Privacy Policy

Last updated: July 31, 2026

Welcome to Floyi. We are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy outlines how we collect, use, and safeguard your information when you use our platform and services.

1. Information We Collect

We collect and process various types of information to provide and enhance our services. These include:

Personal Information: Name, email address, phone number, billing information, and other details you provide during registration or payment.
Account Information: Details about your subscription plan, preferences and settings, and features and tools you have accessed.
Content You Provide: Brand and audience inputs, keywords, topical maps, content briefs, drafts and other material you create in or upload to Floyi. We refer to this as “Customer Content.”
Data From Accounts You Connect: If you connect a third-party account, we receive data from it to power the related feature. Connecting Google Search Console provides search query and page performance data for properties you select. Connecting Google Business Profile provides business location details. You choose which accounts to connect and can disconnect them at any time.
Usage Data: Information about how you use our platform, including interactions, features accessed, and usage patterns.
Device and Technical Data: IP address, browser type, operating system, and other technical information collected through cookies, web beacons, or similar tracking technologies.

2. How We Use Your Information

We process your data for the following purposes:

To provide access to Floyi’s platform and services, and to manage your account and subscription.
To generate content, analysis and recommendations, which requires transmitting your Customer Content to third-party AI model providers.
Analyzing user behavior to enhance platform functionality and user experience.
Sending service-related updates, such as account notifications or system changes.
Processing transactions and managing your account.
Communicating with you regarding updates, promotions, or support.
Ensuring the security and functionality of our platform.
Monitoring activities to detect and prevent fraudulent or unauthorized actions.
Fulfilling legal obligations, including tax and regulatory requirements.
Responding to lawful requests from authorities.

Your information is shared only as necessary and under strict conditions:

Service Providers: For payment processing, analytics, hosting, technical support, and bot and abuse prevention.
AI Model Providers: To generate content and analysis, we transmit Customer Content to third-party AI model providers. Unlike our other service providers, these providers receive the material you create in Floyi rather than operational or account data. See “AI Processing of Your Content” below.
Legal Authorities: If required to comply with applicable laws or legal processes, or to protect the rights, property, or safety of Floyi, its users, or others.
Business Partners: We may share data for joint marketing initiatives or integrations with third-party services.
Corporate Transactions: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the involved entities, subject to the terms of this Privacy Policy.

3.1 AI Processing of Your Content

Floyi’s core features generate content and analysis using third-party AI models. To do this, we transmit the relevant Customer Content to AI model providers on your behalf.

What is sent. Only the content needed for the feature you are using. A content brief request sends the associated brand, audience and keyword inputs. A draft request sends the brief and related context. Where you have connected Google Search Console, query text may be sent to a model provider to match your search data against your topical map.

Who receives it. We use several third-party AI model providers and may change them as models and services evolve. Some are routing services that pass requests to downstream model providers. A current list of the AI providers we use is available on request at support [at] floyi.com.

Training. We do not use your Customer Content to train AI models, and we do not permit our AI model providers to use it to train their models.

Retention. AI model providers may retain transmitted content for a limited period for abuse monitoring and security, under their own terms. This retention is outside Floyi’s control and may extend beyond deletion from Floyi’s own systems.

Your control. AI generation only runs when you initiate it. Features that do not generate content do not transmit Customer Content to model providers.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and provide personalized content.

4.1 Types of Cookies

Essential Cookies: Necessary for platform functionality, such as authentication.
Performance Cookies: Help us understand user behavior and improve the platform and services.
Marketing Cookies: We use these to measure the performance of our advertising and to attribute referrals.

4.2 Managing Cookies

You can manage cookie preferences through your browser settings. Note that disabling cookies may limit certain functionalities of the platform.

4.3 Third-Party Tracking

Floyi may include third-party tracking technologies for analytics and advertising. These parties may collect information about your online activities over time and across websites.

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first- and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

We also use Google Analytics and Google Tag Manager for website and product analytics, Endorsely for affiliate referral attribution, and ProductLift for our public roadmap and feature request board. Each of these may set its own cookies and receive information about your visit, governed by its own privacy policy.

Cloudflare Turnstile protects our signup form from automated abuse. It does not set cookies. Verification uses a single-use token rather than a clearance cookie, and Cloudflare’s optional pre-clearance cookie is not enabled on our widget. No cookies are set on floyi.com, or on Cloudflare’s challenge domain, as part of this check.

5. Your Privacy Rights

Depending on your location and applicable laws, you may have the following rights regarding your personal data:

Access and receive a copy of your data.
Request correction or deletion of your data.
Restrict or object to certain processing activities.
Withdraw consent for data processing, where applicable.

To exercise these rights, contact us at hello [at] floyi.com.

