Privacy notice

1. Who is responsible for your data

flouster (“flouster”, “we”) is the data controller for the personal data collected through this site and the platform.

We operate entirely online: we have no walk-in offices or physical service address. Our only official contact channel for privacy matters is hola@flouster.com, handled by the team responsible for data protection.

2. Who this notice applies to

This notice covers everyone who interacts with flouster, according to their role:

• Site visitors: people who browse the site or write to us to ask for information or book a demo.
• Organizations and their members: the account owner, administrators, and team members who are given access to the workspace after the service is contracted. Accounts are created by flouster or by the organization itself; there is no open sign-up.
• People who write to a WhatsApp channel connected by an organization: that organization’s clients or users who report a problem through that channel.
• People with access to the client portal: clients of an organization that uses flouster, whom that organization gives access to see their project progress, deliverables and tickets, and to raise requests.

For people who use the client portal or write over WhatsApp, the organization that gives them access is the controller of their data and flouster acts as processor, as explained in the next section.

3. When the organization is the controller and flouster the processor

When an organization uses flouster to manage information about its own clients, that organization decides what data it uploads and for what purpose: it is the data controller. flouster acts as processor, meaning we handle that data only on its instructions and to provide the service.

If you are a client of an organization that uses flouster and want to exercise your rights over that data, you should contact that organization. If you write to us directly, we will route you to them.

4. What personal data we process

Depending on how you interact with flouster, we may process:

• Contact and demo request data: name, email address, company, team size, phone number if you choose to share it, times that work for you, and the comment you write. The site form stores nothing: it prepares an email in your mail program, and what we send and receive is what you send.
• Identification data of people who use the platform: first and last name, email address, and a profile photo if you choose to upload one.
• Account and organization data: organization or brand name, assigned role, team, workload capacity, and language preferences.
• Billing data: legal name, tax ID (RFC), tax regime, billing email, and the details needed to issue tax receipts.
• Content you upload: tickets, projects, tasks, goals, meeting notes, questionnaires, documents and wiki pages, chat messages, attachments, and any personal data you choose to include in them.
• Data of people who use the client portal: name, email address, the client organization they belong to, and the requests, comments and files they send through it.
• Messages from the channels you connect: if your organization enables ticket capture over WhatsApp, we process the phone number, the profile name, the content of the messages sent to that number, and any files attached to the conversation.
• Technical and usage data: IP address, device and browser type, language, access date and time, in-app actions, and security logs.

5. Sensitive data

flouster does not request or require sensitive personal data (data revealing racial or ethnic origin, health status, religious beliefs, political opinions, sexual preference, among others).

Please do not upload such data in tickets, documents, or files. If your organization needs to process it, it must obtain the express written consent of the data subjects and assume the corresponding responsibility.

6. What we use your data for

Purposes necessary to provide the service:

• Respond to your request for information or a demo and follow up commercially.
• Create and manage the account, the organization, and each person’s permissions.
• Provide platform features: tickets, projects, goals, meetings, questionnaires, reports, CRM, chat, wiki and documents, the client portal, notifications, the API with keys, the MCP server, and the AI-assisted features, including triage of reports that arrive over WhatsApp.
• Invoice, collect payment, and issue tax receipts.
• Send operational notices: ticket updates, due dates, security alerts, and changes to these documents.
• Provide technical support and respond to your requests.
• Prevent fraud, abuse, and unauthorized access; comply with legal obligations.

7. Additional purposes

With your consent we may also use your data to send you product news, content, and offers, and to run surveys and analysis that help us improve flouster.

These purposes are not required for the service. You may refuse from the start or at any time by writing to hola@flouster.com, or via the unsubscribe link in every promotional email. Refusing does not affect your use of the platform.

8. flouster AI and automated processing

flouster AI processes workspace content to triage tickets and fill in their details. Its output is a suggestion: no decision with legal or financial effects is made automatically without human review.

That processing is run by a specialized AI model provider acting on flouster’s behalf. Requests to those models are processed on servers located in the United States, so content you send to the AI features may be processed outside Mexico.

We do not use your workspace content for any purpose other than providing the service, nor to train artificial intelligence models.

9. AI triage and WhatsApp capture

If your organization enables the WhatsApp channel and registers its users’ phones, the messages those phones send to flouster’s number are processed to file the ticket: the AI reads the text and any attachments to infer the category, the priority and the details of the report, and splits several requests into separate tickets.

