Data Privacy
FluxCascade is committed to protecting your data and privacy. This document explains how we handle your information.
Our Privacy Principles
- Minimal data collection – We only collect what's necessary
- Secure by design – Security is built into every layer
- Transparency – We're clear about what we do with your data
- Control – You own your data and can delete it anytime
What Data We Collect
Account Information
When you sign up, we collect:
- Email address
- Name (optional)
- Company name (optional)
- Password (securely hashed)
Connection Credentials
To sync your data, we store:
- OAuth access tokens (encrypted)
- OAuth refresh tokens (encrypted)
- Connection metadata (provider, account name)
We never store your passwords for connected systems. We use OAuth 2.0, which means you authorize access through the platform's official login.
Sync Data (Temporary)
During syncs, we temporarily process:
- Records from your source system
- Transformed data for the target system
- Sync results and statistics
This data is not permanently stored. It's processed in memory and discarded after sync completion.
Logs and Analytics
We collect operational data:
- Sync job logs (timing, record counts, errors)
- Application usage analytics (page views, feature usage)
- Error reports for debugging
- Performance metrics
What We Don't Do
- ❌ Sell your data – We never sell or share data with third parties for marketing
- ❌ Access your data unnecessarily – Only automated systems process your data
- ❌ Store business data – Your contacts, deals, etc. stay in your connected systems
- ❌ Use data for AI training – Your data is never used to train AI models
Data Processing
How We Process Data
- Fetch – Retrieve records from source system via API
- Transform – Apply field mappings and transformations
- Send – Push transformed data to target system via API
- Log – Record sync statistics and any errors
- Discard – Clear temporary data from memory
Data Residency
By default, data is processed in the United States. Enterprise customers can request:
- EU data residency (Ireland)
- Other regions on request
Third-Party Processors
We use trusted providers:
| Provider | Purpose | Data |
|---|---|---|
| Cloud Hosting Provider | Infrastructure | All data during processing |
| Database Provider | Data storage | Account data, configs, logs |
| Email Provider | Transactional email | Email addresses only |
| Analytics Provider | Usage analytics | Anonymized usage data |
All providers are contractually bound to protect your data.
Your Rights
Access Your Data
Request a copy of your data:
- Account information
- Mapping configurations
- Sync history
Email privacy@fluxcascade.com for data export.
Delete Your Data
Request complete deletion:
- Go to Settings → Account → Delete Account
- Or email privacy@fluxcascade.com
We will:
- Delete your account and user data
- Revoke all connection authorizations
- Delete mapping configurations
- Delete sync logs
- Remove from all systems within 30 days
Data Portability
Export your configuration:
- Go to Settings → Data Export
- Download your mappings and configuration
- Sync history is also available
Opt Out of Analytics
Disable usage analytics:
- Go to Settings → Privacy
- Toggle off Usage Analytics
GDPR Compliance
For EU users, we comply with GDPR:
- Lawful basis: We process data based on your consent and legitimate interest
- Data minimization: We only collect necessary data
- Right to erasure: You can request complete deletion
- Data portability: Export your data anytime
- Breach notification: We'll notify within 72 hours if applicable
Data Processing Agreement
Enterprise customers can request a DPA that covers:
- Sub-processor lists
- Security measures
- Data transfer mechanisms
- Audit rights
Contact legal@fluxcascade.com for DPA requests.
CCPA Compliance
For California residents:
- Right to know: Request what data we collect
- Right to delete: Request deletion
- Right to opt-out: We don't sell data, so N/A
- Non-discrimination: Equal service regardless of privacy choices
Cookie Policy
We use cookies for:
- Essential: Login sessions, security
- Functional: Preferences, settings
- Analytics: Usage tracking (can opt out)
No third-party advertising cookies are used.
Children's Privacy
FluxCascade is not intended for users under 16. We don't knowingly collect data from children.
Changes to This Policy
We'll notify you of significant changes via:
- Email to account owners
- In-app notification
- Changelog posting
Contact Us
For privacy questions or requests:
Email: privacy@fluxcascade.com
Mail:
FluxCascade Privacy Team
[Company Address]
Related
- Encryption – How we protect your data
- Compliance – Certifications and standards
- Terms of Service – Legal terms
- Privacy Policy – Full legal policy