Privacy Policy

Flyps sp. z o.o. ("Flyps", "we", "us") operates the Flyps platform and this website. This policy explains what personal information we process when you visit flyps-ai.com, register for an account, purchase credits, or interact with our AI products. Additional processing carried out on behalf of our business customers is governed by the applicable Data Processing Agreement (DPA).

We collect the following categories of personal information:

• Account information — name, email, password hash, workspace and role.
• Billing information — the currency, plan, credit balance and purchase history. Card and bank details are processed by our payment providers; we don't store full card numbers on our servers.
• Product usage — features accessed, credits consumed, model calls, API keys and their audit trail.
• Content you submit — prompts, files, datasets and connected sources you push into the platform.
• Device and log data — IP address, browser, operating system, and technical logs necessary to operate the service.
• Cookies and similar technologies — see our Cookie Policy.

• Provide, secure and maintain the platform and this website.
• Authenticate you, prevent fraud and abuse, and enforce our Acceptable Use Policy.
• Process credit purchases, invoicing and taxes.
• Provide customer support and communicate service-related notices.
• Improve the product through aggregated analytics (subject to your cookie choices).
• Send marketing communications where you have opted in — you can unsubscribe at any time.

Where GDPR or UK GDPR applies, we rely on: performance of a contract to provide the service, legitimate interests to secure and improve it, consent for optional cookies and marketing emails, and legal obligations for tax and accounting records.

We share personal information with a small number of vetted subprocessors that help us run the service — for example cloud hosting, payment processing, email delivery and analytics. A current list is available on request. We do not sell personal information. We may disclose data to comply with a valid legal request or to protect the safety of our users.

We retain account and billing records for as long as your workspace is active and for a limited period afterwards to satisfy legal, tax and audit obligations. Content you delete inside the product is removed from primary storage promptly and from backups on a rolling schedule.

We use encryption in transit and at rest, role-based access controls, code review, and least-privilege access to production systems. No online service can be guaranteed 100% secure; if you believe you've found a vulnerability, please contact [email protected].

Depending on where you live, you may have the right to access, correct, port, restrict or delete your personal information, to object to certain processing, and to lodge a complaint with your local data protection authority. You can exercise these rights at [email protected]; we respond within the timeframes required by law.

We are headquartered in the United States and process data in several regions. Where required, we rely on Standard Contractual Clauses or equivalent mechanisms to transfer personal data outside the EEA and UK.

Flyps is a B2B service and is not directed to children under 16. We do not knowingly collect personal information from children.

We may update this policy from time to time. When we make material changes, we'll notify workspace admins by email and post the revised version here with a new "Last updated" date.