Privacy Policy

This Privacy Policy describes how Fluxum Technologies Inc. ("Fluxum," "we," "us," or "our") collects, uses, and shares personal information when you use our website at fluxum.tools and the products operated under Fluxum Technologies Inc., including Scatterbrainz (available at app.scatterbrain.tech).

Fluxum Technologies Inc. is a Canadian corporation with its registered office at 34 Coulson Ave., Unit B, Toronto, Ontario M4V 1Y5, Canada.

1. Information We Collect

1.1 Information you provide

• Account information: name, email address, password (stored hashed), company name, and role when you create an account on a Fluxum product.
• Contact and inquiry information: when you fill out a form on fluxum.tools (investor inquiry, partnership, press, general), we collect the fields you submit.
• Billing information: when you subscribe or purchase credits, payment is processed by Stripe, Inc. We do not store full payment card numbers on our servers. We retain the last 4 digits, brand, expiry, and Stripe customer/payment-intent identifiers for receipts and reconciliation.
• Content you create: projects, components, deliverables, share-link snapshots, marketing campaigns, and chat messages you exchange with our AI agents inside our products.

1.2 Information collected automatically

• Usage data: pages visited, features used, timestamps, and request metadata (IP address, browser, operating system, referrer).
• Cookies and similar technologies: we use a small number of cookies and localStorage entries to keep you signed in, remember your preferences (theme, locale, last-viewed project), and measure aggregate traffic.
• Analytics: we use Google Analytics 4 and Google Ads conversion tracking (gtag.js) on fluxum.tools, scatterbrain.tech, and app.scatterbrain.tech to understand traffic sources and measure ad performance.

1.3 Information from third parties

• Google Ads API: if you are an account owner who connects a Google Ads account to a Fluxum product, we receive campaign metadata and performance metrics that you authorize us to read.
• Stripe: we receive payment status, customer identifiers, and webhook events.
• Email and SMS providers (Resend, Twilio): we receive delivery, bounce, and reply metadata for messages we send on your behalf.

2. How We Use Your Information

We use the information described above to:

• provide, operate, secure, and improve the Fluxum products you use;
• create and manage your account, authenticate you, and process payments;
• respond to inquiries you submit through fluxum.tools or product support channels;
• send transactional messages (receipts, security alerts, share-link notifications) and, with your consent, product updates;
• operate AI assistants and agents inside our products (for example, the Aria CMO agent in Scatterbrainz) that take actions you approve in connected systems such as Google Ads;
• understand product usage in aggregate so we can improve features and performance;
• comply with our legal obligations, enforce our Terms of Service, and protect against fraud or abuse.

3. Legal Bases (Where Applicable)

Where applicable law (such as Canadian PIPEDA, the EU GDPR, or the UK GDPR) requires a legal basis for processing personal data, we rely on: (a) the performance of a contract with you; (b) your consent, where we ask for it; (c) our legitimate interests in operating and improving our products; and (d) compliance with legal obligations.

4. Sharing of Information

We share personal information only as needed to run the service and only with parties bound by appropriate confidentiality and security obligations:

• Service providers: hosting (Netlify, Fly.io), email delivery (Resend), SMS delivery (Twilio), payments (Stripe), analytics (Google), error monitoring, and customer-support tooling.
• Connected accounts you authorize: when you connect a Google Ads account, we exchange data with Google Ads on your behalf strictly within the scope you approve.
• Legal disclosures: when we are required by law, court order, or to protect rights, safety, and property.
• Corporate transactions: if Fluxum is involved in a merger, acquisition, or asset sale, your information may transfer subject to this Policy.

We do not sell personal information, and we do not share it with advertisers for their own marketing.

5. Google Ads API Use

Several Fluxum products, including Scatterbrainz, integrate with the Google Ads API to help account owners manage their advertising. When you connect a Google Ads account to a Fluxum product:

• we read campaign, ad group, ad, keyword, and metrics data so that we can surface diagnostics and recommendations inside the product;
• we may execute write actions you explicitly approve in chat or via in-app controls — for example, pausing a campaign, adjusting a bid or budget, adding a keyword, or creating a new search campaign;
• every write action requires a clear, in-app approval gate before it is sent to the Google Ads API;
• we do not transfer Google Ads data to a separate location for any purpose unrelated to the product features you are using;
• we do not use Google Ads data to retarget you, sell to third parties, or train general-purpose machine learning models;
• Google's own privacy policy and terms govern your underlying use of Google Ads. See policies.google.com/privacy.

6. Cookies and Tracking

We use first-party cookies and localStorage to keep you signed in and remember your settings inside our products. We use Google Analytics 4 and Google Ads conversion tracking on our marketing and product surfaces. You can opt out of Google Analytics by installing the Google Analytics opt-out browser add-on, and you can manage personalized advertising at adssettings.google.com.

7. Data Retention

We keep personal information only as long as is necessary to provide the service, comply with our legal obligations, resolve disputes, and enforce our agreements. If you delete your account, we will delete or anonymize the associated personal information within 90 days, except where retention is required by law or for legitimate business purposes (such as financial records).

8. Security

We use industry-standard administrative, technical, and physical safeguards to protect personal information — including encryption in transit (TLS), encryption at rest where supported by our infrastructure providers, scoped access tokens, and audit logs for sensitive actions. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. International Transfers

Fluxum is based in Canada and primarily uses service providers located in Canada and the United States. If you access our services from outside these countries, your information may be transferred to, stored, and processed in a jurisdiction other than your own. We rely on standard contractual safeguards offered by our providers where required by law.

10. Your Rights

Depending on where you live, you may have the right to access, correct, delete, port, or restrict the processing of your personal information, and to withdraw consent at any time where we rely on consent. Canadian residents may contact our Privacy Office (see Section 13) to exercise rights under PIPEDA. EU/UK residents may exercise rights under the GDPR / UK GDPR. You also have the right to lodge a complaint with your local data-protection authority.

11. Children

Our products are not directed to children under 13 (or under 16 in jurisdictions where that is the minimum age). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

12. Changes to this Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when revisions were made. Material changes will be communicated through the product or by email to your account address.

13. