Privacy Policy

Effective Date: September 11, 2026 Last Updated: September 11, 2026

Fluorine Technologies, Inc. ("Fluorine," "we," "us," or "our") provides an AI-powered workspace platform at fluorine.app and app.fluorine.app (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service, you agree to this Policy.

If you do not agree with this Policy, do not use the Service.

1. Who This Policy Applies To

This Policy applies to:

  • Account Users: people who sign up for and use Fluorine.

  • Workspace Members: people invited to a workspace by an administrator.

  • Visitors: people who visit fluorine.app or interact with our marketing.

"Customer" means the individual or organization that owns a workspace. "Customer Content" means any data, text, files, messages, documents, or other content submitted to the Service by the Customer or its users, including data retrieved from connected third-party services.

If you use Fluorine through a workspace owned by your employer or another organization, that organization is the Customer and controls your data within their workspace. Direct privacy questions about workspace content to your workspace administrator first.

2. Information We Collect

2.1 Information You Provide

  • Account Information: name, email address, password, profile photo, job title, company name.

  • Billing Information: payment details, billing address, and tax information. These are collected and processed by Paddle, our merchant of record (see Section 5). We do not receive or store full card numbers.

  • Workspace Content: tasks, projects, comments, and other content you create in Fluorine.

  • Communications: messages you send to support, feedback, and survey responses.

2.2 Information We Collect Automatically

  • Usage Data: features used, pages viewed, clicks, session duration, referring URLs.

  • Device and Log Data: IP address, browser type, operating system, device identifiers, timestamps, crash reports.

  • Cookies and Similar Technologies: see Section 9.

2.3 Information from Connected Sources

Fluorine works by reading the tools where your work actually happens. When you connect a source, we receive data from it as authorized by you:

  • Slack: messages, threads, and member names from the channels you connect.

  • GitHub: pull requests, commits, issues, reviews, and comments from the repositories you connect.

  • Zoom: meeting transcripts and participant names for meetings you authorize.

  • Email: the content of messages you or your workspace members forward to your workspace's private Fluorine address. We only accept messages from addresses belonging to workspace members.

We store this data so that Fluorine can detect where your project board no longer matches what is happening in those sources, and so that every proposal can link back to the evidence it is based on. You can disconnect a source at any time from workspace settings. Disconnecting stops new data from being collected; previously collected data is deleted per Section 6.

2.4 Information from Other Sources

We may receive information from analytics providers and publicly available sources for fraud prevention and security.

3. How We Use Information

We use information to:

  • Provide the Service: authenticate you, host your content, read connected sources, detect drift between your board and your sources, generate proposals with cited evidence, and answer questions about your projects.

  • Process AI Features: see Section 4.

  • Improve and Develop: debug, analyze usage, build new features.

  • Communicate: send service notifications, security alerts, and (if you opt in) marketing.

  • Support: respond to inquiries and troubleshoot.

  • Billing and Fraud Prevention: manage subscriptions, detect abuse.

  • Legal Compliance: comply with applicable law, enforce our Terms, and protect our rights and the rights of users.

We do not sell your personal information. We do not share personal information for cross-context behavioral advertising.

4. AI Features and Customer Content

Fluorine uses AI models to read Customer Content from connected sources, identify where a project board is out of date, draft proposed corrections, and answer questions.

  • Processing: relevant Customer Content is sent to our AI subprocessors for processing. Outputs are returned to your workspace and shown as proposals or answers, each linked to the source content it was based on.

  • No Training on Customer Content: we do not use Customer Content to train our own AI models or third-party foundation models. Our AI subprocessors are contractually prohibited from training their models on Customer Content processed through the Service.

  • Human Confirmation: proposed changes to your board are not applied until a workspace member confirms them, except where your workspace has chosen to apply certain changes automatically. Applied changes can be undone.

  • Aggregated and De-identified Data: we may use aggregated or de-identified data (which cannot reasonably be used to identify you) to improve the Service.

  • Output Accuracy: AI outputs may be inaccurate or incomplete. Do not rely on them as the sole basis for any decision with legal, financial, medical, or safety consequences.

5. How We Share Information

We share information only as described below.

  • Within Your Workspace: Customer Content, proposals, and profile information are visible to other members of your workspace per the permissions configured by the workspace administrator.

