How we handle your data.

FLWUP is operated by FLWUP Pty Ltd, an Australian company based in Melbourne. We are the data controller for the information described below.

When you sign up and use FLWUP, we collect:

• Account info: your name, work email, dealership name, and role.
• Deal data: the contact details, vehicle info, and notes you enter for each lead.
• Message content: the inbound replies and the outbound email and SMS drafts that pass through FLWUP, including subject lines, bodies, and attachments.
• Engagement signals: opens, clicks, and reply timestamps tied to your outbound emails and texts.
• Product usage: anonymous analytics on which pages you visit and which features you use, so we can prioritise the right work.

We do not collect payment card details. Billing runs through Xero, which holds that data directly. We do not buy data about you from third parties.

Every category above exists to deliver the service you signed up for: draft replies in your voice, route the right deals to the top of the queue, and show your team what's actually working. Engagement signals power the Monday Memo and Pattern Wall. Account info powers billing and authentication. We don't use your data for advertising, and we don't sell it.

• You and your dealership colleagues, based on the role assigned in your workspace.
• FLWUP staff, only when troubleshooting a specific issue you have reported, and only the minimum needed.
• Sub-processors who run infrastructure we depend on: Supabase (database + auth, hosted in Sydney), Render (backend hosting), Resend (email delivery), Twilio (SMS delivery), Anthropic (AI drafting; content sent under their zero-retention enterprise terms), and Xero (billing).

We do not share your data with anyone else, ever. Full sub-processor list is available on request. Email us.

Your data is stored in Supabase's Sydney region by default. Backups are encrypted at rest. Data in transit is encrypted with TLS 1.2 or higher. Some of our sub-processors operate globally (AI drafting requests, for instance, are routed to Anthropic's nearest region), but the storage of record for your dealership data stays in Australia.

Active customer data is retained for as long as your account is open. If you cancel, we keep your data for 90 days in case you reactivate, then permanently delete it. You can request earlier deletion at any time via the contact below.

You have the right to:

• Access the personal information we hold about you.
• Correct anything that is inaccurate.
• Request deletion of your account and the data tied to it.
• Export your dealership data in a portable format (CSV / JSON).
• Lodge a complaint with the Office of the Australian Information Commissioner if you believe we have mishandled your data.

To exercise any of these, email info@flwup.com.au. We respond within five business days.

When you sign in, a first-party cookie keeps you signed in. On the public website we measure visits two ways: our own analytics, which stores a random identifier in your browser and records the pages you view, the site that referred you and any campaign tags in the link (no cookies, no IP address, nothing that identifies you, and nothing once you are signed in); and Google Analytics, which sets its own cookies under Google's privacy policy. No advertising cookies, no cross-site tracking pixels, no session replay. You can block cookies in your browser and the site still works.

FLWUP is sold to dealerships and is not intended for anyone under 16. We do not knowingly collect data from minors.

If we make material changes we will email account holders at least 30 days before they take effect. Minor wording changes will be reflected in the "last updated" date at the top of this page.

FLWUP Pty Ltd
Melbourne, Victoria, Australia
info@flwup.com.au