PRIVACY
Privacy Policy
Update Date:
This Privacy Policy describes how Flynton Technologies ("Flynton", "we", "us", or "our") collects, uses, stores, and protects personal data when you use our platform at flynton.com and associated services.
This policy complies with the General Data Protection Regulation (GDPR), India's Digital Personal Data Protection Act 2023 (DPDP Act), and other applicable privacy laws.
If you have questions, contact us at: privacy@flynton.com
1. Who We Are
Flynton is an AI-powered B2B outbound intelligence platform incorporated in India. We provide software-as-a-service tools that help B2B sales teams build outbound strategies, manage contact sequences, and coordinate multi-channel outreach.
Registered office:
Flynton Technologies
Bengaluru, Karnataka, India
Email: privacy@flynton.com
Website: www.flynton.com
For the purposes of GDPR, Flynton is the Data Controller for personal data processed through our platform. For the purposes of India's DPDP Act 2023, Flynton is the Data Fiduciary.
2. Personal Data We Collect
We collect personal data in the following categories:
2.1 Account and Registration Data
• Full name and email address, phone number when you sign up
• Company name, job title, and company domain
• Password (stored as a one-way cryptographic hash — never in plain text)
• Billing name and address for invoice generation
• GST number (if provided for tax purposes)
2.2 Contact Data You Upload
When you upload CSV files or import contacts into Flynton, you provide us with personal data about your prospects. This may include:
• First name, last name, email address
• Job title, company name, company domain
• LinkedIn URL, phone number (if included in your CSV)
• Any other fields present in your uploaded file
Important: You are responsible for ensuring you have a lawful basis for uploading and processing this contact data. Flynton processes it on your behalf as a Data Processor / Sub-Processor.
2.3 Usage and Activity Data
• Pages visited, features used, buttons clicked within the platform
• Email open and click events for sequences you send through Flynton
• Sequence steps completed, replies detected, positive replies marked
• Call queue activity — calls made, outcomes marked
• Login timestamps, IP address, device type, browser type
2.4 Communication Data
• Emails sent through your connected inbox via Flynton
• LinkedIn connection notes and DM scripts generated by Flynton AI
• Call scripts generated and used
• Support conversations via email or chat
2.5 Payment Data
• Payment is processed by Stripe/Razorpay — Flynton does not store card numbers or bank account details
• We store billing history, invoice records, and plan subscription status
• GST invoices are generated and stored for tax compliance purposes
2.6 Technical Data
• Server logs, error reports, and diagnostic data
• API usage data including request counts and token consumption
• Feature flag states and account configuration settings
3. How We Use Your Personal Data
Purpose | Data Used | Legal Basis (GDPR) | DPDP Basis |
Provide the Flynton platform and features | Account data, contact data, usage data | Contract performance | Consent / Contract |
Generate AI-powered ICP, sequences, and call scripts | Your product description, contact data | Contract performance | Contract |
Send outbound emails on your behalf | Contact email addresses, email content | Contract performance | Contract |
Track email opens and clicks | Contact behaviour data | Legitimate interest | Legitimate use |
Signal-triggered call queue generation | Open/click signals from contacts | Contract performance | Contract |
Process payments and issue GST invoices | Billing data | Contract / Legal obligation | Legal obligation |
Send product updates and important notices | Account email address | Legitimate interest | Consent |
Improve AI model outputs and product features | Anonymised usage patterns | Legitimate interest | Legitimate use |
Comply with legal obligations | Any data required by law | Legal obligation | Legal obligation |
Respond to support requests | Account and communication data | Contract performance | Contract |
We do not use your personal data for advertising. We do not sell your data to third parties. We do not share your contact upload data with any other Flynton customer.
4. Who We Share Your Data With
We share personal data only with trusted service providers who help us operate Flynton. All sub-processors are bound by data processing agreements.
Sub-Processor | Purpose | Data Shared | Location |
Supabase | Database and authentication | All platform data | Mumbai, India (ap-south-1) |
Anthropic (Claude API) | AI ICP generation, email writing, call scripts | Product description, contact roles (anonymised) | USA |
Resend | Transactional email delivery | Email address, email content | USA |
Stripe | Payment processing | Billing name, email, address | USA / Ireland |
Upstash QStash | Job queue for sequence scheduling | Contact ID, scheduled action | USA |
Vercel | Application hosting and deployment | Request logs, IP addresses | USA |
Google / Microsoft | Gmail / Outlook OAuth for email sending | OAuth token only — no email content stored | USA |
For transfers of personal data outside India (to USA-based sub-processors), we rely on Standard Contractual Clauses (SCCs) for GDPR purposes and contractual safeguards for DPDP Act compliance. All sub-processors are required to maintain appropriate security standards.
