and features. De-identified data does not identify you, your company, your Authorized Users, your customers, your project locations, your labor rates, or your bid pricing, and we do not attempt to re-identify it. We do not retain uploaded drawings or images derived from them for model training unless identifying content in title blocks and annotations has first been removed.

Automated extraction results are presented to a user for review before they are used, and the Service does not make decisions producing legal or similarly significant effects about any individual.

6. How We Share Information

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

We disclose information only as follows.

Within your organization. Data you enter is visible to other Authorized Users of your company account according to the role permissions your administrator configures.

Service providers (subprocessors). We use the following providers to operate the Service. Each is bound by contractual obligations to protect the data and to use it only to provide services to us.

Legal and safety. We may disclose information if required by law, subpoena, or other legal process, or where we believe disclosure is reasonably necessary to protect the rights, property, or safety of FlowLogic, our customers, or the public.

Business transfers. If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction. We will give notice before your information becomes subject to a materially different privacy policy.

With your direction. We share information when you ask us to, such as when you email a proposal to your customer through the Service.

7. Cookies and Tracking

We use cookies and similar technologies on our marketing site and in the application. Strictly necessary cookies support login, session management, and security, and cannot be disabled. Your cookie consent choice is also stored on your device so we do not ask again on every visit. Non-essential cookies, meaning functional and analytics cookies, are used only on our marketing site, and you can accept or reject them through the cookie banner shown on your first visit. Full detail is in our Cookie Policy.

We do not use advertising or cross-site tracking cookies, and we do not permit third parties to set cookies on our site to build advertising profiles.

8. Data Retention

We retain account and company information for as long as your account is active. Project and job data is retained for as long as your account is active or as long as you keep the job in the Service.

After termination of your subscription, we retain Customer Data for thirty (30) days to allow you to request an export, after which we delete or de-identify it, except where we are required to retain it by law or reasonably need it to resolve a dispute or enforce our agreements. This mirrors Section 8.5 of our Terms of Service.

Billing and transaction records are retained as required by tax and accounting law. Residual copies may persist in encrypted backups after deletion from the live system; those backups are overwritten within sixty (60) days on our normal rotation.

9. Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect information, including encryption of data in transit, encryption of data at rest by our hosting and database providers, role-based access controls, tenant isolation so that one company’s data is not accessible to another, and restricted administrative access.

If we become aware of a security incident affecting your data, we will notify you as described in Section 12.1 of our Terms of Service.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential and for promptly removing access for personnel who leave your company.

10. Your Choices

Access and correction. You can view and update most account and company information directly in the Service. Your company administrator can update or remove Authorized User accounts.

Marketing email. You can opt out of marketing email using the unsubscribe link in those messages. You cannot opt out of transactional messages about your account, billing, or security while your account is active.

Deletion. You may request deletion of your account and data by contacting us at privacy@flowlogicsystems.net. If you are an Authorized User rather than the account holder, we will refer your request to your company administrator.

Do Not Track. Our Service does not currently respond to browser Do Not Track signals.

11. California Privacy Rights

This section applies to California residents and supplements the rest of this Policy.

11.1 Categories of Personal Information

We collect the following categories of personal information as defined by the California Consumer Privacy Act:

• Identifiers — name, business email address, phone number, business address, IP address, and account identifiers. This includes identifiers of third parties that you enter or upload, such as the names and addresses of your customers, general contractors, architects, and engineers, and identifying content appearing in uploaded drawings and specifications.
• Commercial information — subscription plan, transaction and billing records, and records of jobs and proposals created in the Service.
• Internet or network activity — usage data, feature access, and log data.
• Professional or employment-related information — employer, job title, and assigned role.
• Geolocation data — approximate location inferred from IP address at the country or region level. We do not collect precise geolocation.

We collect these categories from you, from your employer’s account administrator, from documents you upload, and automatically through your use of the Service. We use them for the purposes described in Section 3, retain them as described in Section 8, and disclose them to the categories of recipients described in Section 6.

We do not collect sensitive personal information as that term is defined by California law, and we do not use or disclose personal information for purposes other than those disclosed in this Policy.

11.2 No Sale or Sharing

We do not sell personal information and we do not share personal information for cross-context behavioral advertising, and we have not done so in the preceding twelve months. We do not knowingly sell or share the personal information of consumers under 16 years of age.

11.3 Your Rights

California residents have the right to know what personal information we collect, use, and disclose; to request deletion; to request correction of inaccurate information; to opt out of sale or sharing (which does not apply, as we do neither); and not to receive discriminatory treatment for exercising these rights.

To make a request, contact privacy@flowlogicsystems.net. We will verify your identity before responding, typically by confirming control of the email address associated with your account. You may use an authorized agent, in which case we may require proof of authorization.

We will respond within the timeframes required by law, generally within 45 days, and may extend once where permitted.

11.4 Other State Privacy Laws

Residents of other states with comprehensive privacy laws may have similar rights to access, correct, delete, and obtain a copy of their personal information. Contact us at the address above and we will honor applicable rights.

12. Children’s Privacy

The Service is a business tool used in a workplace setting. We do not market it to children and we do not knowingly collect personal information from anyone under 16. Where a subscribing company adds a lawfully employed minor as an Authorized User, that company is responsible for any consents or notices required by applicable law. If we learn that we have collected information from a child in violation of law, we will delete it.

[See the corresponding note in Section 3 of the Terms of Service — this needs a deliberate decision, not boilerplate, because sheet metal apprentices are often 17.]

13. International Users

The Service is operated in the United States and is intended for users in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to, stored in, and processed in the United States, where privacy laws may differ from those of your jurisdiction.

14. Changes to This Policy

We may update this Policy from time to time. We will update the “Last Updated” date above, and for material changes we will provide notice by email or through the Service before the change takes effect.

15. Contact Us

Questions, requests, or complaints about this Policy or our handling of information:

FlowLogic Systems LLC
253 Ester Lane, Manchester, Tennessee 37355
privacy@flowlogicsystems.net