Privacy Policy

1. Introduction

Flayr Labs ("we," "us," or "our") operates Flayr Studio (flayrstudio.ai). This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website or use our services.

2. Information We Collect

Information You Provide

• Contact information: Name, email address, business name when you submit our contact form.
• Account information: Email, password, and business details when you create an account.
• Payment information: Processed securely by Stripe. We do not store credit card numbers.
• Content: Website content, images, and data you upload to the platform.
• Connected-service data: If you connect a third-party service to your studio (such as Square or QuickBooks Online), we access the business data needed to provide the integration — customers, catalog items, inventory, orders, and sales records — solely on your behalf and at your direction.

Information Collected Automatically

• Usage data: Pages visited, features used, and interactions with the platform.
• Device information: Browser type, operating system, and device identifiers.
• IP address: Used for rate limiting, security, and approximate geolocation.

3. How We Use Your Information

• Provide, maintain, and improve our services.
• Process transactions and send related information.
• Respond to your inquiries and provide customer support.
• Send marketing communications (with your consent).
• Detect, prevent, and address fraud and security issues.
• Comply with legal obligations.

4. Information Sharing

We do not sell your personal information. We may share information with:

• Service providers: Stripe (payments), SendGrid (email), Amazon Web Services (hosting and data storage), Google (AI services).
• Connected services you authorize: When you connect your Square or QuickBooks Online account, we exchange your business data with that service to keep it in sync. You can disconnect at any time from your studio, which deletes the stored access credentials.
• Legal requirements: When required by law or to protect our rights.
• Business transfers: In connection with a merger, acquisition, or sale of assets.

5. Data Security

We implement industry-standard security measures including encryption at rest and in transit, role-based access control, and regular security audits. OAuth tokens are encrypted using AES-256-GCM. API keys are hashed before storage.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. You may request deletion of your data by contacting support@flayrlabs.com. When you disconnect a connected service such as Square or QuickBooks Online, we delete its stored access tokens immediately; synced business records remain in your studio until you delete them or close your account.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data.
• Object to or restrict processing of your data.
• Data portability.
• Withdraw consent at any time.

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies.

9. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect information from children under 13.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, contact us at support@flayrlabs.com.