Privacy Policy
Last updated: August 6, 2026
This policy explains what personal information Flow OS LLC collects when you use our website and services, why we collect it, who we share it with, and what control you have over it.
We have written this to describe what we actually do. If you find something here that does not match your experience, tell us — the contact details are at the bottom.
1. Who we are
Flow OS LLC ("Flow OS", "we", "us") is a limited liability company registered in the United States.
Registered address:
Flow OS LLC
1209 Mountain Road PL NE, STE N
Albuquerque, NM 87110
United States
Our operations are run from Greece. This means that, in addition to United States law, we are subject to the EU General Data Protection Regulation (GDPR). Where we handle personal information of individuals in Australia in the course of doing business there, the Australian Privacy Act 1988 and the Australian Privacy Principles also apply.
For the purposes of the GDPR, Flow OS LLC is the data controller for the information described in this policy.
Privacy contact: support@flowos.tech
2. What this policy covers
This policy covers:
flowos.tech— our main site, including all funnel and landing pagessms.flowos.tech— our SMS Gateway product site- Enquiry forms, booking forms, and newsletter signups on either site
- Purchases and subscriptions
- Email and SMS communications we send you
It does not cover:
- Third-party websites we link to
- Data we process on behalf of a client as part of a service engagement. In those cases the client is the data controller and their own privacy policy applies; we act as a processor under our services agreement with them.
3. What we collect
3.1 Information you give us
| What | When |
|---|---|
| Name | Enquiry forms, bookings, purchases, newsletter signup |
| Email address | Enquiry forms, bookings, purchases, newsletter signup |
| Phone number | Where you provide it on a form or opt in to SMS |
| Business name and role | Where you provide it on an enquiry form |
| Message content | Anything you write into a form, email, or SMS to us |
| Billing details | At checkout (see 3.3 — we do not see or store full card numbers) |
3.2 Information collected automatically
When you visit our website we, or the services we use, may collect:
- IP address (and the approximate location derived from it)
- Browser type, device type, operating system, and screen size
- Pages viewed, links clicked, time on page, and the page you arrived from
- A randomly generated identifier stored in a cookie or in local storage, used to recognise a returning browser
Most of this is collected through cookies and similar technologies, and most of it only happens if you consent — see section 4.
3.3 Payment information
Payments are processed by Stripe. When you pay us, your card details go directly to Stripe. We never receive, see, or store your full card number, CVC, or expiry date.
Stripe passes back to us a record of the transaction — your name, email, billing country, the amount, the last four digits of the card, and a Stripe customer reference. We keep that record for accounting and support purposes.
3.4 Information from other sources
If you interact with our advertising or content on Meta (Facebook and Instagram) or Google, those platforms may pass us aggregated or pseudonymised information about that interaction. We do not buy personal information from data brokers.
4. Cookies and tracking
4.1 How consent works here
When you first visit our site you will see a cookie banner. Analytics and advertising technologies do not load until you accept them. If you decline, or ignore the banner, we load only what is strictly necessary to make the site work.
We manage these technologies through a single container, Google Tag Manager. The container itself does not load until you accept, and Google Analytics and the Meta Pixel load through it — so nothing in it runs without your consent.
You can change your choice at any time via the cookie settings link in our site footer.
4.2 What we use
Strictly necessary — loads without consent
| Technology | Purpose |
|---|---|
| Consent preference cookie | Remembers your cookie choice so we don't ask again |
| Security and load-balancing cookies (Cloudflare) | Protects the site against abuse and routes traffic |
| Session cookies on checkout and login pages | Keeps you signed in / keeps your cart intact |
These are used on the legal basis of our legitimate interest in operating a secure, functioning website. They cannot be switched off without breaking the site.
Analytics and advertising — loads only after you consent
Google Tag Manager (container GTM-TD4XCBK7) is the container we load these through. Gating it gates everything inside it.
| Technology | Provider | Purpose |
|---|---|---|
| Google Analytics 4 | Understanding how many people visit, which pages they read, and where they came from | |
| Meta Pixel | Meta Platforms | Measuring whether our Facebook and Instagram ads led to enquiries or purchases, and building audiences for future ads |
If we add anything else to the container in future, it is subject to the same consent gate.