5. How Long We Keep Your Data
Data Type | Retention Period | Reason |
Account data | Duration of account + 90 days after deletion | Service provision and recovery |
Contact upload data | Duration of account + 30 days after deletion | Service provision |
Email and sequence data | Duration of account + 30 days after deletion | Service provision |
Billing and invoice records | 7 years from invoice date | Indian tax law (GST compliance) |
Server and access logs | 90 days | Security and debugging |
Support communications | 2 years from last contact | Quality assurance |
Anonymised usage analytics | Indefinitely | Product improvement — no personal data |
When you delete your account, we initiate deletion of your personal data within 30 days, except where retention is required by law (such as GST invoice records, which must be kept for 7 years under Indian tax law).
6. Your Rights
6.1 Your Rights Under GDPR (EEA/UK users)
• Right of access — request a copy of all personal data we hold about you
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure — request deletion of your personal data ("right to be forgotten")
• Right to restrict processing — ask us to pause processing while a dispute is resolved
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interest
• Rights related to automated decision-making — we do not make solely automated decisions that significantly affect you
6.2 Your Rights Under DPDP Act 2023 (India)
• Right to access — request summary of personal data processed and processing activities
• Right to correction — correct inaccurate, incomplete or outdated personal data
• Right to erasure — request deletion of personal data no longer necessary for the purpose
• Right to grievance redressal — raise a complaint and receive timely response
• Right to nominate — nominate another person to exercise rights on your behalf in case of death or incapacity
6.3 How to Exercise Your Rights
Submit a request to: privacy@flynton.com
We will respond within 30 days for GDPR requests and within the timeframe prescribed by the DPDP Act (as notified by the Data Protection Board of India).
We may need to verify your identity before processing your request. We will not charge a fee for reasonable requests.
7. Cookies and Tracking
Flynton uses cookies and similar technologies to operate the platform and understand usage patterns.
Cookie Type | Purpose | Duration |
Essential / Session | Authentication, security, maintaining your login session | Session or 7 days |
Functional | Remembering your preferences, UI state, feature settings | 90 days |
Analytics | Understanding which features are used — anonymised via PostHog | 1 year |
Marketing | We do not use marketing or advertising cookies | N/A |
You can control cookies through your browser settings. Disabling essential cookies will prevent you from using the platform. You can opt out of analytics cookies in your account settings under Privacy.
8. Security
We implement appropriate technical and organisational measures to protect your personal data:
• All data in transit encrypted with TLS 1.2 or higher
• All data at rest encrypted using AES-256 encryption (Supabase standard)
• Database hosted in Mumbai, India — Supabase ap-south-1 region
• Row-level security (RLS) policies on all database tables
• API keys stored as environment variables — never in code or logs
• Passwords hashed with bcrypt — never stored in plain text
• Regular security reviews and dependency updates
• Access to production data limited to authorised personnel only
• Incident response procedures in place — we will notify affected users within 72 hours of a data breach
No method of transmission or storage is 100% secure. If you discover a security vulnerability, please report it responsibly to security@flynton.com.
9. Children's Privacy
Flynton is a B2B platform intended for use by businesses and professionals. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has provided us with personal data, please contact privacy@flynton.com and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email to the address on your account and display a notice within the platform at least 14 days before the changes take effect.
The date at the top of this policy indicates when it was last updated. Continued use of Flynton after changes take effect constitutes acceptance of the updated policy.
11. Contact Us and Complaints
Data Protection Contact
For all privacy-related queries, requests, or complaints:Email: privacy@flynton.com
Response time: within 30 days
Grievance Officer (DPDP Act 2023)
As required under India's DPDP Act 2023:
Grievance Officer: Karthik
Email: grievance@flynton.com
Address: Flynton Technologies Private Limited, Bengaluru, Karnataka, India
Supervisory Authority Complaints
If you are located in the EEA or UK and believe we have not handled your data correctly, you have the right to lodge a complaint with your local data protection authority.
For India: complaints may be filed with the Data Protection Board of India once operational under the DPDP Act 2023.
