App Privacy Policy (Beta)

1. What we collect.

• Sign-in: when you sign in with Google or X, we receive your name, email address and, if provided, a profile picture. We never receive your password.
• Profile: what you add, such as title, phone, LinkedIn address, headshot and bio.
• Organization records: what you and your PR team enter, such as coverage records, requests, drafts, notes, award and writing records, and files you upload.
• Email to Robin: when someone sends or copies email to a Robin address, we receive the sender, recipients, subject, body and attachment names. We do not open attachments.
• Public form submissions: the name, outlet, email and message sent through a press page or media kit form.
• Usage and security data: sign-in times, actions recorded in audit logs, IP addresses used for security and rate limiting, and browser type.
• AI usage records: which tool ran, when, for which organization and person, and token counts. We do not store the prompts.
• Cookies: one session cookie that keeps you signed in. The APP uses no advertising cookies and no third-party analytics trackers.

2. How we use it. To operate the APP and support the services your PR team delivers; to send the notifications you have turned on and the account notices every user receives; to protect the APP against abuse; to understand usage in aggregate and improve the APP; and to meet legal obligations. We do not sell personal information and we do not use it for targeted advertising.

3. AI processing. Some features send content to our AI provider to generate suggestions. That content may include coverage records, text from public web pages, journalists’ names and outlets (never their email addresses or phone numbers), writing requests, pitch material used by your PR team, and email sent to Robin. Our provider is SpaceXAI LLC, through its enterprise API. Under its terms, the content we send is not used to train its models, is treated as confidential, and is deleted within 30 days. Robin is an AI coordinator: it proposes, and people decide. AI features have usage limits.

4. Email processing. Postmark delivers the email the APP sends and receives the email sent to Robin’s addresses, and processes message content to do that. We keep the body of email sent to Robin for 30 days, then delete it. We keep delivery status, including bounces, so we stop sending to addresses that fail.

5. Who can see your information.

• Your organization: its administrators and users, according to their roles.
• Your PR team: the agency that manages your organization’s account, which may be Flackable or a partner agency, according to their roles. Flackable, as the operator, can access data to run and support the APP.
• Service providers: cloud hosting (currently Vercel, through our development platform), Postmark for email, SpaceXAI for AI features, Google and X for sign-in, Google Fonts for typefaces, and Google’s favicon service for outlet logos on some pages. Each processes data only to provide its service.
• The public: anything your organization publishes through a press page, media kit, Newsline or the experts directory.
• Legal and business: when required by law, to protect rights and safety, or in a business transfer, with notice when the law requires it.

6. How long we keep it.

• Account and profile information: while your access is active. After a person’s access ends, we delete the account within 90 days unless we need it for security, legal or audit reasons.
• Organization records: for as long as the organization’s account is active. The organization can export them at any time and request deletion when the account closes.
• Email sent to Robin: the body for 30 days; counts of dropped messages for 30 days.
• Declined requests and in-app alerts: 90 days.
• Backups: 30 days, encrypted.
• Audit and security logs: up to 12 months.

7. Security. Data moves over encrypted connections. Access is enforced on the server by role. Credentials and secrets are encrypted. Backups are encrypted and kept for 30 days. No system is perfectly secure, and the APP is in beta. If you believe something is wrong, write to info@flackable.com.

8. Your choices and rights. Turn notification emails on or off in your profile. Edit your profile at any time. Ask your organization’s administrator to change your role or remove your access. Email info@flackable.com to ask for access to, correction of, or deletion of your personal information; for organization records we may need your administrator’s approval. We honor the privacy rights that apply to you under state law.

9. Children. The APP is for business use by adults. We do not knowingly collect information from anyone under 18.

10. Where data lives. We are based in the United States and process data there. If you use the APP from elsewhere, your information is processed in the United States.

11. Changes. We may update this policy. The date at the top shows the last revision. For significant changes we will show a notice in the APP.

12. Contact. Flackable, LLC, 1167 Berkshire Blvd., #1074, Wyomissing, PA 19610. info@flackable.com. (866) 225-0920.