Privacy Policy
1. Who we are
Flostac is a software-as-a-service platform that helps businesses capture leads, automate marketing operations, and manage customer relationships across chat, email, and ad platforms. It is designed for organisations that route large volumes of inbound leads, from performance marketing agencies and growth teams to in-house sales and support functions.
Flostac is developed and operated by MarkOne, and provided by S.S Associates. References to “Flostac”, “we”, “us”, or “our” in this policy mean MarkOne, the data controller for the personal information described below.
Questions about this policy can be sent to team.flostac@gmail.com.
2. Information we collect
We collect information in the following categories.
a. Account information
Name, email, organisation name, password (hashed), and the role you are assigned in your workspace. Required to create and secure your account.
b. Billing information
Billing name, address, tax identifier, and payment method identifiers returned by our payment processor. Card data is handled by our payment processor and never stored on Flostac servers.
c. Workspace data you choose to store
Contacts you import or create (names, phone numbers, email addresses, locations, conversation history), notes, tasks, tags, automations, and uploaded media. This data is hosted on your behalf and remains your property.
d. Connected platform data
When you connect a third-party platform (such as Meta, Google, or a messaging provider), we receive and store the OAuth or API tokens needed to act on your behalf, along with the minimum identifiers required: ad account IDs, page IDs, sheet IDs, lead form fields, and performance metrics for the assets you authorise.
e. Usage and device data
Aggregated, non-identifying telemetry about how the product is used (features clicked, errors encountered) and basic device / browser information needed to deliver and secure the service.
f. Communications you send us
Emails and support requests you send to us, retained for the period needed to resolve them and meet our legal obligations.
3. How we use information
- To operate, secure, and improve the Flostac service.
- To process subscriptions, billing, and tax obligations through our payment processor.
- To execute the actions you initiate through integrations (sending messages, updating contacts, syncing records).
- To send essential service notifications (security alerts, billing events, material changes).
- To investigate abuse, protect our rights, and comply with legal obligations.
We do not sell personal information. We do not use workspace data to train machine-learning models. We do not share workspace data with advertisers.
4. Legal bases
Where applicable law requires a legal basis, we rely on:
- Contract — to deliver the service you signed up for.
- Legitimate interests — to secure the service, prevent fraud, and improve product quality, balanced against your rights.
- Legal obligation — to meet tax, accounting, and law-enforcement requirements.
- Consent — for optional marketing communications or non-essential cookies, where consent is required.
5. Disclosure
We disclose personal information only to the parties listed below, and only the minimum they need to perform their role.
- Subprocessors that host infrastructure, deliver email, or process payments on our behalf. The current set is available on request by emailing team.flostac@gmail.com.
- Connected platforms you choose to integrate, acting on your instructions.
- Professional advisers and authorities when required to comply with law, enforce our terms, or protect our rights or the safety of others.
- A successor entity in the event of a merger, acquisition, or sale of assets, with notice to affected users.
6. International transfers
Flostac is operated from India, with infrastructure hosted in multiple regions by our subprocessors. When personal information is transferred across borders, we rely on standard contractual clauses, equivalent contractual safeguards, or the lawful bases available under applicable law.
7. Retention
- Account data — retained for the life of your account, deleted within 30 days of account closure, then removed from backups within a further 30 days.
- Workspace data — retained while your account is active. On deletion, it follows the same schedule as account data.
- Billing records — retained for the period required by tax and accounting law (typically 7 to 8 years).
- Support correspondence — retained for up to 24 months after resolution.
8. Your rights
Depending on your location, you may have the right to access, correct, delete, port, or restrict the processing of your personal information, and to object to processing based on our legitimate interests. You may also withdraw consent at any time where processing is based on consent.
To exercise these rights:
- Use the in-product export and delete tools for workspace data.
- Email team.flostac@gmail.com for anything else.
We respond to verified requests within 30 days. If we cannot fulfil a request, we will explain why. You may also lodge a complaint with your local data protection authority.
9. Security
We protect personal information with administrative, technical, and physical safeguards designed for the sensitivity of the data, including encryption in transit and at rest, role-based access controls, hardware-backed multi-factor authentication for staff, and continuous monitoring. Details are published on our Security page.
10. Children
Flostac is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact team.flostac@gmail.com so we can delete it.
11. Cookies
Cookies and similar technologies used across flostac.in and app.flostac.in are described in our Cookie Policy.
12. Changes to this policy
We may update this policy to reflect changes in our practices or applicable law. Material changes will be notified to account holders in advance by email and in-product notice. The last update date is shown at the top of this page; historic versions are available on request.