Privacy Policy

1. Information we collect

1.1 Information you provide

• Account information: your name, email address, password hash, verification state, legal acceptance, and workspace membership.
• User Content: notes, links, imported text and spreadsheets, voice transcripts, connected-repository metadata, and other materials you add to your workspace. User Content may contain personal data about you or other people.
• Communications: messages you send for support or feedback.

1.2 Information collected automatically

• Usage data: product actions and timestamps used to operate, secure, and improve the Service.
• Operational data: request method, route template, status, duration, and security records. Our application logs are designed to omit request bodies, query values, cookies, and secrets. Our hosting provider may process connection data such as IP address and device or browser information.
• Browser storage: an essential session cookie and local interface preferences. We do not currently use advertising cookies.

2. How we use information

We use information to:

• provide, operate, and maintain the Service, including storing, selecting, and analyzing User Content;
• generate AI-powered observations and evidence-backed insights;
• personalize and improve product features;
• communicate about your account, updates, support, and feedback;
• monitor reliability, detect abuse, and secure the Service; and
• comply with legal obligations.

2.1 AI processing and Groq

When you start or schedule analysis, Flare selects a bounded set of workspace content and sends it to Groq, our AI provider, for inference. Groq processes that content to extract observations and generate candidate Flares. Flare validates the returned structure and supporting evidence before publishing a result.

Groq states that it does not use API inputs or outputs to train models unless the customer explicitly permits it. Groq also states that inference data is not retained by default, except in limited circumstances for service reliability or abuse monitoring, which may last up to 30 days. Groq organization administrators can enable Zero Data Retention in Groq Data Controls. See Groq's current data documentation for details.

Flare does not use your User Content to train third-party foundation models.

2.2 Automated decision-making

Flare does not use automated decision-making that produces legal or similarly significant effects. AI-generated Flares are informational. You decide whether and how to act on them, and you should review the cited evidence first.

3. Legal bases for processing

Where the GDPR, UK GDPR, or similar law applies, we rely on performance of a contract to provide the Service; legitimate interests to secure and improve it; consent where specifically requested; and legal obligation where required. You may object to or withdraw consent from processing that relies on consent. Withdrawal does not affect processing already carried out lawfully.

4. How we share information

• Service providers: cloud hosting, databases, AI processing including Groq, email delivery, analytics, support, and integrations you connect. They receive information needed to provide their function.
• Legal requirements: where disclosure is required to comply with law, legal process, or a valid governmental request.
• Business transfers: in connection with a merger, financing, acquisition, or sale of assets, subject to appropriate protections.
• With your direction: when you ask or authorize us to share information.

We do not sell personal information or share it for cross-context behavioral advertising.

5. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, restrict, object to processing, or receive a portable copy of personal information. California residents may also request information about categories collected and disclosed and may exercise applicable correction, deletion, opt-out, limitation, and non-discrimination rights. We do not sell or share personal information for cross-context behavioral advertising.

Send a request to support@flare4u.tech. We may verify your identity before fulfilling it and will respond within the period required by applicable law.

6. Children’s privacy

The Service is not intended for anyone under 16, or the higher age of digital consent required in their jurisdiction. We do not knowingly collect personal information from children. Contact us if you believe a child has provided data.

7. Data retention

We retain account information and active User Content while needed to provide the Service. Analysis jobs, generated results, security records, and operational logs are retained only as needed for product operation, reliability, abuse prevention, and legal obligations. Deleted information may remain temporarily in restricted backups. To request account and User Content deletion, contact support@flare4u.tech. We may retain limited records where required for security, dispute resolution, fraud prevention, or law.

8. Cookies and similar technologies

We use an essential HttpOnly cookie for authentication and local browser storage for interface preferences. Product activity events may be used for service analytics. You can control cookies through browser settings, but disabling the session cookie prevents authenticated features from working.

9. Data security

Flare uses safeguards including password hashing, restricted HttpOnly sessions, encrypted transport, secret management, database role separation, workspace isolation, and limited application logging. No transmission or storage system is completely secure, and we cannot guarantee absolute security.

10. International users and transfers

Flare's production infrastructure is hosted in the United States. If you use the Service elsewhere, information may be transferred to and processed in the United States, where laws may differ. Where required, we rely on contractual or other legally recognized safeguards offered by our service providers for international transfers.

11. Changes to this policy

We may update this Policy as the Service changes. We will post the new effective date and provide additional notice or request renewed acceptance when required.

12. Contact us

Data controller: Flare, United States. Questions, privacy requests, and data protection inquiries may be sent to support@flare4u.tech.