4.3 Session recording
On sms.flowos.tech only, we use Microsoft Clarity to see how visitors move through the page — where they click and how far they scroll — so we can improve it. It is subject to the same consent gate. We do not use it on flowos.tech.
4.4 What we do not do
We do not sell your personal information to anyone.
5. Why we use your information, and our legal basis
Under the GDPR we need a lawful basis for everything we do with your data. Here is ours:
| What we do | Why | Legal basis (GDPR) |
|---|---|---|
| Reply to your enquiry | You asked us a question | Steps taken at your request prior to entering a contract (Art. 6(1)(b)) |
| Deliver a product or service you bought, and support it | To fulfil our side of the deal | Contract (Art. 6(1)(b)) |
| Take payment, issue invoices, keep tax records | Legal and commercial necessity | Contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)) |
| Send you marketing emails or SMS | To tell you about our work | Consent (Art. 6(1)(a)) — you opted in and can opt out any time |
| Analytics on site usage | To understand what's working and improve the site | Consent (Art. 6(1)(a)) |
| Advertising measurement and audience building | To make our advertising less wasteful | Consent (Art. 6(1)(a)) |
| Keep the site secure and prevent abuse | To stop the site being attacked or spammed | Legitimate interests (Art. 6(1)(f)) |
| Keep records to defend a legal claim | To protect the business | Legitimate interests (Art. 6(1)(f)) |
Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect anything we did before you withdrew it.
6. Who we share your information with
We do share your information — with the service providers below, and only so they can do a job for us. We do not sell it, and we do not share it for anyone else's independent marketing.
| Provider | What they receive | What for | Where they process it |
|---|---|---|---|
| GoHighLevel (HighLevel Inc.) | Name, email, phone, message content, activity history | Our CRM — where enquiries, contacts, and conversations live, and the system that sends our marketing and transactional email | United States |
| Stripe (Stripe, Inc.) | Name, email, billing address, card details, transaction data | Payment processing, invoicing, fraud checks | United States, EU |
| Google (Google LLC / Google Ireland Ltd) | Pseudonymised usage data, IP address, cookie identifiers | Google Tag Manager, Google Analytics 4 | United States, EU |
| Meta Platforms (Meta Platforms, Inc. / Meta Platforms Ireland Ltd) | Pseudonymised event data, cookie identifiers, hashed email where applicable | Meta Pixel — ad measurement and audiences | United States, EU |
| Microsoft (Microsoft Corporation) | Pseudonymised interaction data, IP address, cookie identifiers | Microsoft Clarity — session and scroll analysis on sms.flowos.tech only | United States, EU |
| Cloudflare (Cloudflare, Inc.) | IP address, request metadata | Website delivery, DDoS protection, CDN | Global edge network |
| Vercel (Vercel, Inc.) | IP address, request metadata | Website hosting | United States, Global edge |
| Telnyx (Telnyx LLC) and mobile carriers | Phone number, message content | Sending and receiving SMS, where you have opted in | United States, Australia |
6.1 Mobile opt-in data
We do not share mobile phone numbers or SMS consent data with third parties or affiliates for marketing or promotional purposes.
Where we use a subcontractor to deliver the messaging service itself — our SMS provider and the mobile carriers — they receive your number only to route the message, and only for that purpose. No mobile opt-in information is passed to any other party, and text messaging originator opt-in data and consent is excluded from all other use categories described in this policy.
6.2 Other disclosures
We may also disclose information:
- To our professional advisers (accountants, lawyers) where they need it and are bound by confidentiality
- Where we are legally required to — a court order, a valid request from a regulator or law enforcement
- To a buyer or successor if the business is sold or restructured, in which case this policy continues to apply to information transferred
7. International transfers
We operate from Greece, our company is registered in the United States, and several of our providers are US-based. That means your information will be transferred outside your own country, and in many cases outside the European Economic Area.
Where personal information leaves the EEA or the UK, we rely on:
- The EU–US Data Privacy Framework, where the receiving provider is certified under it; and/or
- The European Commission's Standard Contractual Clauses, together with the supplementary measures required by them.
