Privacy Policy

Fluxway connects to your email, reads the context it needs to draft replies, and sends messages you approve from your own inbox. To do that we handle sensitive data — your mail and your customers' addresses. We treat it carefully, never sell it, and never use it to train AI models. This page explains exactly what we collect and why.

This policy applies to Fluxway ("Fluxway," "we," "us") — the website at fluxway.io and the Fluxway application. By creating an account or connecting a mailbox, you agree to the practices described here.

• Account details. Your email address and a securely hashed password.
• Connected mailbox. When you connect Gmail, Outlook, or IMAP, we store the mailbox address, the provider, and an opaque account identifier from our email connector. We do not store your email password or Google/Microsoft sign-in tokens — those stay with our connector (Unipile), which holds the verified provider integration.
• Email content. The drafts we generate, the recipient addresses and subjects, and the message bodies. We also process inbound replies to thread context and to detect unsubscribe requests.
• Product activity. If you connect an analytics source (e.g. PostHog) using a key you provide, we read the events and properties you configure so we know who to email and can personalize a draft.
• Technical data. Standard logs such as IP address, browser/user-agent, and timestamps, used to operate and secure the service.

• To generate draft emails in your voice and queue them for your review.
• To send the emails you approve from your connected mailbox.
• To honor unsubscribe requests and suppress repeat sends to the same recipient.
• To operate, secure, debug, and improve the service.
• To contact you about your account, the pilot, or material changes.

We do not sell your data, we do not use it for advertising, and we do not use your email content to train generalized AI models.

Drafting is powered by Anthropic's Claude API. To write a draft, we send the relevant context — recipient activity and the message we're replying to or composing — to Anthropic's API. Under Anthropic's commercial terms, data sent to the API is not used to train their models. Generated drafts always wait for you; nothing is created or sent without the activity that triggered it.

We share data only with the service providers that make Fluxway work, each acting on our instructions:

• UnipileConnects and sends from your mailbox; holds the provider OAuth integration.
• AnthropicGenerates email drafts via the Claude API.
• ResendOptional alternative sending provider, if you configure it.
• PostHogYour own analytics source, accessed with a key you provide.
• RailwayCloud hosting and managed database/queue infrastructure.
• SentryError monitoring to keep the service reliable.

We may also disclose information if required by law, or to protect the rights, safety, and security of our users and the service.

Where you connect a Google account, Fluxway's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We access this data through our connector's verified application solely to provide the Fluxway features you enable, and we do not use it for advertising or to train generalized AI models.

• All traffic is encrypted in transit with TLS.
• Stored secrets — API keys and connector credentials — are encrypted at rest with AES-256-GCM.
• Each workspace's data is isolated at the database level, so one workspace cannot read another's.
• Access to production systems is limited to what's needed to run the service.

No system is perfectly secure, but we work to protect your data and will notify you of a breach affecting it as required by law.

We keep your data while your account is active. You can export your workspace data as JSON at any time, and you can delete a workspace or your entire account from Settings. Deletion removes your stored data and disconnects external resources (such as your connected mailbox). Some minimal records may persist in backups or where the law requires, and are purged on our normal cycle.

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise the core ones directly in the app (export and delete), or contact us for anything else. Recipients of your emails can unsubscribe via the one-click link in every message.

Fluxway is a business tool not intended for anyone under 18, and we do not knowingly collect data from children.

We may update this policy as the product evolves. When we make material changes, we'll update the date above and, where appropriate, notify you in the app or by email.

Questions about privacy or your data? Email privacy@fluxway.io. See also our Terms of Service.