Dataflo Privacy Policy

BG elementBG element

Last Updated: October22, 2025

Dataflo LLC (“Dataflo,”“we,” “our,” or “us”) is a New Mexico-based artificial intelligence (AI) solutions company that provides secure, cloud-based data platforms and AI-powered applications for government agencies and private organizations.

This Privacy Policy explains how we collect, use, store, and protect personal and organizational information when you interact with our websites, applications, or related services (collectively, the “Services”). It also describes your privacy rights and how to exercise them.

By using our Services, you agree to this Privacy Policy.

1. Interpretation and Definitions

Account: A unique profile created for you or your organization to access our Services.

Cookies: Small files placed on your device to help us recognize your browser, improve experience, and analyze usage.

Device: Any hardware that accesses the Service, such as a computer, phone, or tablet.

Personal Data: Any information that identifies or can reasonably identify an individual.

Organization Data:Information related to your agency, company, or institution that is processed as part of your use of the Service.

Service Provider: A trusted third party that processes data on behalf of Dataflo.

Usage Data:Automatically collected data generated by using the Service (for example, page views, API calls, or session duration).

You / Your: The individual or organization using Dataflo’s Services.

2. How We Collect Information

We collect information in three ways:

1.   Directly from you: When you register for an account, communicate with support, or provide information through our web forms.

2.   Automatically:Through cookies, usage analytics, and system logs that record device and network activity.

3.   From third parties : Through authentication providers, analytics tools, or integration partners that you authorize.

3. Types of Data We Collect

Personal Data may include:

●    Name, email address, and contact information

●    Job title or organization affiliation

●    Account credentials and authentication information

Usage and System Data may include:

●    IP address, browser type, and access time

●    Pages or modules used, time spent, and diagnostic logs

●    Device identifiers and operating system information

Customer or Agency Data:

When organizations use Dataflo Services to process internal or public data (for example, legislative records, contracts, or program datasets),we act as a data processor, and the organization remains the data controller.We process such data only under that organization’s instructions.

4. Use of Your Data

We use personal and organizational data to:

1.   Provide, operate, and maintain our Services

2.   Manage user accounts and permissions

3.   Improve platform performance and reliability

4.   Communicate updates, maintenance notices, and support messages

5.   Comply with legal and regulatory requirements

6.   Prevent fraud, misuse, or unauthorized access

7.   Support data analysis and service optimization (always in aggregated or anonymized form)

We do not use client data to train external AI models.

5. Cookies and Tracking Technologies

Dataflo uses cookies and similar tools for essential functions such as authentication, session management, and usage analytics.

You can configure your browser to reject cookies, though some features may not function properly without them.

Types of cookies we use:

●    Essential cookies: Required for secure login and basic functionality.

●    Preference cookies: Store your language or UI settings.

●    Analytics cookies: Help us understand how the platform is used.

6. Retention and Deletion

We retain Personal Data only for as long as necessary to provide Services, meet contractual obligations, or comply with legal requirements.

You may request deletion or correction of your information at any time by contacting support@dataflo.ai.

We may keep limited records to comply with audit or security requirements.

7. Data Transfers and Security

All data is processed in the United States, primarily within New Mexico or through trusted U.S.cloud providers such as AWS GovCloud and equivalent secure environments.

We use industry-standard protections, including:

●    Encryption at rest and in transit

●    Role-based access controls

●    Continuous monitoring and audit logging

●    Annual security and compliance reviews

When applicable, we follow FedRAMP, SOC 2, and NIST guidelines for data protection.

8. Disclosure of Information

We may share information only when necessary:

●    With Service Providers: To deliver or support the Services (subject to confidentialityand data-protection agreements).

●    For Business Transfers: If Dataflo merges or reorganizes, your information may transfer under the same safeguards.

●    For Legal Compliance: To comply with court orders or government regulations.

●    With Consent:When you authorize specific integrations or data sharing.

We do not sell or trade Personal Data.

9. Legal Basis for Processing

We process Personal Data under one or more of the following grounds:

●    Your consent

●    Contractual necessity (to deliver Services)

●    Legal obligation

●    Legitimate interest in improving and securing our Services

You may withdraw consent at any time by emailing support@dataflo.ai.

10. Your Rights

Depending on your jurisdiction:

Under GDPR (EU/UK),you have the right to:

●    Access and obtain a copy of your data

●    Request correction or deletion (“right to beforgotten”)

●    Object to processing or request restriction

●    Port your data to another controller

●    File a complaint with a supervisory authority

Under CCPA/CPRA(California), you may:

●    Request access to personal data collected about you

●    Request deletion or correction

●    Opt out of data sharing or the use of sensitive personal data

To exercise these rights, contact support@dataflo.ai.

11. AI Transparency

Dataflo’s AI systems are built with strict privacy controls:

●    Client data is never used for model training or improvement outside the client environment.

●    AI outputs are generated from secure, isolated instances using Dataflo’s proprietary or licensed AI models.

●    For public-sector deployments, Dataflo uses AI explain ability and audit features to ensure accountability and compliance with state standards.

12. Children’s Privacy

Our Services are not directed toward children under 13. We don't knowingly collect data from minors. If you believe a child has provided us with personal data, please contact us so we can remove it.

13. Updates to This Policy

We may update this Privacy Policy periodically. The “Last Updated” date at the top indicates the latest version.

If material changes occur, we will notify users by email or through our platform before the update takes effect.

14. Contact Us

For any questions, concerns, or data requests, contact:

Dataflo LLC

100 Sun Avenue NE, Suite 650

Albuquerque, NM 87110

Email: support@dataflo.ai