By clicking “Accept All Cookies”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. View our Privacy Policy for more information.
Effective Date: 4/8/2026
This Privacy Policy describes how FlowPath collects, uses, processes, and shares personal information through its website and application (the "Service"), and the choices available to individuals regarding that information.
This Privacy Policy applies to FlowPath's website and application and does not apply to third-party services, integrations, or customer-controlled systems that may connect to or interact with the Service. FlowPath is not responsible for the privacy practices of its customers or third parties, and individuals should refer to the applicable privacy notices of those parties for information about their practices.
FlowPath acts as a service provider that collects and processes personal information solely to provide, operate, secure, and support the Service, comply with applicable legal obligations, and enforce applicable agreements.
FlowPath collects and processes data solely to provide, operate, secure, and support the FlowPath service (the "Service"). Data is collected in the following ways:
FlowPath does not collect data for advertising purposes within the application, does not sell customer data, and does not access or use customer content except as necessary to provide and support the Service, comply with applicable legal obligations, or as otherwise described in FlowPath's Terms of Service and this Privacy Policy.
FlowPath uses personal information for the following purposes:
FlowPath may share personal information only as necessary to operate and support the Service, comply with legal obligations, or as directed or authorized by the customer. This may include sharing information:
FlowPath integrates with the OpenAI API to provide optional AI-assisted features within the Service. These features use large language model (LLM) APIs to generate responses and perform user-requested actions within FlowPath.
FlowPath does not train any AI models on customer data, user prompts, or AI interactions, and OpenAI does not use FlowPath data to train its models. Data submitted to the AI Assistant is processed transiently to provide the requested functionality.
The AI Assistant operates within FlowPath's infrastructure. All data queries and actions are executed server-side against the customer's FlowPath instance. The assistant enforces FlowPath's existing role-based access control (RBAC) model on every interaction — module access, settings access, workspace scoping, and role restrictions all apply. Admins, full users, requesters, and vendors each access data and take actions only within their authorized scope.
Every action the AI Assistant proposes — including record creation, updates, imports, and exports — is presented to the user for review and approval before execution. Autonomous mode, which allows the assistant to execute pre-approved action types without per-action confirmation, is opt-in and controlled at the admin level. When autonomous mode is enabled, the assistant still requests clarification when a request is ambiguous and maintains the same audit trail as manual actions.
FlowPath also offers optional AI agent teams — packaged collections of specialized agents that run on recurring schedules to handle operational workflows such as intake parsing, monitoring, scheduling, analysis, and standardization. Agent teams operate within the same permission model and data access controls as the core AI assistant.
The AI Assistant is not enabled by default. It may be disabled at the account or workspace level, and users must be explicitly assigned licenses to access AI-assisted features.
You (and/or your organization) retain ownership of your data and content in FlowPath. FlowPath does not claim ownership of customer content and acts solely as a service provider to host and process data as needed to provide, secure, and maintain the Service.
Use of the Service is governed by FlowPath's Terms of Service and this Privacy Policy.
Authorized administrators may request deletion of individual users, specific records (such as work orders or assets), or an entire account or workspace.
To request deletion of an entire account or workspace, an authorized administrator may email support@getflowpath.com with the subject line "Data Deletion Request."
When deletion is requested and verified, FlowPath will delete the requested account or workspace data from active production systems within 30 days, including associated files and attachments.
FlowPath maintains encrypted, immutable backups for disaster recovery purposes that cannot be selectively deleted. As a result, data subject to a verified deletion request may persist in backups until the applicable backup retention period expires. Backup retention periods are as follows: daily backups are retained for 14 days, weekly backups for 56 days, and monthly backups for up to 7 years.
FlowPath retains personal information only as long as necessary to provide the Service, comply with applicable legal obligations, resolve disputes, and enforce our agreements. Retention practices include:
Immutable, time-limited backups are maintained solely for disaster recovery and business continuity purposes and are not accessed, restored, or processed except in the event of a system failure or legally required recovery.
The FlowPath application uses cookies or similar local storage technologies that are necessary for core functionality, including authentication, session management, security protections, and storing user preferences.
FlowPath's public website may use cookies for analytics and marketing purposes. Cookie preferences may be managed through browser settings and, where available, FlowPath's cookie preference tools.
FlowPath's Services are not intended for student use. FlowPath does not knowingly collect, use, maintain, or disclose personal information from children under the age of 13 in a manner subject to the Children's Online Privacy Protection Act ("COPPA").
FlowPath also does not collect or maintain student personal information or "education records" as that term is defined under the Family Educational Rights and Privacy Act ("FERPA").
If FlowPath becomes aware that student personal information has been provided to the Service, FlowPath will promptly delete such information.
FlowPath may update this Privacy Policy from time to time to reflect changes in practices, technologies, or legal requirements. When updates are made, the effective date will be revised and the updated policy will be posted on FlowPath's website. Changes are effective when posted unless otherwise indicated.
If you have questions about this Privacy Policy or FlowPath's privacy practices, please contact:
FlowPath Support
support@getflowpath.com
Schedule a demo with our sales team and we can get you started.
