Privacy Policy

Introduction

This Privacy Policy explains how FloGPT ("we", "us") collects, uses, discloses, and protects your information when you use our websites, applications (including the floGPT Support app for Android and iOS), chat widgets, and related services (collectively, the "Services").

Information We Collect

• Account information: name, email address, organization, and authentication identifiers.
• Usage data: device and browser metadata, IP address, log data, timestamps, feature usage, crash reports.
• Content: documents and data you upload or connect for knowledge base indexing and chatbot responses.
• Cookies and similar technologies: session identifiers, preferences, and analytics (see the Cookie Policy).

How We Use Information

• Provide, operate, and improve the Services.
• Configure, train, and evaluate chat workflows and knowledge retrieval.
• Personalize features and remember preferences.
• Monitor security, prevent abuse, and debug issues.
• Comply with legal obligations and enforce Terms.

Sharing and Disclosure

We do not sell personal data. We may share data with service providers (e.g., cloud hosting, analytics) under contractual obligations, with your consent, or when required by law.

Data Retention

We retain data only as long as necessary for the purposes described or as required by law. You may request deletion, subject to legal and operational limitations.

Your Rights

Depending on your location, you may request access, correction, deletion, restriction, portability, or objection to processing. Contact us to exercise your rights; we will verify your request.

Microphone access

The floGPT Support app uses the microphone only so you can place and receive voice calls, including a call you take over from an AI agent. The app asks for microphone permission when you place or answer a call. It does not open the microphone while you are not on a call, and it does not record audio outside a call.

Call audio recordings

Calls you place or answer in the app may be recorded. When a call is recorded, the recording is stored with the call log on floGPT. Authorized users of the customer organization the call belongs to can play it. We can also access a recording to operate the service. While a recording is still held by the voice carrier, Twilio stores that copy for us.

We do not apply one fixed retention period to every recording. A recording is kept until the organization deletes it or the organization account is closed.

The customer organization is responsible for telling callers that a call may be recorded, and for obtaining any consent the law requires.

Push notifications and device tokens

The app registers push tokens so we can deliver messages and incoming-call alerts. We use these tokens for that purpose. We do not use them for advertising.

• Expo push token: our servers send chat, ticket, and call notifications through Expo's push service. Expo delivers them with Apple Push Notification service (APNs) on iOS and Firebase Cloud Messaging (FCM) on Android.
• VoIP push token (iOS): the Twilio Voice SDK registers a PushKit token with APNs so an incoming call can ring the phone, including when the app is in the background or closed.
• FCM token (Android): the Twilio Voice SDK uses Firebase Cloud Messaging so an incoming call can ring the phone.

With the Expo token we also store a device identifier, the device name, and the app version, so a notification is sent to the device that is signed in.

Service providers

For the floGPT Support app, the companies below process data on our behalf so the app can work. We do not sell personal data. We do not share it for advertising.

• Twilio provides voice calling. The Twilio Voice SDK sends call-quality diagnostics to Twilio, including audio and network quality and device details the SDK includes. The app does not turn that reporting off.
• Google Firebase (Firebase Cloud Messaging) delivers push messages on Android, including incoming-call alerts. As part of that service, Firebase may assign an installation identifier.
• Expo delivers push notifications to the app and passes them on to APNs and FCM.

Data the mobile app collects

In the floGPT Support app we collect the information below. It is encrypted in transit. We use it for app functionality and, where noted, account management. We do not use it for advertising, and the app does not use an advertising ID.

• Name (required): your profile name. App functionality and account management.
• Email address (required): the email you use to sign in. App functionality and account management.
• User ID (required): your floGPT user ID, your organization membership, and the sign-in tokens stored on the device. App functionality and account management.
• Phone number (optional): the forwarding number you enter for yourself on the Account screen, if you choose to save one. App functionality. The app does not read the contacts on your phone.
• Voice or sound recordings (optional): only if you place or answer a call. Your voice on that call is stored in the call recording. App functionality.
• Other in-app messages (required): chat replies, ticket replies, and notes you write. App functionality.
• Call logs (optional): for calls placed or answered in the app, the phone number, the time, and the duration, and the recording when there is one. The app does not read the call history stored on your phone. App functionality.
• Device or other IDs (required to deliver notifications and calls): the Expo push token, a device identifier, the device name, the app version, FCM and APNs tokens, and the VoIP push token. App functionality.
• Diagnostics (required): call-quality diagnostics the Twilio Voice SDK sends to Twilio for calls in the app. App functionality.

Account and data deletion

You can ask us to delete your account and the personal data associated with it by emailing privacy@flogpt.com from the email address on the account. The floGPT Support app does not include a delete-account control.

When we complete that request, we delete the account: your name, email address, user ID, and sign-in credentials; the forwarding phone number saved for you; and the device and push tokens registered for the app.

Chat messages, ticket messages, call logs, and call recordings are records of the customer organization. Deleting your staff account does not by itself erase them. They stay until the organization deletes them or the organization account is closed. We may also keep information we are required to keep for legal, security, or billing reasons.

We handle each request and confirm when it is finished.

Contact

Questions? Email privacy@flogpt.com