Who we are
Flowmynt is the operator of flowmynt.com and the Flowmynt workspace, and is the data controller for your account and for this website. It is based in India.
For the people you add to your workspace, such as prospects and customers, you are the controller and Flowmynt processes their data on your instructions and only to run the workspace for you.
Questions, requests and complaints go through the contact page, and a person answers.
What we collect
Your account: name, email address and a password hash, or your Google sign-in identity if you use it.
Your workspace: the companies, contacts, evidence, drafts, replies, opportunities, notes, settings and team members you add or approve.
Google data, only if you connect Google Workspace: read-only access to recent messages in your inbox so replies and bounces can be detected, permission to send the messages you approve from your own address, and access to calendar events for the calls you create. The first scan covers the previous two days; later scans cover only what arrived since.
Product usage: which parts of the workspace you use and when, and technical logs needed to keep the service running and secure.
This website sets no tracking cookies. The workspace sets one session cookie that signs you in; it is not readable by scripts and expires after twelve hours.
Why we use it, and on what basis
To provide the service you asked for: research, drafts, follow-up preparation, the daily briefing, the priority queue and team access. Basis: our contract with you.
To keep the service secure, reliable and improving, including product usage measurement. Basis: our legitimate interest, balanced against yours.
To connect Google or another service on your behalf. Basis: your consent, which you can withdraw by disconnecting.
We never use your data for advertising, and we never sell it.
Google user data
Flowmynt's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Google data is used only to show you replies, send messages you approved, and manage the calls you created. It is not used for advertising, not sold, and not used to build or train generalised AI or machine-learning models.
No person at Flowmynt reads your Google data unless you ask us to for support, it is required for security or to comply with the law, or it has been aggregated so it no longer identifies anyone.
Disconnecting Google in Settings deletes the stored token at once. You can also revoke Flowmynt's access from your Google account settings at any time.
Who else processes it
We use a small number of providers to run the service, each under a contract that limits them to acting on our instructions: cloud hosting for the application and database, an AI model provider for drafting and classification (Anthropic), transactional email delivery (Resend), web search for public company research (Brave), and product analytics (PostHog). HubSpot receives data only if you connect it.
When a provider is configured for your workspace, text you supplied, such as evidence, drafts and replies, may be sent to the AI model provider to prepare a draft or a classification. We do not use your data to train models, and our providers are contractually barred from doing so.
Some providers operate outside your country, including in the United States. Where required, transfers are covered by standard contractual clauses or an equivalent safeguard.
Security
Connected-service tokens are sealed with encryption at rest and never reach the browser.
Each workspace is isolated. Team members are invited by the workspace owner with single-use links and can be removed at any time, which ends their sessions.
Sessions expire after twelve hours and end everywhere when you change your password. All traffic uses HTTPS.
If a breach affects your data, we tell you without undue delay and, where the law requires, the relevant authority.
How long we keep it
Your account and workspace stay for as long as you use Flowmynt.
Ask us to delete your account and we delete the account, the workspace and any Google tokens within 30 days. Records we must keep by law, such as invoices, are kept for the period the law sets.
Product usage events are kept for up to 24 months in aggregate form.
Your rights
You can ask to see the data we hold about you, correct it, export it in a common format, delete it, restrict or object to how we use it, and withdraw consent for anything based on consent.
Make any request through the contact page. We answer within 30 days, or sooner where the law requires, and we may ask you to confirm your identity first.
If you are in the European Economic Area or the United Kingdom you may complain to your data protection authority. If you are in India you may approach the Data Protection Board of India. We would rather hear from you first.
Children and changes
Flowmynt is a business tool for adults. We do not knowingly collect data from anyone under 18.
When this page changes in a way that matters, we email account holders before the change takes effect and update the version and date at the top.