# FluxGravity Privacy Policy **Last updated:** October 3, 2026 FluxGravity is a product of and forms part of FluxNote, LLC, a company registered in the United States. This Privacy Policy explains how FluxNote, LLC ("FluxNote," "we," "us," or "our") handles personal information when you use FluxGravity, including fluxgravity.io, app.fluxgravity.io, the FluxGravity AI agent, connected services, memory, automations, generated assets, and related support. ## At a glance - FluxGravity uses the information you provide, the sources you select, and the permissions you grant to complete your requested work. - We do not sell personal information. We do not use connected-account content to train our own or third-party generalized or foundation AI models. - You control connected accounts and scheduled tasks. Disconnecting an account stops new access, but it cannot reverse an action already completed in another service. ## 1. Scope and who we are FluxGravity is an AI agent and workspace that is a product of and forms part of FluxNote, LLC, a company registered in the United States. FluxNote, LLC operates FluxGravity and is responsible for the personal information covered by this policy. This policy applies to the FluxGravity websites, applications, agent experiences, integrations, free tools, communications, and support services that link to it. This policy does not govern a third-party website, model, app, or platform merely because FluxGravity can connect to or act on it. Those services have their own terms and privacy practices. If an organization provides your FluxGravity workspace, that organization may control the workspace, its content, members, permissions, and retention settings. Ask your workspace administrator about choices they control. ## 2. Information we collect ### Account and workspace information We may collect your name, email address, profile image, authentication identifiers, organization or workspace details, role, preferences, and account settings. If you sign in through another provider, we receive the account information that provider makes available with your authorization. ### Prompts, files, sources, and generated work We process the prompts, messages, instructions, URLs, documents, spreadsheets, presentations, images, video, audio, and other material you submit. We also process the plans, intermediate steps, edits, feedback, and outputs created during a task. This is collectively called Customer Content in this policy. Customer Content can contain personal information about you or other people. Only provide information you are authorized to use and that is reasonably necessary for the task. ### Connected-service information When you connect a service such as email, calendar, cloud storage, documents, messaging, project management, publishing, or a CRM, we may receive the provider name, account identifier, profile metadata, authorized scopes, access or refresh tokens, and the data you direct FluxGravity to access or change. Depending on the task, that data may include messages, files, documents, calendar events, contacts, records, comments, or analytics. FluxGravity uses OAuth or another provider-approved authorization flow where available. We do not receive your connected-service password through OAuth. We respect the permissions and access controls already configured in the connected service. ### Memory and personalization If memory is enabled, FluxGravity may save context such as your brand voice, audience, preferences, recurring instructions, approved facts, project context, and corrections. Memory helps future tasks start with relevant context. You can ask to correct or remove saved information, and workspace administrators may have additional controls. ### Agent, browser, computer-use, and automation data When you use a feature that can operate a website, software interface, or connected app, FluxGravity may process the page content, fields, files, visible application state, and task context needed to plan, perform, verify, or recover the requested action. We may record the action taken, time, destination, result, error, and approval state for security, reliability, support, and audit purposes. For a scheduled or recurring task, we store its instructions, schedule, enabled status, relevant authorization, and run history. A scheduled task may process authorized data and take the actions you configured while you are not actively using FluxGravity, until you pause or disable it. ### Billing and transaction information If you purchase a plan or credits, we and our payment providers process billing contact details, plan, payment status, transaction identifiers, tax information, and limited payment metadata. Payment providers handle complete card or bank details under their own privacy policies; FluxGravity does not store complete payment-card numbers. ### Usage, device, and communications information We may collect IP address, browser and device type, operating system, referring page, pages or features used, timestamps, approximate location derived from IP, cookie or similar identifiers, crash data, performance data, and security logs. If you contact us, we process your message, contact details, and any files you include. ### Browser-only free tools Some free tools state that their input is processed locally in your browser. For those tools, the file or text used by the tool is not uploaded to FluxGravity for the tool's core transformation. Normal website requests, security logs, and consented analytics may still be processed as described in this policy. ## 3. How we use information We use information to: - create and secure accounts, authenticate users, and manage workspaces; - understand instructions, research selected sources, operate connected tools, and generate requested