This Privacy Policy explains how TaxLegit Consulting Private Limited collects, uses, and protects your information while using the FlowIQ platform. TaxLegit Consulting Private Limited is committed to protecting the privacy, confidentiality, and security of your organization and user data.
1. Information We Collect
- Company & Process Data: Process flows, subprocess definitions, policy guidelines, operational context, ERP details, and uploaded documentation provided for SOP and RCM generation.
- Account Data: Names, email addresses, phone numbers, job titles, organization names, and billing metadata necessary to create, authenticate, and manage your account.
- Usage & Credit Data: Information regarding feature usage, generation runs, credit consumption, and system performance telemetry collected to maintain platform reliability.
2. How We Use Your Data
- Generate requested Standard Operating Procedures (SOPs), Risk Control Matrices (RCMs), and process documentation
- Authenticate users, manage tenant workspaces, and enforce role-based access controls
- Process billing, maintain your AI credit wallet, and deliver technical support
- Protect against fraud, unauthorized system access, and security threats
- No Public AI Training: We do not sell your data or use your confidential company context to train or fine-tune generalized AI models.
3. Data Security
We implement enterprise-grade security measures to safeguard your data, including:
- Encryption at Rest: AES-256 field-level encryption for sensitive profile fields and database records
- Encryption in Transit: TLS 1.3 encryption for all data transmitted between your browser and our servers
- Access Controls & Multi-Tenancy: Strict tenant data isolation and role-based permissions (Admin, Member, Reviewer)
- Network Security: Firewalls, automated vulnerability scanning, and secure API gateways
- Secure Cloud Hosting: ISO 27001-certified cloud infrastructure
4. Data Retention
Your workspace data is retained as long as your account remains active. Upon account termination or written request, your data is securely deleted from our active production databases in accordance with applicable data retention policies and legal requirements. We maintain:
- Regular security reviews and access audits
- Employee training on data confidentiality and security best practices
- Strict confidentiality agreements with all personnel and infrastructure partners
- Incident response and security breach notification protocols
5. Your Privacy Rights
You have the right to access your organization's data, request data exports in portable formats (Word/Excel), and update or correct inaccurate account information through your settings dashboard or by contacting support.
