Privacy Policy

Effective Date: September 8, 2026 | Last Updated: September 8, 2026

1. Introduction

Flikt.AI (“Flikt.AI,” “we,” “us,” or “our”) is committed to protecting the privacy of our customers, website visitors, and platform users. This Privacy Policy describes how we collect, use, disclose, and protect personal information when you visit our website at www.flikt.ai (the “Site”), use our AI-powered construction document conflict detection platform (the “Platform”), or engage with us for services.

This Privacy Policy should be read in conjunction with our Terms of Service, which govern your use of the Platform. By accessing the Site, submitting a quote request, uploading documents, or making a payment, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

We collect the following categories of information:

2.1 Information You Provide Directly

Contact Information: Name, email address, company name, job title. Quote requests, account creation, contact forms.

Project Information: Project name, location, construction value, project type, timeline. Quote request submissions.

Construction Documents: PDF construction plans (architectural, structural, MEP, fire protection, civil). Document uploads for quote evaluation or paid analysis.

Payment Information: Billing name, billing address, payment method selection (ACH or credit card). Checkout and invoicing. Note: full payment credentials are processed by Stripe and never stored on our servers.

Communications: Email correspondence, support requests, feedback. When you contact us directly.

2.2 Information Collected Automatically

When you visit the Site, we may automatically collect: device type, browser type, and operating system; IP address; pages visited, time spent on pages, and referring URLs; and cookies and similar tracking technologies (see Section 7 below).

2.3 Information from Third Parties

We may receive information from our payment processor (Stripe) regarding transaction status, payment confirmation, and fraud screening results. We do not receive or store your full credit card number, bank account number, or other sensitive payment credentials from Stripe.

3. How We Use Your Information

We use the information we collect for the following purposes:

(a) Service Delivery. To process quote requests, analyze construction documents, generate conflict reports, and deliver our AI-powered services.

(b) Payment Processing. To process payments, send invoices, and manage billing through our payment processor, Stripe.

(c) Communication. To respond to inquiries, send project updates, deliver reports, and provide customer support.

(d) Platform Improvement. To develop, evaluate, test, and improve our services, including the accuracy of our conflict detection, as described in our Terms of Service (Section 5.3). This may include internal review and retention of customer content. We do not sell, license, or publish customer content, and we do not provide it to third-party AI providers for model training. Customer content is shared only with the service providers listed in Section 4, who process it on our behalf.

(e) Security. To detect, prevent, and address fraud, unauthorized access, and other security issues.

(f) Legal Compliance. To comply with applicable laws, regulations, and legal processes.

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share information only in the following limited circumstances:

Stripe (Payment Processor): To process payments via ACH, wire transfer, or credit card. Billing name, email, payment method selection. Stripe processes payment credentials directly under its own privacy policy.

Amazon Web Services (AWS): To host the Platform, store data, and deliver email notifications via AWS SES. All Platform data is stored on encrypted AWS infrastructure (S3, RDS). AWS does not access your data.

Anthropic (Claude API): To perform AI-powered conflict detection analysis on construction documents. Construction document content is transmitted for analysis. Processed under strict confidentiality and data processing agreements, and under a zero-data-retention agreement: content is not retained by the AI provider after processing, and is never used to train AI models.

Google Cloud Vision: Backup optical character recognition (OCR) for document text extraction. Document page images for text extraction only. Used only when primary OCR is insufficient.

Clerk: User authentication and account management. Name, email address, account credentials. Clerk manages secure authentication under its own privacy policy.

Brevo (Sendinblue): To send transactional emails (account confirmations, project updates, reports). Email address, name. Used for email delivery only.

Sentry: Error monitoring and performance tracking to maintain Platform reliability. Technical error data only. Configured with PII protection enabled — no personal information is transmitted.

Legal / Regulatory: To comply with law, subpoena, or legal process. Only as required by law and only the minimum information necessary.

Successors in interest: In connection with a merger, acquisition, financing, or sale of all or substantially all assets. Information may transfer to the successor entity, which remains bound by this Privacy Policy or a policy no less protective. You will be notified of any such transfer.

Professional advisors: Legal, accounting, insurance, and audit services. Only the minimum information necessary, under professional confidentiality obligations.

