Política de Privacidad

Fecha de entrada en vigencia: 8 de septiembre de 2026 | Última actualización: 8 de septiembre de 2026

1. Introducción

Flikt.AI (“Flikt.AI,” “we,” “us,” or “our”) is committed to protecting the privacy of our customers, website visitors, and platform users. This Privacy Policy describes how we collect, use, disclose, and protect personal information when you visit our website at www.flikt.ai (the “Site”), use our AI-powered construction document conflict detection platform (the “Platform”), or engage with us for services.

Esta Política de Privacidad debe leerse junto con nuestra Términos de Servicio, los cuales rigen su uso de la Plataforma. Al acceder al Sitio, enviar una solicitud de cotización, cargar documentos o realizar un pago, reconoces que ha leído y entendido esta Política de Privacidad.

2. Información que recopilamos

We collect the following categories of information:

2.1 Información que usted proporciona directamente

Información de contacto: Name, email address, company name, job title. Quote requests, account creation, contact forms.

Información del proyecto: Project name, location, construction value, project type, timeline. Quote request submissions.

Documentos de construcción: PDF construction plans (architectural, structural, MEP, fire protection, civil). Document uploads for quote evaluation or paid analysis.

Información de pago: Billing name, billing address, payment method selection (ACH or credit card). Checkout and invoicing. Note: full payment credentials are processed by Stripe and never stored on our servers.

Comunicaciones Email correspondence, support requests, feedback. When you contact us directly.

2.2 Información que se recopila automáticamente

When you visit the Site, we may automatically collect: device type, browser type, and operating system; IP address; pages visited, time spent on pages, and referring URLs; and cookies and similar tracking technologies (see Section 7 below).

2.3 Información de Terceros

Es posible que recibamos información de nuestro procesador de pagos (Stripe) sobre el estado de las transacciones, la confirmación de los pagos y los resultados de los controles antifraude. No recibimos ni almacenamos su número completo de tarjeta de crédito, su número de cuenta bancaria ni otros datos confidenciales de pago a través de Stripe.

3. Cómo utilizamos su información

Usamos la información que recopilamos para los siguientes fines:

(a) Entrega del Servicio. Para procesar solicitudes de cotización, analizar documentos de construcción, generar informes de conflictos y ofrecer nuestros servicios impulsados por IA.

Procesamiento de pagos. Para procesar pagos, enviar facturas y gestionar la facturación a través de nuestro procesador de pagos, Stripe.

(c) Comunicación. Para responder a consultas, enviar actualizaciones sobre los proyectos, entregar informes y brindar atención al cliente.

(d) Mejora de la plataforma. To develop, evaluate, test, and improve our services, including the accuracy of our conflict detection, as described in our Terms of Service (Section 5.3). This may include internal review and retention of customer content. We do not sell, license, or publish customer content, and we do not provide it to third-party AI providers for model training. Customer content is shared only with the service providers listed in Section 4, who process it on our behalf.

(e) Seguridad. Para detectar, prevenir y abordar el fraude, el acceso no autorizado y otros problemas de seguridad.

(f) Cumplimiento normativo. Para cumplir con las leyes, regulaciones y procesos legales aplicables.

4. Cómo compartimos su información

No vendemos, alquilamos ni intercambiamos su información personal. Podemos compartir información solo en las siguientes circunstancias limitadas:

Stripe (proveedor de servicios de pago): To process payments via ACH, wire transfer, or credit card. Billing name, email, payment method selection. Stripe processes payment credentials directly under its own privacy policy.

Amazon Web Services (AWS): To host the Platform, store data, and deliver email notifications via AWS SES. All Platform data is stored on encrypted AWS infrastructure (S3, RDS). AWS does not access your data.

Anthropic (Claude API): To perform AI-powered conflict detection analysis on construction documents. Construction document content is transmitted for analysis. Processed under strict confidentiality and data processing agreements, and under a zero-data-retention agreement: content is not retained by the AI provider after processing, and is never used to train AI models.

