Privacy Policy

Who we are

Flocket (“Flocket,” “we,” “us,” or “our”) is an AI marketing workspace for businesses. One assistant plans, creates, and publishes marketing work inside your company’s own workspace: brand assets, campaigns, a video editor, SEO, and reporting.

Questions about this policy, or about your information, can be sent to us at dev@flocket.ai.

Information we collect

We collect the following categories of information.

• Account and company details you enter when you set up your workspace: your name, company name, website, and brand information.
• Content you upload or generate: images, video, audio, documents, and written copy that you upload to Flocket or that Flocket creates for you inside your workspace.
• Contacts and subscriber lists you bring in. If you import a contact list or subscriber list into Flocket, you remain the controller of that data. Flocket processes it on your behalf and under your instructions, to provide the service you asked for.
• Usage and technical data needed to run and secure the service, such as logs, device information, and browser information.
• Waitlist sign-ups on this website: the email address you provide and, if asked, your name.

Connected tools and third-party sign-in

Flocket can connect to tools you already use, including Notion, Pinterest, Google products such as Analytics, Search Console, Sheets, and YouTube, Meta’s Facebook and Instagram, LinkedIn, TikTok, HubSpot, Mailchimp, Shopify, Airtable, Typeform, Intercom, Zendesk, Slack, and similar services. When you connect one of these tools, you sign in directly with that provider and choose what to share with Flocket.

Flocket only reads the data you authorize. It does not post, edit, or delete anything in a connected tool, except where you explicitly ask it to, for example publishing a social media post that you have reviewed and approved.

Access tokens for connected tools are encrypted at rest using AES-256-GCM and are never shown back to you, or anyone else, in the browser. Records synced from a connected tool are stored separately for each company and are used only to give that company reports, knowledge, and marketing suggestions inside Flocket. Disconnecting a tool stops any further syncing and deletes the data that tool brought in.

Pinterest

When you connect Pinterest, Flocket reads only your own boards and pins, including their titles, descriptions, images, and links, along with your basic account profile, using the boards:read, pins:read, and user_accounts:read permissions. It does not access ads, analytics, or anyone else’s content, and it never creates, edits, or deletes pins or boards. We use this to show your business its own pins inside Flocket and to let you pick pins as visual references for your own marketing. This data is never sold and never shared with other Flocket customers.

Google services

Flocket’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we use information

• To provide and improve the service for your company.
• To generate the content, strategy, and reports you ask for.
• To send service related emails, such as confirmations and account notices.
• For security, and to prevent abuse of the service.

We do not sell personal data. We do not use your data, or data from the tools you connect, to train foundation AI models.

How we share information

We share information with service providers who help us run Flocket, under agreements that limit what they can do with it. These include:

• Cloud hosting and storage providers, to run the application and store your data.
• AI model providers, such as Anthropic, OpenAI, and Google, which process prompts and content to produce the outputs you ask for.
• Media generation and voice providers, used to create images, video, and audio inside Flocket.
• Email delivery, through Resend, to send account and service emails.

We do not sell your personal data, and we do not share it with other customers.

Cookies

This website does not use advertising or analytics cookies, and it does not run tracking scripts. The Flocket application uses essential cookies needed to keep you signed in and to connect third-party tools, including a short-lived, HttpOnly security cookie that is set only while you are in the middle of signing in to a connected tool. These cookies are necessary for the service to work and cannot be switched off.

Data retention

We keep information for as long as your account is active and as needed to provide the service, comply with our legal obligations, resolve disputes, and enforce our agreements. When you delete your company, or disconnect a tool, we delete the data that tool brought in, as described under “Deleting your data” below.

Security

We use technical and organizational measures designed to protect your information, including encryption of connected-tool access tokens at rest and access controls that scope every request to your company’s own workspace. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

International data transfers

Flocket may process and store information in countries other than your own. Where we transfer personal data across borders, we take steps intended to give it an appropriate level of protection, consistent with applicable data protection law.

Your rights

Depending on where you are located, you may have rights over your personal data, including the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data.
• Export your data in a portable format.
• Object to, or restrict, certain processing.

These rights are available, among others, under the GDPR and UK GDPR for people in the European Economic Area and the United Kingdom, and under California and similar US state privacy laws, which also give you the right to know what personal information is collected about you and to opt out of its sale or sharing. We do not sell personal data. To exercise any of these rights, contact us using the details in “Contact us” below.

Deleting your data

You can delete your data at any time by deleting your company inside Flocket, or by disconnecting a connected tool, which removes the data that tool brought in. You can also email us and we will delete your data on request, subject to any legal or accounting obligations that require us to keep certain records.

Children’s privacy

Flocket is a business tool and is not directed to, or intended for, anyone under the age of 16. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy as Flocket changes. If we make a material change, we will update the date at the top of this page. We encourage you to check back from time to time.

Contact us

For any question about this policy, or to exercise any of the rights above, email us at dev@flocket.ai.