5. Data Retention

We retain personal information and project data according to the following schedule:

Quote-phase documents: Retained on secure infrastructure. Per Terms of Service Section 4.4. Deletion available upon request.

Engagement project data: Duration of engagement + 1 year. For warranty claims (15-day window per MSA Section 6.2) and legal compliance.

Payment records: 7 years. Required by IRS record-keeping rules and state tax regulations.

Account information: Duration of account + 30 days. Deleted upon account closure, after a 30-day grace period.

Usage logs: 12 months. Standard retention for server logs and usage data. Aggregated data may be retained indefinitely.

Content retained for service improvement: Retained while it remains useful for evaluation and quality assurance. Internal accuracy benchmarking and quality control per Terms of Service Section 5.3. Not sold, licensed, or published. Deletion available upon request.

You may request earlier deletion of your data at any time by contacting support@flikt.ai. We will process deletion requests within thirty (30) days, subject to any legal retention obligations.

6. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information, including:

Encryption of data in transit (TLS/SSL) and at rest (AES-256 or equivalent).

Access controls limiting data access to authorized personnel on a need-to-know basis.

Secure cloud infrastructure with SOC 2-compliant hosting providers.

Regular security assessments and monitoring for unauthorized access.

Stripe PCI-DSS Level 1 compliance for all payment processing (Flikt.AI never stores payment credentials).

While we take reasonable measures to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. In the event of a data security breach, we will notify any affected users consistent with applicable law.

7. Cookies & Tracking Technologies

We use cookies and similar technologies on the Site for the following purposes:

Essential: Required for Site functionality, security, and authentication. Session / up to 1 year.

Functional: To remember your preferences and improve Site performance (e.g., account settings, feature usage). Up to 1 year.

Payment: Set by Stripe during checkout to process payments and prevent fraud. Per Stripe’s policy.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect Site functionality. We do not use cookies for advertising or cross-site tracking purposes.

Cookie Consent. In accordance with applicable state privacy laws, we provide notice of our cookie usage and honor opt-out requests. You may opt out of non-essential cookies at any time through your browser settings or by contacting us at privacy@flikt.ai. Certain states may require affirmative opt-in consent for non-essential cookies; we comply with all applicable requirements.

8. Your Rights & Choices

Depending on your location, you may have certain rights regarding your personal information. We honor these rights for all users regardless of location as a matter of good practice:

Access. Request a copy of the personal information we hold about you.

Correction. Request correction of inaccurate or incomplete personal information.

Deletion. Request deletion of your personal information, subject to legal retention obligations.

Data Portability. Request your data in a structured, commonly used format.

Opt-Out of Non-Essential Cookies. Opt out of non-essential cookies by adjusting your browser settings or contacting us.

Withdraw Consent. Where processing is based on consent, you may withdraw consent at any time.

To exercise any of these rights, contact us at privacy@flikt.ai or support@flikt.ai. We will respond within thirty (30) days.

9. Third-Party Payment Processing (Stripe)

We use Stripe, Inc. as our payment processor. When you make a payment through the Platform or via a Stripe-hosted checkout page, your payment information is collected and processed directly by Stripe. Flikt.AI does not receive, process, or store your full credit card number, bank account number, or other sensitive payment credentials.

Stripe is PCI-DSS Level 1 certified, the highest level of certification available in the payment industry. Stripe’s collection and use of your payment information is governed by Stripe’s own Privacy Policy, available at https://stripe.com/privacy. We encourage you to review Stripe’s policy.

We receive from Stripe only: transaction confirmation and status, payment method type (e.g., ACH or credit card), last four digits of account (for identification purposes), and billing name and email address.

10. Children’s Privacy

The Site and Platform are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will promptly delete it. If you believe a child has provided us with personal information, please contact us at privacy@flikt.ai.

11. State-Specific Disclosures

11.1 Florida

Flikt.AI is headquartered in the State of Florida. While the Florida Digital Bill of Rights (FDBR) applies to companies meeting certain revenue and data volume thresholds, we voluntarily extend the following rights to all Florida residents: the right to access, correct, and delete personal information; the right to opt out of the sale of personal information (we do not sell personal information); and the right to opt out of profiling (we do not engage in profiling for automated decision-making).