You can ask us for details of the safeguards that apply to a specific transfer by writing to support@flowos.tech.
8. How long we keep it
| Data | Retention |
|---|---|
| Enquiries that don't become clients | 24 months from your last contact with us |
| Client records and correspondence | Duration of engagement, then 7 years for tax and legal purposes |
| Transaction and invoice records | 7 years, to meet tax record-keeping obligations |
| Marketing list membership | Until you unsubscribe, then a suppression record indefinitely so we don't email you again by mistake |
| Analytics data | As configured in Google Analytics — currently 14 months |
| Cookie identifiers | Per the expiry set by each cookie, up to 13 months |
When a retention period ends we delete the data or irreversibly anonymise it.
9. Your rights
If you are in the EEA or the UK (GDPR)
You have the right to:
- Access — get a copy of the personal information we hold about you
- Rectification — have inaccurate information corrected
- Erasure — have your information deleted, where we have no overriding reason to keep it
- Restriction — have us pause processing while a dispute is resolved
- Portability — receive information you gave us in a machine-readable format
- Object — object to processing based on legitimate interests, and object to direct marketing at any time, absolutely
- Withdraw consent — at any time, for anything we do on the basis of consent
To exercise any of these, email support@flowos.tech. We will respond within one month. We do not charge for this, and we will not treat you differently for asking.
If you are unhappy with our response you can complain to your local supervisory authority. In Greece that is the Hellenic Data Protection Authority (dpa.gr). In the UK it is the Information Commissioner's Office (ico.org.uk).
If you are in Australia (Privacy Act 1988)
You may request access to the personal information we hold about you and ask us to correct it. Email support@flowos.tech.
If you believe we have mishandled your information, contact us first at support@flowos.tech and we will investigate. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
If you are in California
We do not sell personal information, and we do not share it for cross-context behavioural advertising outside the consent-based advertising cookies described in section 4. You may request access to, or deletion of, your personal information by emailing support@flowos.tech.
Opting out of marketing
Every marketing email has an unsubscribe link. Every marketing SMS can be stopped by replying STOP. You can also just email us and ask. We will still send you transactional messages — receipts, delivery of something you bought, replies to your own questions.
10. How we protect your information
- All traffic to our sites is encrypted in transit (HTTPS/TLS)
- Access to our CRM, payment, and infrastructure systems is restricted to people who need it, and protected by multi-factor authentication
- Credentials are held in managed secret stores, never in code or in shared documents
- Databases enforce row-level access controls
- We review access and configuration on an ongoing basis
No system is perfectly secure, and we will not claim otherwise. If a breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and notify you directly where the risk is high.
11. Automated decision-making
We use AI and automation extensively in how we run our business, including in drafting responses and organising work.
We do not make decisions that produce legal or similarly significant effects about you solely by automated means, without a human involved. A person reviews anything that materially affects you.
12. Children
Our services are for businesses and are not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, email support@flowos.tech and we will delete it.
13. Text message and email marketing terms
These terms apply if you opt in to receive marketing messages from us.
Consent. By opting in, you confirm you are giving express consent to receive text messages and/or emails from Flow OS. Message frequency varies. Standard message and data rates may apply depending on your carrier and plan.
Opting out. Reply STOP to any text message to stop SMS, or use the unsubscribe link in any marketing email. Reply HELP to a text message for assistance. After you opt out we may still send you administrative messages — order confirmations, receipts, and replies to your own enquiries.
What we send. Offers, updates, and information about our products and services. We may tailor what we send based on what you have bought from us or shown interest in.
Your mobile data. See section 6.1 — mobile numbers and SMS consent data are not shared with third parties or affiliates for marketing purposes.
Changes. If we materially change these terms we will notify you by email or by posting a notice on the site before the change takes effect.
14. Changes to this policy
If we change how we handle personal information, we will update this page and change the "last updated" date at the top. If the change is significant, we will tell you directly — by email if we have your address, or by a notice on the site.
15. Contact us
Privacy enquiries and rights requests: support@flowos.tech
Phone: +1 775-278-7362
Postal:
Flow OS LLC
1209 Mountain Road PL NE, STE N
Albuquerque, NM 87110
United States