work; - save and apply memory or preferences when that feature is enabled; - run, monitor, and report the results of scheduled or background tasks; - process payments, administer plans and credits, and maintain transaction records; - provide support, communicate service and policy updates, and respond to requests; - detect abuse, protect users and third parties, debug failures, and improve reliability and usability; - comply with law, enforce our terms, resolve disputes, and protect legal rights; and - create aggregated or de-identified statistics that do not reasonably identify a person. ## 4. Legal bases for processing Where data-protection law requires a legal basis, we rely on the performance of our contract with you, our legitimate interests in operating and securing FluxGravity, your consent where requested, and compliance with legal obligations. Our legitimate interests include providing the product, preventing abuse, supporting users, understanding service performance, and improving reliability without overriding your rights. You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before withdrawal, and some features may no longer work without the relevant permission. ## 5. Connected services and OAuth data A connected service is accessed only after you or an authorized workspace administrator grants permission. FluxGravity requests scopes needed for supported features and uses connected data to perform the task you choose, maintain the connection, prevent abuse, and provide related support. We do not use connected-service content for advertising or sell it. You can disconnect an integration in FluxGravity or revoke access from the provider. Revocation stops new access after it takes effect. It does not undo a message sent, file created, event changed, post published, form submitted, or other action already completed in the external service. It also does not automatically remove an output you deliberately saved in FluxGravity; you can delete that output separately. FluxGravity's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy. You can review or revoke Google access at https://myaccount.google.com/connections. ## 6. AI models and service providers FluxGravity can route work to third-party AI model and media providers. To complete a request, we may send the selected provider the relevant prompt, source excerpt, file, reference asset, connected-service data, or task context. Different providers may be used for language, research, images, video, audio, transcription, document processing, or other capabilities. We limit the information shared to what is reasonably needed for the requested feature and require service providers to process it on our behalf under contractual and security obligations. We do not use connected-account content to train our own or third-party generalized or foundation models. Model outputs are probabilistic and can be incomplete or wrong; review important results before relying on or publishing them. ## 7. Agent actions, computer use, and scheduled tasks FluxGravity may take real actions on your behalf when you request or approve them, including creating or editing records, uploading or downloading files, entering information, sending communications, publishing content, or changing settings. Some experiences may allow you to approve steps in advance or configure a recurring workflow. Use the minimum permissions needed, review high-impact actions, and protect confidential or regulated data. Do not instruct FluxGravity to access an account, person, system, or content unless you have authority to do so. You are responsible for your instructions, configured schedules, final review, and compliance with laws and third-party terms applicable to the action. Disabling a schedule prevents future runs after the change takes effect. Deleting FluxGravity history cannot reliably recall communications, erase copies received by others, or reverse changes made in a third-party service. Use that provider's controls to manage data and actions retained there. ## 8. Our role and your responsibilities FluxNote generally acts as a controller or business for account, billing, website, product analytics, support, and security information. When a customer uses FluxGravity to process Customer Content on its instructions, FluxNote generally acts as that customer's processor or service provider, subject to the applicable agreement. Business and workspace customers are responsible for providing required notices, obtaining an appropriate legal basis or consent, honoring the rights of people whose information they submit, and configuring access and retention appropriately. Contact support@fluxgravity.com if your organization needs to discuss data-processing terms. ## 9. When we share information We may disclose information in the following circumstances: We do not sell personal information. We do not share personal information for cross-context behavioral advertising, and we do not use connected-service content to target advertisements. - to hosting, storage, authentication, monitoring, customer-support, analytics, payment, communications, AI, and content-processing providers that help operate FluxGravity; - to a connected service, destination, or recipient when you ask FluxGravity to retrieve, create, send, publish, or change something there; - to your workspace owner or administrators, consistent with workspace settings and applicable agreements; - to professional advisers, regulators, courts, law enforcement, or other parties when reasonably necessary to comply with law, protect rights and safety, investigate fraud or abuse, or enforce agreements; and - as part of a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate confidentiality protections. ## 10. Public sharing and external destinations