The original message is kept alongside the ticket as part of its history, because it is the evidence of what was reported and when. It is deleted together with the rest of your workspace content, within the retention periods described below.

Classification is a proposal, not a final decision: someone on your team confirms, corrects, or discards the ticket before it has any effect. You can ask us to review a classification by writing to hola@flouster.com.

The conversation travels over the WhatsApp platform, operated by a third party under its own terms and privacy policy, and through a messaging provider that delivers it to flouster. That processing is outside flouster’s control. The organization that connects the number is responsible for informing the people who write to that channel that their messages are used to file and handle tickets.

Please do not share sensitive data, credentials, or information that is not needed to handle the report through this channel.

10. Data transfers

To operate we rely on providers that process data on our behalf:

• Cloud infrastructure provider: hosting for the platform on servers located in Mexico, with data logically isolated per organization.
• AI model provider: processing for the AI features, with requests processed on servers in the United States.
• Messaging and WhatsApp platform providers: delivery of the WhatsApp channel messages, when your organization connects it.
• Push notification provider: sending notifications to devices that have enabled them.
• Email provider: sending operational notices and replies to your requests.

Some of these providers are located or process data outside Mexico, mainly in the United States. By using the service you accept these transfers, which are necessary to provide it.

We do not sell your personal data and we do not share it with third parties for their advertising.

We may transfer data without your consent in the cases set out in Article 37 of the LFPDPPP: when required by law or a competent authority, when necessary to perform our contract with you, or to protect a person’s vital interest.

11. Your rights

You may request at any time Access to your data, Rectification when it is inaccurate, Cancellation when you believe it is no longer needed, or Objection to a specific use.

Send your request to hola@flouster.com including: your name and an email for our reply, a copy of official identification proving your identity or representation, a clear description of the data and the right you wish to exercise, and any document that helps us locate the information.

We will respond within 20 business days and, where applicable, act on it within the following 15 business days. These periods may be extended once for an equal term where justified. Exercising these rights is free; only shipping or reproduction costs may apply.

12. Withdrawing your consent

You may withdraw the consent you gave us, through the same channel and with the same requirements as a rights request. Note that in some cases we cannot act on the withdrawal immediately due to legal obligations, and that withdrawing consent for necessary purposes means ending your use of the service.

13. Limiting the use or disclosure of your data

In addition to the rights above, you may ask us to limit the use or disclosure of your data by writing to hola@flouster.com. If your request is granted, you will be added to our exclusion list and will stop receiving promotional communications.

14. Cookies and similar technologies

This informational site includes no third-party analytics or advertising tools.

The application uses cookies and browser local storage only for what is necessary: keeping you signed in and remembering your language and preferences.

You can block or delete cookies from your browser settings. If you disable the necessary ones, some features — such as staying signed in — will stop working properly.

15. How long we keep your data

We keep your data while your organization’s account is active. When the service ends, we retain the workspace content for the period agreed in the contract, so you can request its export, and then delete or anonymize it.

Contact details of people who request a demo are kept as long as needed to follow up. Billing records are kept for the period required by Mexican tax law, and security logs for as long as needed to investigate incidents.

16. Information security

We apply reasonable administrative, technical, and physical safeguards: hosting on servers located in Mexico, encryption in transit, role-based access control, and logical isolation of data between organizations.

No system is infallible. If a breach occurs that significantly affects your rights, we will notify you by email without delay so you can take action.

17. Minors

flouster is a work tool intended for people over 18. We do not knowingly collect data from minors. If we detect an account created by a minor without the consent of a parent or guardian, we will delete it.

18. Users outside Mexico

If you are in a jurisdiction with additional data protection rules — such as the GDPR in the European Union or US state laws — we recognize the rights those rules grant you and will handle your request through the same contact channel.

By using the service you understand that your data may be processed in countries other than your own, with the safeguards described in this notice.

19. Changes to this notice

We may update this notice when the platform, our practices, or applicable law change. The current version is always published on this page, with its update date.

If a change is significant, we will notify you by email or inside the platform before it takes effect.

20. If you are not satisfied

If you believe your right to personal data protection has been violated, you may turn to the competent Mexican authority and file a complaint or a rights protection request.