Your data deserves clear boundaries.

1. Scope

This Privacy Policy applies to the Floryn AI website, creator and agency products, earnings dashboard, applications, contact forms, and related services (together, the Services). In this policy, “Floryn AI”, “we”, “us”, and “our” refer to the operator of the Services.

Agency customers may upload or connect information about their models and audiences. Where an agency determines why and how that information is processed, the agency is responsible for its own privacy notices and lawful authority, while Floryn AI processes the information to provide the Services.

2. Information we collect

Information you provide

• Identity and contact details, including your name, email address, account role, agency, social profile, and website.
• Application and enquiry details, including audience or portfolio size, intended use, and messages sent to our team.
• Account and workspace information, including model and agency memberships, permissions, profile settings, and authentication records.
• Creator materials and instructions you choose to provide, including authorised media, descriptions, likeness or voice-related materials, conversation rules, pricing, and bundles.

Service and audience data

• Telegram or other connected-platform identifiers, usernames, messages, transaction references, stars purchased, and event timestamps supplied through authorised integrations such as n8n.
• Earnings, sales, buyer, message, and engagement statistics used to provide authorised model and agency dashboards.
• Technical information such as IP address, browser and device details, timestamps, request logs, security events, and session information.

Payment information

Stripe processes Checkout payments. We receive transaction status, purchased plan, amount, currency, and limited customer or payment metadata needed to confirm and administer a purchase. We do not receive or store full payment-card numbers.

3. How we collect information

We collect information directly from you, from an agency or administrator authorised to manage your workspace, from connected services and automation workflows such as Telegram and n8n, from payment and authentication providers, and automatically when you use the Services.

If you provide information about another person, you must have authority to do so and provide any notice or obtain any consent required by law.

4. How we use information

• Provide, secure, maintain, and improve the Services.
• Authenticate users and enforce model, agency, and administrator access permissions.
• Calculate and display earnings and performance, including combined agency statistics and model-specific views.
• Create and manage authorised AI identities, media, conversations, pricing, and related workflows.
• Process purchases, communicate about transactions, and provide support.
• Respond to applications, demo requests, questions, and privacy enquiries.
• Detect abuse, investigate security incidents, enforce our Terms, and comply with legal obligations.
• Send service communications and, where permitted, relevant product updates. You may opt out of marketing messages at any time.

Where applicable law requires a legal basis, we rely on performance of a contract, legitimate interests, consent, and compliance with legal obligations, depending on the processing involved.

5. How we share information

We may disclose information:

• Within a workspace according to its permissions—for example, a model sees their own statistics, an agency sees its associated models, and an authorised administrator may see all active models.
• To service providers that support hosting, databases and authentication (including Supabase), payments (Stripe), email delivery, workflow automation (n8n), connected messaging platforms, security, and technical operations.
• To professional advisers, regulators, courts, or law enforcement where reasonably necessary or legally required.
• In connection with a genuine financing, acquisition, restructure, or sale, subject to appropriate confidentiality protections.

We do not sell personal information. We do not share a model’s data with an unrelated agency through the dashboard.

6. International processing

Our providers and connected services may process information in Australia, the United States, and other countries where they or their infrastructure operate. Privacy protections can differ between countries. Where required, we take reasonable steps to use contractual, technical, and organisational safeguards for cross-border handling. Contact us if you need current information about likely overseas disclosures relevant to your account.

7. Retention and security

We retain information only for as long as reasonably necessary to provide the Services, maintain transaction and audit records, resolve disputes, enforce agreements, and satisfy legal, accounting, and security requirements. Retention periods vary by record type and contractual obligations. We delete or de-identify information when it is no longer required, where reasonably practicable and subject to law.

We use safeguards such as access controls, role-based permissions, authentication, encrypted provider connections, webhook signature verification, rate limiting, and monitoring. No online system is completely secure, so we cannot guarantee absolute security. Please notify us immediately if you suspect unauthorised account access.

8. Your choices and rights

Depending on your location, you may request access to, correction of, deletion of, or a copy of personal information we hold about you; object to or restrict certain processing; withdraw consent; or make a privacy complaint. You may also update some information through your account or ask an agency administrator to correct workspace details.

Send requests to info@florynai.com. We may need to verify your identity and authority before acting. Some information may need to be retained where required by law or for legitimate security and transaction-record purposes.

9. Children

The Services are intended for people aged 18 or older and are not directed to children. Do not provide us with a child’s personal information or use a child’s identity, voice, likeness, or content in the Services. If you believe we have received such information, contact us promptly.

10. Changes to this policy

We may update this policy as our Services or legal obligations change. We will publish the updated policy here, revise the effective date, and provide additional notice where a change is material and required by law.