Privacy Policy

Last updated: 26 April 2026

1. Who We Are

Flow AI is a Singapore-based AI Concierge Service operated by Flow AI (“we”, “our”, “us”). We provide AI-powered customer communication services for service businesses. Our website is flowai.sg.

For privacy-related enquiries, contact us at ryan.flowai@gmail.com.

2. What We Collect

When you submit a demo request through our website, we collect:

  • Your full name
  • Your business name
  • Your WhatsApp phone number
  • Your industry or business type
  • Your approximate weekly inquiry volume (optional)
  • The page you submitted from and any UTM campaign parameters in the URL

We do not collect payment information, identity documents, or any sensitive personal data as defined under the PDPA.

We do not use cookies for tracking or advertising on this website. Standard server logs (IP address, browser, timestamp) may be retained for up to 30 days for security and debugging purposes.

3. Why We Collect It

We collect your information for the following purposes:

  • To respond to your demo request. We use your name and WhatsApp number to contact you and arrange a demo of our AI Concierge Service.
  • To tailor the demo to your business. Your business name, industry, and inquiry volume help us prepare a demo relevant to your context.
  • To send you a notification email. When you submit the form, we send ourselves an internal email alert so we can follow up promptly.
  • To understand how visitors find us. UTM parameters tell us which marketing channels are working so we can improve our outreach.

We will not use your information for any purpose beyond the above without your explicit consent.

4. Who We Share It With

We use the following third-party services to process your data. Each is bound by their own data processing agreements:

  • Supabase — stores your form submission in a secure database. Data is stored in Supabase-managed infrastructure. See Supabase Privacy Policy.
  • Resend — sends the internal notification email to us when you submit a demo request. Your data is included in that email. See Resend Privacy Policy.

We do not sell your personal data to any third party. We do not share your data with advertisers, data brokers, or any party not listed above.

5. How Long We Keep It

We retain your demo request data for up to 2 years from the date of submission. If you become a Flow AI client, your data may be retained for the duration of the engagement plus 2 years for business records purposes.

You may request deletion of your data at any time by contacting us at ryan.flowai@gmail.com. We will process deletion requests within 10 business days.

6. Your Rights Under the PDPA

Under the Singapore Personal Data Protection Act 2012 (PDPA), you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Correction — request that we correct inaccurate or incomplete data
  • Withdrawal of consent — withdraw consent to our use of your data, subject to legal or contractual restrictions
  • Data portability — request your data in a structured, machine-readable format where technically feasible

To exercise any of these rights, contact us at ryan.flowai@gmail.com. We will respond within 10 business days. We may need to verify your identity before processing a request.

7. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include server-side validation, encrypted connections (HTTPS), access controls on our database, and rate limiting on our form endpoint.

No method of transmission over the internet is completely secure. In the event of a data breach that is likely to cause significant harm, we will notify affected individuals and the Personal Data Protection Commission (PDPC) as required under the PDPA.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will reflect any changes. Continued use of this website after changes are posted constitutes acceptance of the updated policy.

9. Contact

For any privacy-related queries or to exercise your PDPA rights: