Privacy Policy

FlowMate EOOD (the "Controller") is a Bulgarian company providing AI automation services to European SMEs.

Registered office: [TODO — Sofia address]. Company number (ЕИК): [TODO]. VAT: [TODO once registered]. Managing director: [TODO].

Data protection contact: privacy@flowmate-ai.com.

Inquiry data submitted through our contact form or via email: name, work email, company, company size, industry, and the message you send us.

Booking data you submit through our embedded Calendly scheduler: name, email, time slot, optional answers to scheduling questions, and the video-call link generated for the meeting. Calendly processes this data as our scheduling provider under its own terms.

Visitor analytics collected via Plausible (cookieless): page URL, referrer, country, browser, operating system, screen size, and approximate visit duration. No personal identifiers, no cookies, no fingerprints.

Strictly-necessary cookies set by us: NEXT_LOCALE (language preference, 12 months) and flowmate.cookies-ack (records that you've closed the cookie banner, 12 months). See the Cookie Policy for the full list.

Responding to your inquiries and booking discovery calls (legitimate interest, Article 6(1)(f) GDPR).

Operating and securing the website (legitimate interest).

Complying with legal obligations such as accounting and tax law (Article 6(1)(c) GDPR).

Inquiry data: 24 months from the last contact, then deleted unless an engagement is signed.

Booking data: 24 months from the meeting date, then deleted.

Analytics: aggregated indefinitely, but never tied to an identifiable individual.

Cookies: per the cookie policy.

Resend (transactional email delivery), Calendly (embedded meeting scheduler), Plausible (cookieless analytics, EU-hosted in Germany), and Vercel (hosting, EU edge with SCCs). Where any provider processes data outside the EU, transfers are covered by Standard Contractual Clauses.

We do not sell personal data. We do not share it with advertising networks.

Sub-processor list and DPAs are available on request from privacy@flowmate-ai.com.

You can ask us to give you a copy of your data, correct it, delete it, restrict our processing of it, port it elsewhere, or object to a particular use.

If you ever gave us consent (e.g. for marketing in the future), you can withdraw it at any time.

Email privacy@flowmate-ai.com to exercise any of these rights. We respond within 30 days.

By default, your data stays in the EU. We use Resend for transactional email which may process data outside the EU under Standard Contractual Clauses (SCCs) and a Data Processing Agreement.

When we run AI workloads on your behalf, we route to EU endpoints where the provider offers them (Anthropic Claude EU, OpenAI EU region). Non-EU routing only happens when you choose it in writing.

You can lodge a complaint with the Bulgarian Commission for Personal Data Protection (КЗЛД / CPDP) at https://www.cpdp.bg/ at any time, without contacting us first.

Email: privacy@flowmate-ai.com.

Post: [TODO — Sofia address].