Google Cloud Vision: Backup optical character recognition (OCR) for document text extraction. Document page images for text extraction only. Used only when primary OCR is insufficient.

Clerk: User authentication and account management. Name, email address, account credentials. Clerk manages secure authentication under its own privacy policy.

Brevo (Sendinblue): To send transactional emails (account confirmations, project updates, reports). Email address, name. Used for email delivery only.

Sentry: Error monitoring and performance tracking to maintain Platform reliability. Technical error data only. Configured with PII protection enabled — no personal information is transmitted.

Legal/Regulatorio: Para cumplir con la ley, una citación judicial o un proceso legal. Solo en la medida en que lo exija la ley y limitándonos a la información mínima necesaria.

Successors in interest: In connection with a merger, acquisition, financing, or sale of all or substantially all assets. Information may transfer to the successor entity, which remains bound by this Privacy Policy or a policy no less protective. You will be notified of any such transfer.

Professional advisors: Legal, accounting, insurance, and audit services. Only the minimum information necessary, under professional confidentiality obligations.

5. Conservación de datos

Conservamos la información personal y los datos de proyectos según el siguiente cronograma:

Documentos de presupuesto: Retained on secure infrastructure. Per Terms of Service Section 4.4. Deletion available upon request.

Datos del proyecto de participación: Duration of engagement + 1 year. For warranty claims (15-day window per MSA Section 6.2) and legal compliance.

Registros de pago: 7 years. Required by IRS record-keeping rules and state tax regulations.

Información de la cuenta: Duration of account + 30 days. Deleted upon account closure, after a 30-day grace period.

Usage logs: 12 months. Standard retention for server logs and usage data. Aggregated data may be retained indefinitely.

Content retained for service improvement: Retained while it remains useful for evaluation and quality assurance. Internal accuracy benchmarking and quality control per Terms of Service Section 5.3. Not sold, licensed, or published. Deletion available upon request.

Puede solicitar la eliminación anticipada de sus datos en cualquier momento contactando a support@flikt.ai. Procesaremos las solicitudes de eliminación dentro de los treinta (30) días, sujeto a cualquier obligación legal de retención.

6. Seguridad de datos

We implement reasonable administrative, technical, and physical safeguards to protect your personal information, including:

Encryption of data in transit (TLS/SSL) and at rest (AES-256 or equivalent).

Access controls limiting data access to authorized personnel on a need-to-know basis.

Secure cloud infrastructure with SOC 2-compliant hosting providers.

Regular security assessments and monitoring for unauthorized access.

Stripe PCI-DSS Level 1 compliance for all payment processing (Flikt.AI never stores payment credentials).

While we take reasonable measures to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. In the event of a data security breach, we will notify any affected users consistent with applicable law.

7. Cookies y tecnologías de seguimiento

Usamos cookies y tecnologías similares en el Sitio para los siguientes propósitos:

Esencial Required for Site functionality, security, and authentication. Session / up to 1 year.

Functional: To remember your preferences and improve Site performance (e.g., account settings, feature usage). Up to 1 year.

Pago: Set by Stripe during checkout to process payments and prevent fraud. Per Stripe’s policy.

Puedes administrar sus preferencias de cookies a través de la configuración de su navegador. Desactivar las cookies esenciales puede afectar la funcionalidad del Sitio. No usamos cookies con fines publicitarios ni de rastreo entre sitios.

Cookie Consent. In accordance with applicable state privacy laws, we provide notice of our cookie usage and honor opt-out requests. You may opt out of non-essential cookies at any time through your browser settings or by contacting us at privacy@flikt.ai. Certain states may require affirmative opt-in consent for non-essential cookies; we comply with all applicable requirements.

8. Sus Derechos y Opciones

Dependiendo de su ubicación, podría tener ciertos derechos relacionados con su información personal. Como una buena práctica, honramos estos derechos para todos los usuarios, independientemente de su ubicación:

Acceso. Solicite una copia de la información personal que tenemos sobre usted.

