Fibteq
Sign in Request a demo

Privacy Policy

Last updated: October 7, 2026

This policy explains how Fibteq, Inc. (“Fibteq”, “we”) collects, uses, stores and shares personal data in the Flow workflow platform (app.fibteq.io, designer.fibteq.io and the mobile app).

1. Data we collect

  • Account data: name, email address, organization (tenant), session records.
  • Customer content: forms, process variables, uploaded documents and reports that customers enter into Flow.
  • Data from connected accounts: when a user connects an external account (for example Gmail) under Settings, only the data their own process steps need.
  • Technical logs: request logs (IP address, browser, time) for security and troubleshooting.

2. Google user data (Gmail)

When a user explicitly chooses “Connect with Google”, Flow requests:

  • gmail.readonly: to read incoming email (sender, subject, body, attachments) for a “new email” trigger the user configured, and to search and read email in the user’s own process steps.
  • gmail.send: to send or reply to email on the user’s behalf in process steps the user configured.

We use this data only to run the processes the user set up in Flow:

  • Email content and attachments that are read are written to the related process record (process variables and documents) in the customer’s own Flow account.
  • Google access and refresh tokens are stored encrypted and used only for these operations.
  • We do not use Google data for advertising, do not sell it, and do not transfer it to third parties. The only exceptions are process steps the user explicitly configured, infrastructure providers that run the service, and legal requirements.
  • We do not use Google user data to develop, improve or train generalized AI or machine-learning models.
  • Our staff do not read Google user data. The exceptions are the user’s explicit consent, security investigations, and legal requirements.

Flow’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access: Users can remove the connection under Settings in Flow, or at https://myaccount.google.com/permissions. When the connection is removed, we delete the stored Google tokens and stop reading new email. Data already written to process records stays in the customer’s account until the customer deletes it.

3. How we use data

To provide and operate the service, run the processes users configure, provide support, keep the service secure and prevent abuse, and meet legal obligations.

4. Sharing and service providers

We use service providers for hosting, database, email delivery and payments: Cloudflare, Google Cloud, Neon, Stripe. They process data only on our behalf under contract. When a user configures an AI step, process data may be sent to the selected model provider, limited to that step. Google user data is used this way only in steps the user explicitly configured.

5. Retention and deletion

Customer data is kept while the customer account is active. Customers can delete their own records. When an account is closed, data is deleted within 30 days. Deletion requests: ismail.kose@fibteq.com.

6. Security

Data is encrypted in transit with TLS. Connection tokens and secrets are stored encrypted. Access is isolated per customer (tenant).

7. Your rights (KVKK / GDPR)

You have the right to access, correct, delete, object to processing of, and port your data. Contact: ismail.kose@fibteq.com.

8. Contact

Fibteq, Inc., 1111B S Governors Ave, STE 83558, Dover, DE 19904, USA, ismail.kose@fibteq.com