11.2 California

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). We do not sell or share personal information for cross-context behavioral advertising. California residents may contact us at privacy@flikt.ai to exercise their rights.

Personal Information We Collect About You. In the preceding 12 months, we have collected the following categories and specific types of consumer personal information:

Identifiers (e.g., real name, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name): Name, email, company name, IP address, account ID.

Information that identifies, relates to, describes, or is capable of being associated with a particular individual (e.g., name, address, telephone number): Name, email, billing address, company name, job title.

Commercial information (e.g., records of products or services purchased, obtained, or considered): Subscription tier, project purchases, service history.

Internet or other electronic network activity information (e.g., browsing history, search history, interaction with website or application): Pages visited, features used, session duration, referring URLs.

Inferences drawn from any of the above to create a profile reflecting preferences, characteristics, or behavior: Service usage patterns, feature preferences.

NOTE: We do NOT collect: biometric information, protected classification characteristics, audio/visual/thermal information, education information, professional employment records, or sensitive personal information. Our Platform processes construction documents only.

How Your Personal Information is Collected. We collect most of this personal information directly from you — via our website, platform, email, and phone. See Section 2 for details.

Why We Use Your Personal Information. We collect and/or share consumer personal information for the business purposes described in Section 3.

Who We Share Your Personal Information With. In the preceding 12 months, we may have shared consumers’ personal information as described in Section 4.

Categories of Personal Information We Sold or Shared. We do not sell personal information for monetary consideration. We share limited personal information with service providers (listed in Section 4) solely to operate the Platform and deliver our services.

Categories of Personal Information We Disclosed for a Business Purpose. In the preceding 12 months, we may have disclosed identifiers and contact information to service providers listed in Section 4 for the business purposes described therein.

How Long Your Personal Information Will Be Kept. See Section 5 for our data retention schedule.

Your Rights Under the CCPA. You have the right under the CCPA, and certain other privacy and data protection laws, to exercise free of charge:

Disclosure of Personal Information: You have the right to know and request disclosure of: the categories of personal information collected; the sources from which it is collected; our business purpose for collecting it; the categories of third parties to whom we disclose it; and the specific pieces of personal information we have collected about you.

Disclosure of Information Sold, Shared, or Disclosed for a Business Purpose: You have the right to know the categories of personal information sold, shared, or disclosed for a business purpose and the categories of recipients. You have the right to opt-out of the sale or sharing of your personal information. Contact support@flikt.ai to opt-out.

Right to Limit Use of Sensitive Personal Information: You have the right to limit the use and disclosure of sensitive personal information to what is necessary to perform our services.

Right to Deletion: On receipt of a verifiable request, we will delete your personal information and direct service providers to do the same, subject to legal exceptions (completing transactions, security, legal compliance, etc.).

Right of Correction: You have the right to request correction of inaccurate personal information. We will use commercially reasonable efforts to correct it upon receipt of a verifiable request.

Protection Against Retaliation: You have the right not to be retaliated against for exercising any CCPA rights. We will not deny services, charge different prices, or provide different service levels because you exercised your rights.

How to Exercise Your Rights. Contact us at support@flikt.ai. You may make a CCPA-related data access or portability request twice within a 12-month period. You will need to provide enough information to verify your identity.

11.3 Individuals in Other States

You may have rights under other state consumer privacy laws, including Colorado, Connecticut, Oregon, Texas, Utah, and Virginia. Please contact us at support@flikt.ai if you have questions or would like to exercise a right under these laws.

12. International Data

The Site and Platform are operated from the United States. If you access the Site from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Site, you consent to such transfer.

United States Scope

Flikt.AI offers the Site and Platform from, and intends them for, users located in the United States, and our data practices are governed by the laws of the State of Florida. We do not target or direct our services to individuals located in the European Union, United Kingdom, Mexico, Brazil, or other jurisdictions outside the United States. Any Spanish-language version of these materials is a convenience translation for United States–based Spanish-speaking users; the English-language version is authoritative.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by posting the revised policy on the Site with an updated “Last Updated” date and, where appropriate, by email notification to registered users. Your continued use of the Site or Platform following any changes constitutes acceptance of the updated policy.

14. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

Company: Flikt.AI

Privacy Contact Email: privacy@flikt.ai

General Support Email: support@flikt.ai

Website: www.flikt.ai