Skip to main content

Privacy Policy

Last updated: August 4, 2026

1. Introduction and data controller

Flatzer is a trade name operated by Francisco Javier Pedrosa Ruiz, an individual based in Spain, who provides small online businesses with an ecommerce sales assistant, embedded principally as a web widget in their stores and, when enabled, through supported marketplace and channel integrations. Flatzer serves customers globally, with a primary focus on the European Union and United States markets. Where this policy says "we" or "the controller", it refers to that owner.

This Privacy Policy explains how we collect, use, retain, and share personal data when you use our services. The European Union General Data Protection Regulation (GDPR) and Mexico’s LFPDPPP apply where relevant, together with any other applicable law.

Data controller: Francisco Javier Pedrosa Ruiz
Spanish tax ID (NIF): 75893383F
Contact email: [email protected]

2. Data we collect

We collect the following categories of personal data:

2.1 Registration data

When you create an account, we collect your full name and email address. This data is necessary to identify you as a platform user and manage your account.

2.2 Business data

During assistant setup, we collect the business information you provide, such as your catalogue, products or services, communication style, channels, and supported integrations. We use it to configure the web widget, sales assistant, and features you enable.

2.3 Payment data

Payment data (card number, billing details) is managed directly by Stripe. Flatzer does not store or have access to your full card details. We only retain a customer identifier and your subscription status. Privacy policy

2.4 Usage data

We collect access logs, product and website events, pages or features used, assistant metrics, and device and browser information. PostHog and Google Analytics may process this data. After an account is identified, some PostHog events may be associated with the user’s name or email address and are therefore not always anonymous.

2.5 Communication data

Messages exchanged between the deployed sales agent and your end customers are stored in Flatzer's PostgreSQL database. This data belongs to your business and Flatzer does not use it to train models. It is retained for the retention period configured by the business owner —30 days by default, adjustable between 1 and 90 days— after which it is automatically and permanently deleted. You may request its earlier deletion at any time.

2.6 Integration and booking data

If you enable Google Calendar, we process the OAuth data needed to connect the account and availability and booking data such as name, contact details, and an optional note. When the assistant uses web search, the query is sent to Tavily or Brave. We process this data only when the corresponding feature is used.

2.7 Public demo data

When you request a public demo, we retain the submitted URL and email address, public content obtained from that URL through Inspector Gadget or Almirant and, separately, the demo transcript. The URL, email address, and scraped content remain until manual deletion or completion of a valid deletion request. The transcript is automatically and permanently deleted once it passes the 90-day threshold.

3. Purpose of processing

We process your personal data for the following purposes:

  • Provide the service: configure and operate the ecommerce sales assistant, principally through the web widget and enabled integrations.
  • Manage accounts and billing: administer registration, process payments, and manage subscriptions.
  • Process conversations: generate responses through the configured model provider and retain history under the tenant retention setting.
  • Provide optional features: connect calendars, handle bookings, run web searches, and generate demos when requested.
  • Analyze and improve the service: measure product and website use, diagnose errors, and guide improvements; this data may be associated with an account.
  • Send service communications: send transactional emails, account notices, demo messages, and technical support.

4. Legal basis for processing

In accordance with the GDPR, the processing of your data is based on:

  • Contract performance: data necessary to provide the service you signed up for.
  • Legitimate interest: security, fraud prevention, service diagnostics, and PostHog cookieless measurement without persistent identifiers where applicable law permits.
  • Consent: PostHog persistent identifiers or storage and Google Analytics through Consent Mode where applicable law requires consent. You may withdraw it at any time without affecting prior lawful processing.

Where Mexico’s LFPDPPP applies, its notices, legal bases, and rights provide additional protection. If processing relies on consent, you may withdraw it without affecting processing carried out lawfully before withdrawal.

5. Sharing data with third parties

Depending on tenant configuration and the features used, the following providers or services may receive the data categories needed to provide that feature:

  • Stripe: payment and subscription processing. Privacy policy
  • OpenAI: processing messages and requests through language models when configured for the tenant. Privacy policy
  • Anthropic: processing messages and requests through language models when configured for the tenant. Privacy policy
  • xAI: processing messages and requests through language models when configured for the tenant. Privacy policy
  • DeepSeek: processing messages and requests through language models when configured for the tenant. Privacy policy
  • Z.AI: processing messages and requests through language models when configured for the tenant. Privacy policy
  • Hetzner: hosting infrastructure used to provide parts of the Service. Privacy policy
  • Google Calendar: OAuth, availability, and booking data when the calendar integration is enabled. Privacy policy
  • Tavily: processing web-search queries when the assistant uses that feature. Privacy policy
  • Brave: processing web-search queries when the assistant uses that feature. Privacy policy
  • Resend: sending transactional emails for accounts, demos, and other service communications. Privacy policy
  • Inspector Gadget: obtaining public content from the URL submitted for a demo when this route is selected.
  • Almirant: an alternative route for obtaining public content from the URL submitted for a demo.
  • PostHog: product analytics, including usage events and identified account data such as name or email address. Privacy policy
  • Google Analytics: website measurement through Google Consent Mode, with storage signals determined by the regional consent state. Privacy policy

