Privacy Policy

Last Updated: June 2026

This Privacy Policy explains how FluxForce AI Pvt. Ltd. ("FluxForce", "we", "our", or "us"), operating FluxForce.ai, collects, uses, shares, and protects personal information when you visit our website, request a demo, subscribe to updates, or use our products and services.

We build security and compliance products for regulated industries. We hold ourselves to the same standard of data handling that our customers expect from us.

Who we are

For the purposes of this policy, FluxForce AI Pvt. Ltd. is the data controller (under GDPR) and data fiduciary (under India's Digital Personal Data Protection Act, 2023). Our contact details are in contact Section .

Scope

This policy applies to personal information we process about:

  • Visitors to www.fluxforce.ai

  • People who request a demo, contact us, or download gated content

  • Subscribers to our newsletters and product updates

  • Users of our products and customer personnel who interact with our services

This policy does not cover personal data that our customers process inside their own environments using our products. For that data we act as a processor on the customer's instructions, governed by the customer agreement and a separate Data Processing Agreement.

Information we collect

You give us directly:

  • Identity and contact data: name, work email, phone number, job title, company name

  • Demo and enquiry details: what you tell us about your needs

  • Account data: credentials and profile information if you hold an account

  • Communications: messages you send us by email, forms, or chat

We collect automatically:

Device and usage data: IP address, browser type, pages viewed, referring URLs, timestamps

Cookies and similar technologies 

From third parties:

  • Enrichment and lead data from business information providers

  • Analytics and advertising platforms

We do not seek to collect special category or sensitive personal data through our website. Please do not send it to us unsolicited.

How we use your information

We use personal information to:

  • Provide, operate, and improve our website, products, and services

  • Respond to demo requests, enquiries, and support questions

  • Manage accounts and deliver the services you have signed up for

  • Send marketing and promotional communications, where permitted

  • Measure and analyse website performance and campaign effectiveness

  • Maintain security, prevent fraud, and meet legal and regulatory obligations

Marketing communications and your consent

We may send you product updates, newsletters, event invitations, and other marketing communications about FluxForce.

How we get your permission:

  • Where the law requires consent, we ask for it through a clear, affirmative opt-in (for example, an unticked checkbox at the point you give us your email). We do not pre-tick consent boxes, and signing up for the product is never treated as agreement to receive marketing.

  • Where the law allows, we may send business-to-business marketing about products similar to those you have already shown interest in, on the basis of our legitimate interest. You can object to this at any time.

Your control:

  • Every marketing email includes a one-click unsubscribe link.

  • You can withdraw consent or opt out at any time by using that link or by emailing privacy@fluxforce.ai. Withdrawing consent does not affect processing carried out before withdrawal.

  • We honour opt-outs promptly across our systems.

We treat marketing as a separate purpose from running the service. Opting out of marketing does not affect your use of our products.

Legal bases for processing

Where GDPR or UK GDPR applies, we rely on the following legal bases:

Consent : for marketing communications and non-essential cookies.

Contract: to provide services you have requested or signed up for.

Legitimate interests: to operate and secure our business, analyse website use, and carry out limited B2B marketing, balanced against your rights.

Legal obligation: to comply with applicable laws.

Where India's DPDP Act applies, we process personal data on the basis of your consent or for legitimate uses permitted under the Act.

Cookies and tracking

We use cookies and similar technologies to run the site, remember preferences, measure traffic, and support marketing. You can control non-essential cookies through our cookie banner and your browser settings. Where consent is required for non-essential cookies, we collect it before setting them.

How we share information

We share personal information with:

  • Service providers and processors who help us run our business, such as hosting, analytics, email delivery, and CRM platforms. They act on our instructions under contract.

  • Professional advisers such as lawyers, auditors, and accountants where needed.

  • Authorities where we are legally required to disclose, or to protect our rights and safety.

  • Successors in the event of a merger, acquisition, or asset sale, subject to this policy.

We do not sell your personal information for money. Under US state laws such as CCPA/CPRA, certain ad-related data sharing may be treated as a "sale" or "sharing"; you can opt out as described in Section 12.

International data transfers

We may transfer and process personal information in countries other than your own, including India, the EU, the UK, and the US. Where we transfer data internationally, we use appropriate safeguards such as Standard Contractual Clauses or other lawful transfer mechanisms recognised under the applicable law.

Data retention

We keep personal information only as long as needed for the purposes set out in this policy, to comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymise it.

Security

We use technical and organisational measures appropriate to the risk, including access controls, encryption in transit, and monitoring, to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your rights

Your rights depend on where you live.

Under India's DPDP Act 2023, you may:

  • Access a summary of the personal data we process about you

  • Request correction, completion, updating, or erasure

  • Nominate another person to exercise your rights in case of death or incapacity

  • Withdraw consent and raise a grievance with our Grievance Officer (Section 14)

Under GDPR / UK GDPR, you may:

  • Access, rectify, or erase your personal data

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent at any time

  • Lodge a complaint with your data protection authority

Under US state laws (e.g. CCPA/CPRA), you may:

  • Know what personal information we collect and how we use it

  • Request deletion or correction

  • Opt out of "sale" or "sharing" of personal information for targeted advertising

  • Not be discriminated against for exercising your rights

To exercise any right, email privacy@fluxforce.ai. We will verify your request and respond within the timeframe required by the applicable law.

Children

Our website and products are not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

Contact and Grievance Officer

For privacy questions, requests, or complaints:

Email: privacy@fluxforce.ai

General contact: contact@fluxforce.ai

Registered-address : 8191, First Floor, Sunny Enclave, Kharar(Rupnagar)-140301, Punjab, India

Website: https://www.fluxforce.ai

Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last Updated" date and, where appropriate, notify you. Please review this page periodically.

© 2026 FluxForce.ai. All rights reserved.