Privacy Notice

This Privacy Notice explains how FlashTeams, Inc. ("FlashTeams", "we", "us") collects, uses and shares personal information when you visit our websites, sign in, or use the FlashTeams workspace, FlashBrain, our agents, and our IDE, desktop and MCP tools (the "Service").

FlashTeams is a business product. Most personal information in a workspace belongs to the organization that runs it, usually your employer or client. For that information we act as a processor or service provider and follow the organization's instructions, and the organization's own privacy notice applies too. We are the controller for the information we use to run our own business, such as sign-in, billing, website visits and support.

1. Information we collect

Information you or your organization give us

• Account details: name, email address, password (kept only as a secure hash by our sign-in provider), job title, role, department and skills.
• Workspace content: projects, tasks, comments, messages, chats with FlashBrain, documents, requirements, time logs and files you upload.
• Code and development data: source code, commit history, branches, pull requests, issues and build results from repositories and tools your organization connects.
• Billing details: billing contact, plan and purchase history. Card numbers go directly to Stripe, and we never store them.
• Support and feedback: what you send us when you contact us.

Information we collect automatically

• Device and log data: IP address, browser and operating system, pages and features used, and the date and time of requests.
• Activity data: what happens in the workspace, such as task status changes, how long a task is in progress, time recorded during agent sessions, and use of AI features and Flash Credits.
• Error reports: details of crashes and failed requests, used to find and fix bugs.
• Cookies and local storage: see Section 6.

Information from others

• Your organization: when an administrator invites you, they give us your name, email address, role and department.
• Connected services: when your organization connects a service, we receive data from it, for example your GitHub username so commits can be matched to you, or notes from a meeting notes tool.

2. How we use information

• To provide the Service: run your workspace, power FlashBrain and agents, index connected repositories, produce estimates and reports, and keep data in sync with connected services.
• To keep it secure: verify who is signing in, keep each company's sign-in to its own members, detect abuse and fraud, and investigate incidents.
• To bill and meter use: process payments, track Flash Credit use and send invoices.
• To support and communicate: answer requests and send service messages, such as security alerts, invitations and changes to our terms. We send marketing emails only where the law allows, and each one includes a way to opt out.
• To improve the Service: study usage and error data, aggregated or de-identified where possible, to fix problems and decide what to build. We do not use workspace content or code to train AI models.
• To meet legal obligations: keep the records the law requires and respond to lawful requests.

3. AI features

When you use an AI feature, we send the content it needs (for example your question, the relevant tasks, and excerpts of indexed code) to an AI model provider to generate a response. Our providers process this data on our behalf under terms that do not let them use it to train their models.

What an AI feature produces is stored in your workspace like other workspace content.

4. What your organization can see

Your organization controls its workspace. Its administrators can see and manage workspace content, including your tasks, comments, time logs, activity, and use of AI features and Flash Credits, and they can change or remove your account in the workspace.

If you have questions about how your organization uses this information, or want to exercise privacy rights over workspace content, contact your organization first. If you contact us, we may pass your request on to it.

5. How we share information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share it only in these ways:

• Service providers that run parts of the Service for us under contracts limiting how they use the data: hosting and infrastructure (Vercel, Supabase, Google Cloud, Amazon Web Services and Cloudflare), AI model providers (such as Anthropic and OpenAI), payments (Stripe) and email.
• Connected services your organization chooses, as needed to do what it asks, for example opening a pull request on GitHub.
• Your organization and its members, according to workspace settings and roles.
• For legal and safety reasons, when we believe in good faith that the law requires it, or to protect the rights, property or safety of FlashTeams, our customers or others.
• In a business transfer, such as a merger, acquisition, financing or sale of assets, in which case this Notice continues to apply.

6. Cookies and local storage

We use cookies that are strictly necessary to keep you signed in and to protect sign-in. They do not track you across other websites.

We also store settings on your device, such as theme and text size, and may keep a copy of recently viewed workspace data in your browser so pages load quickly.

We count page visits with Vercel Web Analytics, which does not use cookies and does not identify you across websites.

7. How long we keep information

We keep account and workspace information while your organization's subscription is active. When it ends, the organization can export its data for 30 days, after which we delete workspace content from our active systems within a reasonable period. Backups expire on a rolling schedule.

We keep billing records, records of accepted terms and security logs for as long as we need them to meet legal, tax and security obligations.

If an administrator removes you from a workspace, your content in that workspace stays with the organization.

8. Security

We protect information with measures designed for the purpose, including encryption in transit, role-based access controls, audit logging and monitoring. No system is perfectly secure. If a breach affects your personal information, we will notify you, your organization and regulators as the law requires.

9. International transfers

We are based in the United States, and we and our service providers process information in the United States and other countries. When we transfer personal information out of the European Economic Area, the United Kingdom or Switzerland, we rely on safeguards the law recognizes, such as standard contractual clauses.

10. Your rights and choices

Depending on where you live, you may have the right to access, correct or delete your personal information, to receive a copy of it, to object to or restrict certain processing, and to withdraw consent you have given. California residents have rights under the CCPA, including the right to know what we collect and the right not to be treated differently for using their rights. We do not sell or share personal information as the CCPA defines those terms.

To make a request, email support@flashteams.ai from the address on your account. We may need to verify your identity first. For workspace content, we will usually refer your request to your organization. You can also complain to your local data protection authority.

11. Legal bases for processing

Where the GDPR or UK GDPR applies, we rely on: performance of a contract, to provide the Service; legitimate interests, to secure, support and improve the Service and run our business, balanced against your rights; consent, where we ask for it, which you can withdraw at any time; and legal obligations.

12. Children

The Service is for business use and is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

13. Changes to this Notice

We will post updates here with a new effective date. If a change is material, we will tell workspace administrators in advance.

14. Contact

Questions or requests about privacy can be sent to support@flashteams.ai.