Privacy Policy

1. Who we are

Fluxent Technologies, Inc. (“Fluxent,” “we,” “us”) is a New York corporation that provides custom software design, development, and related professional services to business and individual clients. This Policy explains how we collect, use, disclose, and safeguard personal information when you visit fluxent.tech or use the client portal at client.fluxent.tech.

2. Information we collect

• Account & contact data: name, email, username, phone, job title, company, project membership.
• Authentication data: password hashes, one-time codes, TOTP secrets (encrypted), session/login metadata.
• Content you provide: documents, signature submissions, vault entries, notes, billing/expense records, and messages to us.
• Usage & device data: IP address, user agent, pages viewed, approximate location, timestamps, and audit-log events.
• Cookies / similar technologies: see our Cookie Policy.
• Payment data: processed by Stripe; we do not store full card numbers. We retain invoice/payment status and amounts.

3. How we use information

We use personal information to: provide and secure the service; authenticate users; deliver documents and e-signature; process invoices and payments; send service and transactional communications; maintain audit logs for security and compliance; comply with law; defend legal claims; and improve the product.

4. How we share information

We share personal information with service providers acting on our instructions, including: Vercel (hosting and cookieless analytics), DigitalOcean (backend hosting), Stripe (payment processing), and Resend (transactional email). Electronic signatures are handled by our in-house signature system; we do not use a third-party e-signature provider. We do not sell or share personal information for cross-context behavioral advertising. We may disclose information to comply with law, enforce our agreements, or protect our rights, our users, or the public.

5. Retention

We retain personal information only as long as necessary for the purposes above and to meet legal, tax, and record-keeping obligations:

• Account and profile data: for the life of your account, then deleted or anonymized within 12 months of account closure, unless longer retention is required by law.
• Authentication, session, and usage/device data: up to 24 months.
• Audit-log entries: up to 2 years (longer where needed for an active security investigation or legal hold).
• Documents, e-signature records, and vault entries: for the duration of the engagement and then up to 7 years for record-keeping and legal-defense purposes.
• Billing and payment records: 7 years, to meet tax and accounting requirements.

Where you request deletion, we will honor it subject to these retention obligations; certain records (e.g., signed documents and audit-log entries) are preserved for legal-defense and record-keeping purposes.

6. Your privacy rights (U.S. state laws)

Subject to applicable U.S. state privacy laws, including the California Consumer Privacy Act as amended by the CPRA, you may have the right to: know and access the personal information we hold about you; correct it; delete it; and opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information, so there is no sale or sharing to opt out of. To exercise a right, contact us using the details below; we will verify your identity before acting and will not discriminate against you for exercising your rights.

7. Security

We protect personal information with encryption in transit and at rest for sensitive fields, access controls, audit logging, least-privilege internal access, and MFA/TOTP. No method of transmission or storage is 100% secure.

8. Children

The service is intended for businesses and adults. It is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact us and we will delete it.

9. Changes

We will post updates here and revise the “Last updated” date; we will provide additional notice of material changes where required by law.

10. Governing law

This Policy is governed by the laws of the State of New York, without regard to its conflict of laws principles. Any dispute is subject to the jurisdiction of the state and federal courts located in Nassau County, New York; however, nothing in this Policy waives any non-waivable rights a consumer may have under the consumer-protection or privacy laws of the consumer’s home jurisdiction.

11. Contact