Content remains private to the applicable account or workspace unless you, an authorized collaborator, or a configured automation chooses to share, publish, send, or expose it. A public or recipient-accessible link can be opened by people who have the link, so do not use public sharing for secrets or sensitive personal information. Once content is sent to a social network, website, email recipient, connected app, or other external destination, that destination's privacy practices and retention rules apply. Removing the FluxGravity copy does not necessarily remove the external copy. ## 11. Retention and deletion We retain information only for as long as reasonably needed to provide FluxGravity, fulfill the purposes described here, meet contractual or legal requirements, resolve disputes, and protect the service. The period depends on the type of information and the controls available to you. ### Typical retention periods - Account and profile information: while the account is active and for up to 90 days after account deletion, unless a longer period is legally required. - Projects, prompts, memory, generated outputs, and task history: until you delete them, your workspace applies a different setting, or the account is deleted; deletion from active systems is generally completed within 30 days, subject to the exceptions below. - OAuth credentials: while the connection is active. After disconnection or account deletion, credentials are revoked or removed from active use promptly. - Connected-service content temporarily retrieved for an agent task: no longer than needed for the task and related support; associated connected data is deleted or de-identified within 30 days after disconnection or a valid deletion request, unless you intentionally retained it as a FluxGravity output or an exception applies. - Security, reliability, and usage logs: generally up to 12 months, with longer retention where needed to investigate abuse or meet legal obligations. - Billing, tax, and transaction records: for the period required by financial and tax law, which may be up to seven years. - Aggregated or de-identified information: may be retained because it no longer reasonably identifies you. ### Deletion limits Information may remain for a limited time in encrypted backups before normal deletion cycles complete. We may retain information necessary to comply with law, establish or defend legal claims, prevent fraud or abuse, enforce agreements, or honor another person's rights. Deletion from FluxGravity does not delete information already delivered to a third party or retained by a connected service. ## 12. Cookies and analytics We use necessary cookies and similar technologies for sign-in, security, preferences, load balancing, and core service operation. We may also use analytics technologies to understand traffic and feature performance. Where law requires it, we request consent before using non-essential technologies. You can control cookies through available consent controls and browser settings. Blocking necessary storage may prevent sign-in or other features from working. Global Privacy Control or similar signals are honored where required by applicable law and relevant to our processing. ## 13. Security We use reasonable technical and organizational safeguards designed to protect information, including access controls, transport encryption, monitoring, and credential protections appropriate to the service. No system or transmission method is completely secure, so we cannot guarantee absolute security. Keep your account credentials secure, use provider-approved sign-in and OAuth flows, review connected permissions, and notify us at support@fluxgravity.com if you believe your account or data has been compromised. ## 14. International data transfers FluxNote is based in the United States and uses providers in multiple countries. Your information may therefore be processed outside your country, including in places with different data-protection laws. Where required, we use recognized safeguards such as adequacy decisions, standard contractual clauses, or another lawful transfer mechanism. ## 15. Your rights and choices Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal information; withdraw consent; opt out of certain sharing or targeted advertising; and appeal a denied request. We do not discriminate against you for exercising a privacy right. You can manage many items in your account, workspace, memory, integration, and schedule settings. To make another request, email support@fluxgravity.com from the address associated with your account. We may verify your identity and authority before completing the request. An authorized agent may submit a request where local law permits. If you are in the EEA or United Kingdom, you may also complain to your local data-protection authority. We encourage you to contact us first so we can try to resolve the concern. ## 16. Children's privacy FluxGravity is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. If local law requires a higher minimum age to consent to an online service, users below that age may use FluxGravity only with valid permission from a parent, guardian, school, or other authorized organization. Contact us if you believe a child provided information unlawfully. ## 17. Changes to this policy We may update this policy as FluxGravity changes or legal requirements evolve. We will post the revised version here and change the date above. If a change materially affects how we use personal information, we will provide additional notice when required. ## 18. Contact us For privacy questions, requests, or complaints, contact FluxNote, LLC at support@fluxgravity.com. Please do not include passwords, secret keys, or unnecessary sensitive information in your message.