Privacy Policy

Last updated: March 8, 2026

On My Flow, Inc. ("On My Flow," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services ("Service").

1. Information We Collect

We may collect the following types of information:

Account Information

• Name, email address, and phone number
• Account credentials (authentication tokens via third-party OAuth providers)
• Profile information you choose to provide

Usage Data

• Interactions with AI agents, including messages sent and received
• Feature usage and activity logs
• Device information, browser type, and IP address

Connected Services

• When you connect third-party accounts (e.g., Google, Microsoft), we receive access tokens and basic account information (such as email address) necessary to provide the Service
• Data retrieved from connected services as configured by you (e.g., emails, calendar events)

SMS and Communication Data

• Phone numbers used for SMS messaging
• Message content exchanged with AI agents
• Opt-in and opt-out preferences

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process and deliver AI agent responses
• Authenticate your identity and manage your account
• Send transactional messages, including SMS communications you have opted into
• Improve, personalize, and develop new features
• Monitor and analyze usage trends and performance
• Detect, prevent, and address technical issues or security threats
• Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With third-party vendors who assist us in operating the Service (e.g., cloud hosting, AI model providers, SMS delivery), subject to confidentiality obligations
• Connected Services: With third-party services you have explicitly connected to your account (e.g., Google, Microsoft) to the extent necessary to provide the requested functionality
• Legal Requirements: When required by law, regulation, legal process, or governmental request
• Safety: To protect the rights, property, or safety of On My Flow, our users, or the public
• Business Transfers: In connection with a merger, acquisition, or sale of assets, in which case your information may be transferred to the successor entity

4. Data Security

We implement industry-standard security measures to protect your personal information, including encryption of data in transit and at rest, secure token storage, and access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. We may also retain certain information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we will delete or anonymize your personal information within a reasonable timeframe, except where retention is required by law.

6. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request a portable copy of your data
• Opt-Out of SMS: Reply STOP to any SMS message to unsubscribe
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at support@onmyflow.ai.

7. Cookies and Tracking

We use essential cookies to maintain your session and authenticate your account. We do not use third-party advertising trackers. We may use analytics tools to understand how the Service is used, and you can control cookie preferences through your browser settings.

8. Third-Party Services

The Service may integrate with or contain links to third-party services (e.g., Google, Microsoft). These third-party services have their own privacy policies, and we are not responsible for their practices. We encourage you to review the privacy policies of any third-party services you connect to your account.

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete such information promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy.

11. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your information, and the right to opt out of the sale of your information. As noted above, we do not sell personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a revised "Last updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the revised Privacy Policy.