  • Service Providers (Subprocessors): we use third parties to host infrastructure, process payments, send email, provide analytics, and power AI features. Our current subprocessors are:

    • Railway — application hosting (United States)

    • Neon — database hosting (United States)

    • Vercel — web hosting (United States)

    • Paddle.com Market Ltd — payments and billing, as merchant of record (United Kingdom)

    • Anthropic — AI model processing (United States)

    • Sentry — error monitoring (United States)

    • Resend — transactional email (United States)

    Subprocessors are bound by confidentiality and data protection obligations. We will update this list when it changes.

  • Connected Sources: when you connect a source, data flows from that service to Fluorine per your configuration. The third party's privacy practices govern data in their system.

  • Legal Requirements: we may disclose information to comply with subpoenas, court orders, or other legal process; to enforce our Terms; or to protect the rights, property, or safety of Fluorine, our users, or others.

  • Business Transfers: in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction. We will provide notice before any such transfer.

  • With Your Consent: in any other case where you direct us to share.

6. Data Retention

We retain Customer Content, including data from connected sources, for as long as your workspace is active. When you disconnect a source, data from that source is deleted from production systems within 30 days. After account deletion, all Customer Content is deleted from production systems within 30 days and from backups within 90 days, except where retention is required by law or necessary to resolve disputes.

Account and billing records may be retained longer to comply with tax, accounting, and legal obligations.

Workspace administrators can export or delete Customer Content at any time from workspace settings.

7. Security

We implement administrative, technical, and physical safeguards designed to protect your information, including encryption in transit (TLS) and at rest, access controls, least-privilege principles, logging, and regular security reviews. Source credentials and tokens are stored encrypted. No system is 100% secure; we cannot guarantee absolute security.

If we become aware of a security incident affecting your information, we will notify you and any required regulators consistent with applicable law.

8. International Data Transfers

Fluorine is based in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S. and other countries where our subprocessors operate. For transfers from the European Economic Area, United Kingdom, or Switzerland, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.

9. Cookies and Tracking

We use cookies and similar technologies to keep you logged in, remember preferences, measure usage, and improve the Service. You can control cookies through your browser settings; disabling some cookies may impair the Service. We honor Global Privacy Control (GPC) signals where required.

10. Your Rights and Choices

Depending on your jurisdiction, you may have rights to:

  • Access the personal information we hold about you.

  • Correct inaccurate information.

  • Delete personal information.

  • Port your data to another service.

  • Object to or restrict certain processing.

  • Withdraw consent (where processing is based on consent).

  • Opt out of marketing emails (link in every marketing email).

To exercise these rights, email privacy@fluorine.app. We will respond within the timeframes required by applicable law (generally 30–45 days). We may need to verify your identity before fulfilling a request.

If Fluorine processes your data on behalf of a Customer (e.g., your employer), please direct your request to that Customer first; we will assist them as needed.

Individuals mentioned in connected sources. Fluorine may process information about people who appear in a Customer's connected sources (for example, a colleague named in a Slack message) but who do not themselves use Fluorine. The Customer is responsible for having a lawful basis to process that information. If you believe your information is being processed through a Customer's workspace, contact that Customer or email privacy@fluorine.app.

California Residents (CCPA/CPRA)

You have the right to know, delete, correct, and opt out of "sale" or "sharing" of personal information. We do not sell personal information and do not share it for cross-context behavioral advertising. You may also designate an authorized agent to make requests on your behalf.

EEA, UK, and Swiss Residents (GDPR)

Our legal bases for processing are: performance of a contract, compliance with legal obligations, our legitimate interests (e.g., securing the Service, preventing fraud), and your consent (where applicable). You have the right to lodge a complaint with your local supervisory authority.

11. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If we learn we have collected such information, we will delete it. Contact privacy@fluorine.app if you believe a child has provided us information.

12. Third-Party Links and Services

The Service may link to or integrate with third-party websites and services. We are not responsible for their privacy practices. Review their privacy policies before using them.

13. Changes to This Policy

We may update this Policy from time to time. If changes are material, we will notify you by email or through the Service at least 30 days before they take effect. Continued use of the Service after the effective date constitutes acceptance of the updated Policy.

14. Contact Us

Fluorine Technologies, Inc. Email: hello@fluorine.app Website: fluorine.app