Corrección. Solicitud de corrección de información personal inexacta o incompleta.

Eliminación. Solicitar la eliminación de su información personal, sujeta a las obligaciones legales de retención.

Portabilidad de datos. Solicita sus datos en un formato estructurado y de uso común.

Opt-Out of Non-Essential Cookies. Opt out of non-essential cookies by adjusting your browser settings or contacting us.

Retirar consentimiento. Donde el procesamiento se basa en el consentimiento, puede retirar su consentimiento en cualquier momento.

Para ejercer cualquiera de estos derechos, contáctanos en privacy@flikt.ai o support@flikt.ai. Responderemos dentro de treinta (30) días.

9. Procesamiento de pagos de terceros (Stripe)

Utilizamos Stripe, Inc. como nuestro proveedor de servicios de pago. Cuando realizas un pago a través de la Plataforma o de una página de pago alojada por Stripe, Stripe recopila y procesa directamente su información de pago. Flikt.AI no recibe, procesa ni almacena el número completo de su tarjeta de crédito, el número de su cuenta bancaria ni otros datos confidenciales de pago.

Stripe is PCI-DSS Level 1 certified, the highest level of certification available in the payment industry. Stripe’s collection and use of your payment information is governed by Stripe’s own Privacy Policy, available at https://stripe.com/privacy. We encourage you to review Stripe’s policy.

Recibimos de Stripe únicamente: confirmación y estado de la transacción, tipo de método de pago (por ejemplo, ACH o tarjeta de crédito), los últimos cuatro dígitos de la cuenta (para fines de identificación) y el nombre y la dirección de correo electrónico de facturación.

10. Children’s Privacy

El Sitio y la Plataforma no están dirigidos a personas menores de 18 años. No recopilamos intencionadamente información personal de niños. Si nos damos cuenta de que hemos recopilado información de un niño menor de 18 años, la eliminaremos de inmediato. Si cree que un niño nos ha proporcionado información personal, contáctenos en privacy@flikt.ai.

11. Divulgaciones estatales específicas

11.1 Florida

Flikt.AI tiene su sede en el estado de Florida. Si bien la Carta de Derechos Digitales de Florida (FDBR) se aplica a las empresas que alcanzan ciertos umbrales de ingresos y volumen de datos, nosotros extendemos voluntariamente los siguientes derechos a todos los residentes de Florida: el derecho a acceder, corregir y eliminar la información personal; el derecho a excluirse de la venta de información personal (no vendemos información personal); y el derecho a excluirse de la elaboración de perfiles (no realizamos la elaboración de perfiles para la toma de decisiones automatizada).

11.2 California

Si usted es residente de California, puede tener derechos adicionales bajo la Ley de Privacidad del Consumidor de California (CCPA), según enmendada por la Ley de Derechos de Privacidad de California (CPRA). No vendemos ni compartimos información personal para publicidad conductual entre contextos. Los residentes de California pueden contactarnos en privacy@flikt.ai ejercer sus derechos.

Personal Information We Collect About You. In the preceding 12 months, we have collected the following categories and specific types of consumer personal information:

Identifiers (e.g., real name, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name): Name, email, company name, IP address, account ID.

Information that identifies, relates to, describes, or is capable of being associated with a particular individual (e.g., name, address, telephone number): Name, email, billing address, company name, job title.

Commercial information (e.g., records of products or services purchased, obtained, or considered): Subscription tier, project purchases, service history.

Internet or other electronic network activity information (e.g., browsing history, search history, interaction with website or application): Pages visited, features used, session duration, referring URLs.

Inferences drawn from any of the above to create a profile reflecting preferences, characteristics, or behavior: Service usage patterns, feature preferences.

NOTE: We do NOT collect: biometric information, protected classification characteristics, audio/visual/thermal information, education information, professional employment records, or sensitive personal information. Our Platform processes construction documents only.

