Privacy Policy
Last Updated: Aug 20, 2026
Introduction
Welcome to GentFlo. This Privacy Policy explains how GentFlo collects, uses, and protects information when you use our website and our AI-powered marketing platform.
Our Dual Role in Data Processing
Because GentFlo is a platform that allows you to build funnels, capture leads, and send messages, we process personal data in two distinct capacities:
As a Data Controller (Workspace Owner Data): When you create an account, we collect and process your personal data to provide the Service, manage billing, and communicate with you. We determine the purposes and means of processing this data.
As a Data Processor (End-User / Lead Data): When you use GentFlo to collect data from your customers or prospects ("End-Users" or "Leads") via our page builder, chat widgets, or integrations, you are the Data Controller. GentFlo acts solely as your Data Processor. We process End-User data strictly on your behalf, according to your instructions, and in accordance with our Data Processing Agreement (DPA).
Information We Collect
A. Workspace Owner Data (Provided by You)
Account Information: Name, email address, password, and authentication details.
Mission Brief & Business Data: Information you input about your business, products, target audience, price points, and brand tone, which is used to personalize AI outputs.
Billing Information: Payment details processed securely through our third-party payment gateways. We do not store full credit card numbers on our servers.
Usage Data: How you interact with the GentFlo dashboard, Agent Chat, and platform features.
B. End-User / Lead Data (Collected on Your Behalf)
Through your use of our funnels, forms, popups, and chat widgets, we collect data about your Leads, including:
Contact Details: Names, email addresses, and phone numbers.
Behavioral Data: Page views, UTM tracking parameters, link clicks, and lead scoring metrics.
Chat Transcripts: Conversations between your Leads and our AI chat widget or messaging platforms integrated with the chat service.
Purchase History: Transaction and revenue data synced from payment providers.
C. Technical and Device Information
Log Data: IP address, browser type, operating system, and referring URLs.
Cookies and Tracking Technologies: We use cookies and similar technologies for authentication, security, and analytics. Please see our Cookie Policy for more details.
How We Use Information
A. To Provide the Service (Workspace Owners)
To operate, maintain, and improve the GentFlo platform.
To power our AI features (e.g., generating page copy, email sequences, ad creatives, and chat responses based on your Mission Brief).
To process transactions and send billing-related communications.
To provide customer support.
B. To Fulfill Your Instructions (End-Users)
To capture, store, and manage Lead records in your CRM.
To execute automated email and SMS sequences on your behalf.
To facilitate real-time AI chat conversations with your Leads.
Note: We do not use End-User data for our own marketing purposes or to contact your Leads independently.
Artificial Intelligence and Machine Learning
GentFlo relies on AI language model providers to generate content, analyze data, and power our conversational agents.
Contextual Generation: We securely pass your Mission Brief and relevant Lead data to AI providers strictly to generate outputs tailored to your specific business context.
No Model Training on Your Data: We do not use your proprietary business data, Mission Briefs, or your Leads' personal data to train public, foundational AI models.
Information Sharing and Disclosure
We do not sell your personal data. We share data only with trusted third-party service providers (Subprocessors) who assist us in operating the Service. These include:
AI Language Model Providers: To process prompts and generate text/content.
Cloud Infrastructure & Hosting: To securely store and process data.
Email and Messaging Platforms: To deliver automated sequences and route messages through integrated channels.
Payment Processors: To handle subscription billing securely.
Analytics Providers: To monitor platform performance and usage.
All Subprocessors are bound by strict confidentiality and data protection obligations. A full list of Subprocessors is available in our Data Processing Agreement.
Data Retention
Active Accounts: We retain your Workspace Owner Data and Lead Data for as long as your account is active or as needed to provide you with the Service.
Account Deletion (30-Day Grace Period): If you request to delete your GentFlo account, we will deactivate your data and place it in a 30-day quarantine period. This grace period allows you to recover your account and data in case of accidental deletion.
Hard Deletion: After the 30-day grace period expires, your Workspace Owner Data and all associated End-User/Lead Data will be permanently and irreversibly deleted (hard deleted) from our active systems and backups, unless retention is required by law.
Data Security
We implement industry-standard administrative, technical, and physical security measures to protect your data against unauthorized access, alteration, disclosure, or destruction. This includes encryption in transit and at rest, strict access controls, and regular security monitoring. However, no method of internet transmission is 100% secure.
International Data Transfers
GentFlo serves a global audience. Your information may be transferred to, and processed in, countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country. When we transfer data internationally, we implement appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy and applicable laws.
Your Privacy Rights
Workspace Owners: You have the right to access, correct, or delete your account information at any time through your GentFlo dashboard settings.
End-Users / Leads: Because GentFlo processes your data on behalf of the Workspace Owner (who is the Data Controller), any requests to access, correct, or delete your personal data, or to opt-out of marketing communications, should be directed to the specific business (the Workspace Owner) that collected your information. If a Workspace Owner requires our assistance to fulfill a data subject request, we will support them as outlined in our DPA.
Children's Privacy
The Service is not intended for use by children under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete it.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new policy on this page and updating the "Effective Date."
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: support@gentflo.com
Website: gentflo.com