Privacy Policy

Last updated: April 22, 2026

1. Who We Are

FlirtIQ is an AI-powered conversation coaching service. For privacy inquiries, contact us at privacy@flirtiq.co.

2. What Data We Collect

·Account data (email, name) — collected via Clerk for account management.
·Conversation text you submit — sent to OpenAI for AI analysis. NOT stored after analysis is complete. We process it in memory only.
·Payment data — handled by Stripe. We store only your Stripe customer ID and subscription status.
·Usage data (IP address, device type) — collected for security and service operation.

Legal basis: Contract (Art. 6(1)(b) GDPR) for service delivery; Legitimate interest (Art. 6(1)(f)) for security and fraud prevention.

3. Third-Party Data in Conversations

Conversation text you submit may contain personal data of third parties who have not consented to this service. You are solely responsible for ensuring you have a lawful basis to share such data with FlirtIQ. We process it only for the purpose of providing analysis to you, and do not store it after the session.

4. Data Processors

We work with the following sub-processors, all covered by Data Processing Agreements:

OpenAI (USA)

AI analysis of conversation text. OpenAI does not use API data to train models. Data retained up to 30 days for safety monitoring, then deleted. Transfers covered by SCCs and EU-US Data Privacy Framework.

Clerk (USA)

User authentication and account management. DPA in place. Transfers covered by SCCs.

Stripe (USA)

Payment processing. DPA in place. Transfers covered by SCCs and EU-US Data Privacy Framework.

Vercel (USA)

Hosting and infrastructure. DPA in place.

5. Data Retention

·Account data: retained while your account is active. Deleted within 30 days of account deletion request.
·Conversation text: NOT stored. Processed in memory only and discarded immediately after analysis.
·Payment records: retained as required by applicable tax law (up to 7 years).

6. Your Rights (EU / EEA)

Under GDPR, you have the right to:

·Access your personal data
·Rectification of inaccurate data
·Erasure ("right to be forgotten")
·Restriction of processing
·Data portability
·Object to processing

To exercise any right, contact privacy@flirtiq.co. We will respond within 30 days.

7. Cookies

We use only strictly necessary cookies required for authentication (Clerk) and payment security (Stripe). We do not use analytics cookies. No consent banner is required for strictly necessary cookies under ePrivacy Directive.

8. Children

FlirtIQ is not intended for users under 18 years of age. We do not knowingly collect data from minors.

9. Changes to This Policy

We will notify you of material changes via email or in-app notice at least 14 days before they take effect.

10. Contact

Privacy questions or GDPR requests: privacy@flirtiq.co