How Your Personal Information is Collected. We collect most of this personal information directly from you — via our website, platform, email, and phone. See Section 2 for details.

Why We Use Your Personal Information. We collect and/or share consumer personal information for the business purposes described in Section 3.

Who We Share Your Personal Information With. In the preceding 12 months, we may have shared consumers’ personal information as described in Section 4.

Categories of Personal Information We Sold or Shared. We do not sell personal information for monetary consideration. We share limited personal information with service providers (listed in Section 4) solely to operate the Platform and deliver our services.

Categories of Personal Information We Disclosed for a Business Purpose. In the preceding 12 months, we may have disclosed identifiers and contact information to service providers listed in Section 4 for the business purposes described therein.

How Long Your Personal Information Will Be Kept. See Section 5 for our data retention schedule.

Your Rights Under the CCPA. You have the right under the CCPA, and certain other privacy and data protection laws, to exercise free of charge:

Disclosure of Personal Information: You have the right to know and request disclosure of: the categories of personal information collected; the sources from which it is collected; our business purpose for collecting it; the categories of third parties to whom we disclose it; and the specific pieces of personal information we have collected about you.

Disclosure of Information Sold, Shared, or Disclosed for a Business Purpose: You have the right to know the categories of personal information sold, shared, or disclosed for a business purpose and the categories of recipients. You have the right to opt-out of the sale or sharing of your personal information. Contact support@flikt.ai to opt-out.

Right to Limit Use of Sensitive Personal Information: You have the right to limit the use and disclosure of sensitive personal information to what is necessary to perform our services.

Right to Deletion: On receipt of a verifiable request, we will delete your personal information and direct service providers to do the same, subject to legal exceptions (completing transactions, security, legal compliance, etc.).

Right of Correction: You have the right to request correction of inaccurate personal information. We will use commercially reasonable efforts to correct it upon receipt of a verifiable request.

Protection Against Retaliation: You have the right not to be retaliated against for exercising any CCPA rights. We will not deny services, charge different prices, or provide different service levels because you exercised your rights.

How to Exercise Your Rights. Contact us at support@flikt.ai. You may make a CCPA-related data access or portability request twice within a 12-month period. You will need to provide enough information to verify your identity.

11.3 Individuals in Other States

You may have rights under other state consumer privacy laws, including Colorado, Connecticut, Oregon, Texas, Utah, and Virginia. Please contact us at support@flikt.ai if you have questions or would like to exercise a right under these laws.

12. Datos internacionales

El Sitio y la Plataforma son operados desde los Estados Unidos. Si accede al Sitio desde fuera de los Estados Unidos, tenga en cuenta que su información puede ser transferida, almacenada y procesada en los Estados Unidos, donde las leyes de protección de datos pueden diferir de las de su jurisdicción. Al usar el Sitio, usted consiente dicha transferencia.

United States Scope

Flikt.AI offers the Site and Platform from, and intends them for, users located in the United States, and our data practices are governed by the laws of the State of Florida. We do not target or direct our services to individuals located in the European Union, United Kingdom, Mexico, Brazil, or other jurisdictions outside the United States. Any Spanish-language version of these materials is a convenience translation for United States–based Spanish-speaking users; the English-language version is authoritative.

13. Cambios a esta Política de Privacidad

We may update this Privacy Policy from time to time. Material changes will be communicated by posting the revised policy on the Site with an updated “Last Updated” date and, where appropriate, by email notification to registered users. Your continued use of the Site or Platform following any changes constitutes acceptance of the updated policy.

14. Información de contacto

Para preguntas, inquietudes o solicitudes sobre esta Política de Privacidad o nuestras prácticas de datos, por favor contacte a:

Empresa: Flikt.AI

Correo de contacto de privacidad: privacy@flikt.ai

Correo electrónico de soporte general: support@flikt.ai

Sitio web www.flikt.ai