5.1 Our Role and Data Processing Agreements

For account and billing information, Floyi acts as a data controller. For Customer Content you create or upload, Floyi acts as a data processor on your behalf, and you remain the controller of that content. If your organization requires a Data Processing Agreement, contact support [at] floyi.com.

6. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law.

6.1 Retention Periods

Active Accounts: Data related to active accounts is retained for the duration of your subscription.
Inactive Accounts: If your account remains inactive, data is retained for a limited period before deletion, as specified in our Terms of Service.

6.2 Legal Obligations

Certain data may be retained longer to comply with legal obligations, such as tax regulations, dispute resolutions, or law enforcement requests.

6.3 Deletion of Data

Upon request or account termination, we will permanently delete your personal data, except where retention is legally required.

7. Security Measures

We implement technical, administrative, and physical safeguards to protect your information from unauthorized access, alteration, or loss.

7.1 Technical Safeguards

Encryption of data during transmission and storage.
Secure access controls, such as multi-factor authentication.

7.2 Administrative Measures

Regular staff training on data protection and privacy best practices.
Internal policies and procedures for data handling.

7.3 Physical Security

Restricted access to data storage facilities.
Secure backups to prevent data loss.

7.4 User Responsibilities

Protect your account credentials and use strong, unique passwords.
Notify Floyi immediately of any unauthorized access to your account.

7.5 Bot and Abuse Prevention

We use Cloudflare Turnstile to verify that visitors creating accounts are human and to protect our signup form from automated abuse. Turnstile runs a background security check when you submit the signup form and usually displays nothing on screen.

To perform this check, Cloudflare collects information about your device and browsing environment, which may include your IP address, browser and device characteristics, and interaction signals from the page. Cloudflare processes this data solely to distinguish human visitors from automated traffic. It does not use it for behavioral advertising or cross-site tracking. Cloudflare already acts as a service provider to Floyi for file storage; Turnstile is an additional service from the same provider.

For details of what Turnstile collects and how it is handled, see Cloudflare’s Turnstile Privacy Addendum and Cloudflare’s Privacy Policy.

Where the GDPR or UK GDPR applies, our lawful basis for this processing is our legitimate interest in protecting Floyi and our users from fraudulent account creation and automated abuse.

7.6 Breach Notification

If we become aware of a security breach affecting your personal data, we will notify affected users without undue delay and, where the GDPR or UK GDPR applies, within 72 hours of becoming aware of it where feasible. Notification will describe what happened, what data was affected and what steps we are taking.

8. Third-Party Links

Our platform may contain links to third-party websites. These links are provided for your convenience but are not governed by this Privacy Policy.

8.1 Independent Privacy Policies

Third-party websites have their own privacy policies and practices. Floyi is not responsible for the privacy practices or content of these websites.

8.2 Recommendations

Review the privacy policies of any third-party websites you visit before sharing your data.

8.3 External Integrations

This section covers third-party services that you choose to connect to your Floyi account and that you use under those services’ own terms. It does not cover the service providers and AI model providers that Floyi engages to operate the platform, which are described in Sections 3 and 7.

If you use third-party services integrated with Floyi, your data may be shared with and processed by those services under their privacy terms.

8.4 Google API Services

Floyi’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

Floyi only uses Google user data for the purposes described in this Privacy Policy and as necessary to provide and improve the features you have explicitly connected or enabled.
Floyi does not use Google user data for serving advertisements.
Floyi does not allow humans to read Google user data unless we have your affirmative agreement, it is necessary for security purposes, to comply with applicable law, or our use is limited to internal operations and the data has been aggregated and anonymized.
Floyi does not transfer Google user data to third parties unless necessary to provide or improve user-facing features, to comply with applicable law, or as part of a merger, acquisition, or asset sale with notice to users.

9. International Users

If you are accessing Floyi from outside the United States, please note the following:

9.1 Data Transfer

Your data may be transferred to, stored in, and processed in the United States or other countries where we operate.

By using Floyi, you consent to the transfer of your data to the United States, which may not have the same data protection laws as your jurisdiction.

9.3 Data Protection Standards

Floyi complies with applicable data protection laws to ensure that your information is handled securely.

9.4 Cross-Border Agreements

For international users subject to GDPR, data transfers are governed by appropriate safeguards, such as Standard Contractual Clauses (SCCs).

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements.

10.1 Notification of Changes

Significant changes will be communicated through email notifications or in-app alerts.

10.2 Effective Date

Updates to the Privacy Policy take effect immediately upon posting unless otherwise stated.

10.3 User Responsibility

It is your responsibility to review this policy periodically for updates.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at:

Floyi
c/o Nest 18 LLC
5830 E. 2nd Street, Suite 7000
Casper, WY 82609
+1 212.930.9302

Email: hello [at] floyi.com