We may also disclose data when required by law, to respond to a valid legal request, or to establish, exercise, or defend legal claims.

6. International data transfers

Some providers may process personal data outside your country or the European Economic Area. The destination and applicable safeguards depend on the provider, tenant configuration, and feature used. Where applicable law requires a transfer mechanism, the relevant mechanism must be used. You may request the information currently available through the contact in this policy.

For people protected by Mexico’s LFPDPPP, international transfers remain subject to that law and the applicable privacy notice. This additional coverage does not limit rights available under other laws.

7. Data retention

Conversations and messages persisted in PostgreSQL are retained for the retention period configured by the business owner —30 days by default, adjustable between 1 and 90 days— and are automatically and permanently deleted once they exceed that age, unless a legal obligation requires retaining certain data. You may request the earlier deletion of this data at any time.

When cancellation takes effect, Flatzer removes the Agent runtime, container and volume to stop the service and its cost. Conversations and messages kept in PostgreSQL are deleted according to the retention period described —or immediately if you request their earlier deletion.

For public demos, the submitted URL, email address, and scraped public content remain until manual deletion or completion of a valid deletion request. Demo transcripts are automatically and permanently deleted once they pass the 90-day threshold.

8. Your rights

Depending on applicable law and its exceptions, you may have the following rights in relation to your personal data:

  • Access: request a copy of the personal data we hold about you.
  • Rectification: request correction of inaccurate or incomplete data.
  • Cancellation: request deletion of your personal data.
  • Objection: object to the processing of your data in certain circumstances.
  • Portability: request to receive your data in a structured, commonly used format.
  • Restriction: request that we restrict processing of your data in certain circumstances.

To exercise any of these rights, send your request to [email protected]

If you believe that the processing of your data does not comply with applicable regulations, you have the right to file a complaint with the competent data protection authority:

  • In Spain: Spanish Data Protection Agency (AEPD) - www.aepd.es
  • In Mexico: National Institute for Transparency, Access to Information and Personal Data Protection (INAI) - www.inai.org.mx

9. Cookies and similar technologies

We use cookies and similar technologies to ensure platform functionality and improve your experience:

  • currency functional cookie: is derived from the detected country to show prices in EUR or USD and lasts 30 days.
  • consent_required state cookie: is derived from the detected country to determine whether the consent notice must be shown and lasts 30 days.
  • analytics_consent choice cookie: remembers whether analytics consent was granted or denied and lasts 1 year.
  • Analytics behavior: in regions requiring consent, PostHog records cookieless events while the choice is pending or consent is denied, without client cookies, local storage, or persistent identifiers and with a server-side hash that rotates daily. After consent, or where regional consent is not required, PostHog may use persistent identifiers and associate events with identified accounts. For Google Analytics, Consent Mode keeps analytics and advertising storage signals denied while the choice is pending or denied and grants them after acceptance or where regional consent is not required.

You can manage available choices in the cookie notice and your browser. Rejecting analytics prevents persistent PostHog storage and identification and keeps Google Consent Mode signals denied, but it does not stop PostHog cookieless measurement. Blocking functional cookies may affect the displayed currency or prevent your choice from being remembered.

10. Data security

We use technical safeguards designed to protect personal data. No transmission or storage method is completely secure.

  • Encryption in transit: communications between the browser and our services use HTTPS/TLS.
  • Workload separation: agent environments run in tenant-separated containers where applicable.
  • Access controls: administrative systems use access controls to limit the processing of personal data.

11. Changes to this policy

We may update this Privacy Policy. We will publish the revised version and update date on this page and provide any additional notice required by applicable law.

We recommend reviewing this page periodically for the current version.

12. Data controller contact

For any questions, requests, or complaints related to this Privacy Policy or the processing of your personal data, you can contact us through:

Contact email: [email protected]

Technical support: [email protected]

Controller: Francisco Javier Pedrosa Ruiz

Spanish tax ID (NIF): 75893383F

We will handle inquiries and requests under the requirements and time limits of applicable law.