How we handle your data.
Last updated 13 May 2026. Written in plain English. If anything here isn't clear, email info@flwup.com.au and we'll explain.
Who runs FLWUP
FLWUP is operated by FLWUP Pty Ltd, an Australian company based in Melbourne. We are the data controller for the information described below.
What we collect
When you sign up and use FLWUP, we collect:
- Account info: your name, work email, dealership name, and role.
- Deal data: the contact details, vehicle info, and notes you enter for each lead.
- Message content: the inbound replies and the outbound email and SMS drafts that pass through FLWUP, including subject lines, bodies, and attachments.
- Engagement signals: opens, clicks, and reply timestamps tied to your outbound emails and texts.
- Product usage: anonymous analytics on which pages you visit and which features you use, so we can prioritise the right work.
We do not collect payment card details. Billing runs through Xero, which holds that data directly. We do not buy data about you from third parties.
Why we collect it
Every category above exists to deliver the service you signed up for: draft replies in your voice, route the right deals to the top of the queue, and show your team what's actually working. Engagement signals power the Monday Memo and Pattern Wall. Account info powers billing and authentication. We don't use your data for advertising, and we don't sell it.
Who can see your data
- You and your dealership colleagues, based on the role assigned in your workspace.
- FLWUP staff, only when troubleshooting a specific issue you have reported, and only the minimum needed.
- Sub-processors who run infrastructure we depend on: Supabase (database + auth, hosted in Sydney), Render (backend hosting), Resend (email delivery), Twilio (SMS delivery), Anthropic (AI drafting; content sent under their zero-retention enterprise terms), and Xero (billing).
We do not share your data with anyone else, ever. Full sub-processor list is available on request. Email us.
Where it lives
Your data is stored in Supabase's Sydney region by default. Backups are encrypted at rest. Data in transit is encrypted with TLS 1.2 or higher. Some of our sub-processors operate globally (AI drafting requests, for instance, are routed to Anthropic's nearest region), but the storage of record for your dealership data stays in Australia.
How long we keep it
Active customer data is retained for as long as your account is open. If you cancel, we keep your data for 90 days in case you reactivate, then permanently delete it. You can request earlier deletion at any time via the contact below.
Your rights under Australian Privacy Principles
You have the right to:
- Access the personal information we hold about you.
- Correct anything that is inaccurate.
- Request deletion of your account and the data tied to it.
- Export your dealership data in a portable format (CSV / JSON).
- Lodge a complaint with the Office of the Australian Information Commissioner if you believe we have mishandled your data.
To exercise any of these, email info@flwup.com.au. We respond within five business days.
Cookies and tracking
We use a single first-party cookie to keep you signed in. No third-party advertising cookies, no cross-site tracking pixels, no session replay. The marketing pages of this site can be visited entirely anonymously.
Children
FLWUP is sold to dealerships and is not intended for anyone under 16. We do not knowingly collect data from minors.
Changes to this policy
If we make material changes we will email account holders at least 30 days before they take effect. Minor wording changes will be reflected in the "last updated" date at the top of this page.
Contact
FLWUP Pty Ltd
Melbourne, Victoria, Australia
info@flwup.com.au
