FlexServe

We collect information you provide directly when using FlexServe:

• Account information: name, email address, password (hashed), phone number, business name.
• Business data: service descriptions, pricing, availability schedules, client records, booking details, invoices.
• AI interaction data: conversations with our AI onboarding assistant, including business preferences and website customization choices.
• Payment information: processed securely by Stripe. We do not store credit card numbers on our servers.
• Social media links: optional social media profile URLs you provide for your business website.
• Usage data: feature usage, API calls, site generation counts, and billing metrics.

• To provide and maintain the FlexServe platform and services.
• To generate your business website using AI based on your inputs.
• To manage bookings, client records, and invoices on your behalf.
• To send transactional communications (booking confirmations, password resets, verification emails).
• To process payments through Stripe Connect.
• To monitor usage against your subscription plan limits.
• To improve our AI models and platform features (using aggregated, anonymized data only).
• To detect and prevent fraud, abuse, and violations of our Terms of Service.

Your data is stored in secured databases hosted on Amazon Web Services (AWS) with encryption at rest and in transit. We implement industry-standard security measures including:

• Passwords are hashed using bcrypt with strong salt rounds.
• All API communication uses HTTPS/TLS encryption.
• JWT tokens for authentication with short expiration times.
• Tenant isolation — each business account's data is logically separated and scoped by tenant ID.
• Regular security audits and dependency updates.

We use the following third-party services to operate FlexServe:

• Stripe: payment processing and Connect payouts. Subject to Stripe's Privacy Policy.
• Amazon Web Services (AWS): cloud hosting, database, file storage, and email delivery (SES).
• Anthropic / xAI: AI providers for website generation and onboarding chat. Conversation data is sent to these providers for processing.

We retain your data for as long as your account is active. If you cancel your subscription or delete your account, all data is permanently and irreversibly deleted, including your websites, client records, bookings, invoices, AI session history, and usage records. We recommend exporting any important data before account deletion.

Some aggregated, anonymized usage data may be retained for analytics and service improvement purposes after account deletion.

You have the right to:

• Access your personal data through the dashboard Settings page and API.
• Correct inaccurate personal information through your account settings.
• Delete your account and all associated data at any time from Settings.
• Export your data (client records, bookings, invoices) before deletion.
• Withdraw consent for optional data processing by contacting us.

FlexServe uses essential cookies and browser local storage for authentication tokens and user preferences (such as language selection). We do not use third-party tracking cookies. If analytics are enabled in the future, we will update this policy and provide opt-out options.

FlexServe is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete it.

Your data may be processed and stored in the United States through our AWS infrastructure. By using FlexServe, you consent to the transfer of your data to the United States.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on the dashboard. Continued use of FlexServe after changes constitutes acceptance of the updated policy.

For privacy-related questions or requests, please contact us at privacy@flexserve.ai.