Effective: March 14, 2025
This Data Processing Agreement (“DPA”) is entered into by and between C.O.R.E. Enterprises LLC, doing business as FlowChat (“Processor”), and you, the client (“Controller”), as part of the Terms of Service agreed to upon signup at https://www.flowchat.com/terms-and-conditions. By using FlowChat, you agree to this DPA, which governs the processing of personal data uploaded by you to the FlowChat service.
1.1 FlowChat processes personal data from social platforms (e.g., Facebook contacts, LinkedIn contacts, chat logs) uploaded by Controllers to deliver chat management and workflow services. FlowChat does not access social platforms directly; all data is provided by Controllers.
2.1 Subjects: Individuals in Controller-uploaded social platform data.
2.2 Categories: Names, profile IDs, contact details, messages, interaction history.
3.1 FlowChat requires cookies for functionality (e.g., session management in the members’ area) and analytics (e.g., Google Analytics on flowchat.com). Access to FlowChat, including the public website and members’ area, is conditional on accepting cookies, per our Terms of Service.
4.1 We use encryption, access controls, and hosting via Rackspace to protect data. Rackspace operates under GDPR-compliant standards. Breaches are reported to Controllers within 72 hours.
5.1 FlowChat engages the following sub-processors:
5.2 No social platform APIs are used; data originates solely from Controller uploads.
6.1 Data is processed during your subscription and retained for at least 60 days post-termination (e.g., for backups or legal compliance). Deletion occurs after this period, unless U.S. law requires longer retention.
7.1 Controllers may request compliance details annually, at their expense, with 30 days’ notice.
8.1 Controllers are responsible for the lawful collection of social platform data uploaded to FlowChat.
9.1 Questions? Reach us at support@flowchat.com.
This DPA is governed by the Terms of Service and applies to all Controllers using FlowChat. Continued use of the service constitutes acceptance of this DPA.