Privacy Policy

FlowState is operated by iAoT Group 369 (Dr. Joshua T. Fraser). This policy explains what we collect, why, who we share it with, and the choices you have. It reflects how the platform actually handles data today.

What we collect

We collect only what a feature needs to work: assessment answers and the optional name and email of a respondent; the name, email, and message you send through a contact or feedback form; the messages you type into our assistant; and, for organizations using our scheduling and intelligence tools, the names, emails, and contributions of their members. We do not collect payment information, and we do not sell personal information.

Why we collect it

To deliver the assessment, intelligence, and reflection tools you or your organization asked for, to respond to your inquiries, and to improve the product. We do not use your personal contributions to train AI models.

Anonymity

Several of our tools are built to keep individual contributions anonymous. Where a tool is anonymous, identifying fields are optional, and any email used to recognize your return visits is stored only as a one-way hash that we cannot turn back into your address.

AI features

Some features send content to a third-party AI provider (Anthropic) to generate a response. Before that happens, we review what is sent and exclude or pseudonymize personal identifiers. The provider does not retain that content to train its models, per its data policy.

Who we share it with

We use a small set of service providers to run the platform: Vercel for hosting, Supabase for the database, authentication, and file storage, and Anthropic for AI models. We share with them only what they need to provide their service. We do not share your personal information with anyone else except where the law requires it.

How long we keep it

We keep personal information while your account or your organization's engagement is active, and then for a limited period afterward. You can ask us to delete it at any time.

Your choices

You may ask what personal information we hold about you, ask us to correct it, ask us to delete it, and opt out of non-essential uses. To make a request, email fraserjt@gmail.com or visit our data request page. For anonymous contributions, we may be unable to identify which records are yours, which is the point of the anonymity.

California and EU residents

If you are a California or EU resident, you have specific rights over your personal information, including access and deletion. We honor those requests through the contact above.

Children

This platform is not directed to children. Our separate childcare application is governed by childcare and family-records law and has its own policy.

This policy is current and accurate to our practices. We update it as the platform changes.