Flex Solutions Inc. Privacy Policy

This Privacy Policy describes how Flex Solutions Inc. ("Flex Solutions," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit our website, use our web application, or access our mobile application (collectively, the "Services"). By using our Services, you acknowledge that your personal information will be handled as described in this Privacy Policy and in accordance with applicable data protection laws.

1. Scope

This Privacy Policy applies to visitors to our website and users of our web and mobile applications, including Account Holders (managers or business owners) and Application Users (employees). If you are an employee using FlexSchedule through your employer's account, your employer is the data controller for your employment-related data. Flex Solutions acts as a data processor on their behalf.

This Policy also applies to personal data collected through integrations you choose to enable, including data obtained through Google OAuth.

2. Information We Collect

We collect information you provide directly, information collected automatically, and information we receive from third parties.

Information you provide

Includes your name, email address, contact information, business details, employment details, schedule and availability data, and communication history.

Automatically collected information

Includes device identifiers, IP address, browser type, usage activity, and optional geolocation data if you enable location-based time tracking.

Information from third parties

This may include information from your employer or integration partners.

Google User Data (only if you choose to connect Google services)

If you sign in with Google or connect Google Calendar, Gmail, or other Google services, we may receive:

• Your basic Google profile information (name, email, profile image)
• Calendar event metadata (event names, start/end times, attendees)
• Email metadata for schedule-related import features (subject line, timestamp, sender)

We do not collect the content of emails or the full content of calendar events unless clearly required and disclosed at the point of use.

We only request the minimum Google data necessary for the feature you enable.

3. How We Use Information

We use personal information to operate, maintain, and improve the Services, communicate with you, process payments, provide support, enforce policies, and comply with legal requirements.

We also use aggregated, de-identified data to enhance our AI scheduling models.

How We Use Google User Data (if provided)

Google user data is used only for the specific feature you enable, such as:

• Signing in with Google
• Syncing calendar events for scheduling
• Handling schedule-related import workflows

Google user data is not used for advertising, sold to third parties, or used to train generalized AI or machine-learning models.

4. Payment Processing

We may process or facilitate payments internally or through third-party payment processors such as Stripe, PayPal, or others. Specific methods will be disclosed at the point of payment.

5. How We Share Information

We may share personal information with:

• Service providers that support our operations
• Account Holders (e.g., employers) who manage employee schedules
• Integration partners you choose to connect
• Law enforcement or regulatory authorities when required
• Parties involved in business transitions such as acquisitions

We may share anonymized or aggregated data for analytics.

Sharing of Google User Data

We only share Google user data when necessary to provide the integration you enabled or when required by law.

We do not sell Google user data or share it for advertising.

6. Cookies and Tracking

We use cookies, pixels, and analytics tools to remember preferences, authenticate users, analyze site traffic, and deliver targeted advertisements. You may control cookie settings in your browser or via our Cookie Policy.

7. Data Retention and Security

We retain personal information as long as necessary to provide the Services and comply with legal obligations.

We use administrative, technical, and physical safeguards to protect your information.

Retention of Google User Data

If you disconnect your Google account, we delete or anonymize Google-provided data associated with that integration unless retention is required by law.

8. International Transfers

Your data may be transferred to and processed in the United States or other jurisdictions.

Where required, we use Standard Contractual Clauses or equivalent safeguards to ensure adequate protection.

9. Your Rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal information.

EU/UK/Canada residents have additional rights under applicable laws.

You may revoke FlexSchedule's access to Google user data at any time through your Google Account settings:

https://myaccount.google.com/permissions

For privacy questions or requests, contact us at privacy@flexschedule.ai.

10. Compliance with Google API Services User Data Policy

When our Services access Google user data, we comply with Google's API Services User Data Policy, including the Limited Use requirements:

• We only use Google user data to provide the feature you enabled.
• We do not transfer Google user data except as necessary to provide the integration or comply with law.
• We do not use Google user data for advertising or sell it to third parties.
• We do not use Google user data to train generalized AI or ML models.
• Access to Google data is restricted to personnel who need it to operate or improve the integration.

For more information, see:

https://developers.google.com/terms/api-services-user-data-policy

11. Contact Information