Privacy Policy

Last updated: November 08, 2026

1. Data Controller

The data controller for Floik is:

  • Company: Floik
  • Contact: privacy@floik.com

2. Information We Collect

2.1 Information You Provide

  • Account information: Email address, name, password (hashed)
  • Payment information: Transaction amount, payment status. Full card data is handled by our payment processor — we never store card numbers
  • Content you create: Video recordings, edited demos, and associated metadata
  • Communication: Support tickets, feedback, and correspondence

2.2 Information We Automatically Collect

  • Device & network: IP address, device type, OS, browser, timezone
  • Usage data: Pages visited, features used, session duration, error logs
  • API usage: Request timestamps, quota consumption

3. How We Use Your Information

Purpose Legal Basis
Providing the service Contract performance
Billing & payments Contract performance
Customer support Legitimate interest
Service notifications (billing, security, policy) Legitimate interest
Security & fraud prevention Legitimate interest
Product improvement & analytics Legitimate interest
Marketing (if opted in) Consent

We may anonymize data for aggregate statistics that cannot identify individuals.

4. Cookies & Tracking

Type Purpose Can Be Disabled
Strictly necessary Login, core features No
Functional Preferences, personalization Yes
Analytics Usage statistics, product improvement Yes
Marketing Targeted advertising (if applicable) Yes

You can manage cookie preferences through your browser settings or our cookie consent banner.

5. Data Sharing

We do not sell your personal information. We share data only in the following circumstances:

  • Payment processing: Card data is handled by Waffo Pancake, our PCI-DSS compliant processor. We store only transaction metadata, never full card numbers
  • Service providers: Cloud hosting, email delivery, analytics — bound by confidentiality agreements
  • Legal requirements: When required by law, court order, or regulatory authority
  • Business transfers: In mergers or acquisitions, with notice and continued protection
  • With your consent: For any other purpose not listed above

6. Data Security

  • Encryption in transit: TLS/HTTPS for all connections
  • Encryption at rest: Sensitive data (passwords, tokens) is hashed/encrypted
  • Access controls: Least-privilege principle; staff under NDA
  • Regular audits: Security assessments and vulnerability scanning

In the event of a data breach affecting your rights, we will notify affected users and authorities within 72 hours of discovery.

7. Data Retention

Data Type Retention Period Disposal
Account data Active account + 90 days after deletion Secure deletion
Transaction records 7 years (tax/legal requirements) Secure deletion or archival
Support correspondence 3 years after resolution Secure deletion
Security logs 12 months Secure deletion
User content (videos, demos) Until deleted by user or account deleted Secure deletion

8. Your Rights

Depending on your jurisdiction, you may have the right to:

Right Description
Access Request a copy of your personal data
Rectification Correct inaccurate or incomplete data
Erasure Request deletion of your data (subject to legal retention)
Restriction Pause processing in certain circumstances
Portability Receive data in a machine-readable format
Object Object to processing based on legitimate interest
Withdraw consent Revoke consent for consent-based processing

To exercise any rights, contact privacy@floik.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

9. Marketing

We may send marketing communications if you have opted in. You can unsubscribe at any time via the link in the email or in your account settings. Opting out does not affect service-related notifications (billing, security, policy updates).

10. International Transfers

Our servers and service providers may be located internationally. When transferring data across borders, we ensure adequate protection through standard contractual clauses or equivalent mechanisms.

11. Children's Privacy

Floik is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with data, contact privacy@floik.com and we will promptly delete it.

12. Third-Party Links

Our service may contain links to third-party websites or services. This Privacy Policy applies only to data we collect. We are not responsible for the practices of third parties. Review their privacy policies before providing personal information.

13. Policy Changes

We may update this policy periodically. Material changes will be communicated via email at least 15 days before taking effect. The "Last updated" date at the top reflects the current version.

14. Contact

  • Privacy inquiries: privacy@floik.com
  • Customer support: support@floik.com
  • Data rights requests: privacy@floik.com