Privacy Policy

Last updated: September 18, 2025

Version: 1.0

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, make a purchase, or contact us for support.

1.1 Personal Information

  • Name and email address
  • Billing and payment information (processed securely through Stripe)
  • Account preferences and settings
  • Communication history with us

1.2 Usage Information

  • Website usage and interaction data
  • Device and browser information
  • IP address and location data
  • Cookies and similar technologies

1.3 Automatically Collected Information

  • Log data including IP addresses, browser type, and pages visited
  • Performance metrics and error reports
  • Analytics data to improve our services

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process transactions and send related information
  • Send technical notices, updates, and support messages
  • Respond to your comments and questions
  • Develop new products and services
  • Comply with legal obligations
  • Protect against fraud and abuse

2.1 Legal Basis for Processing (GDPR)

We process your personal data based on:

  • Contract: To perform our contract with you when you use our services
  • Consent: When you give us explicit consent for specific purposes
  • Legitimate Interests: For analytics, security, and service improvement
  • Legal Obligation: To comply with applicable laws and regulations

3. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except as described in this policy:

  • With your explicit consent
  • Service providers: Companies that assist us in operating our website (e.g., Stripe for payments, hosting providers)
  • Legal compliance: When required by law or to protect our rights
  • Business transfers: In connection with mergers, acquisitions, or asset sales
  • Safety and security: To protect users and prevent fraud

3.1 Third-Party Services

We use the following third-party services:

4. Data Security

We implement appropriate security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Access controls and authentication systems
  • Secure hosting infrastructure
  • Regular backups and disaster recovery procedures

5. Your Rights and Choices

Depending on your location, you may have the following rights:

5.1 GDPR Rights (EU/UK Users)

  • Access: Request a copy of your personal information
  • Rectification: Correct inaccurate information
  • Erasure: Request deletion of your personal information
  • Restriction: Limit how we process your data
  • Portability: Receive your data in a portable format
  • Objection: Object to processing based on legitimate interests
  • Withdraw consent: Withdraw previously given consent

5.2 CCPA Rights (California Users)

  • Know: What personal information we collect and how it's used
  • Delete: Request deletion of your personal information
  • Opt-out: Opt out of the sale of personal information (we don't sell data)
  • Non-discrimination: Equal service regardless of exercising your rights

5.3 How to Exercise Your Rights

To exercise your rights, contact us at:

  • Email: privacy@flute-sim.com
  • Use the data export/deletion tools in your account settings

6. Cookies and Tracking

We use cookies and similar technologies to enhance your experience on our website. For detailed information about our use of cookies, please see our Cookie Policy.

6.1 Cookie Categories

  • Necessary: Essential for website functionality
  • Analytics: Help us understand website usage
  • Marketing: Used for targeted advertising (with consent)
  • Preferences: Remember your settings and preferences

7. Data Retention

We retain your personal information for as long as necessary to:

  • Provide our services to you
  • Comply with legal obligations
  • Resolve disputes and enforce agreements
  • Protect against fraud and abuse

7.1 Retention Periods

  • Account data: Retained until you delete your account. If your account is deactivated, your information will be retained in the event that you renew your subscription.
  • Payment data: Retained for 7 years for tax and legal compliance
  • Support communications: Retained for 3 years
  • Analytics data: Anonymized after 26 months

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including:

  • EU-US Data Privacy Framework compliance
  • Standard contractual clauses
  • Adequacy decisions by relevant authorities

9. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For material changes, we may provide additional notice such as email notification.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

11.1 Data Protection Officer

For GDPR-related inquiries, you can contact our Data Protection Officer at: dpo@flute-sim.com

11.2 Supervisory Authority

If you are in the EU/UK and have concerns about our data practices, you have the right to lodge a complaint with your local supervisory authority.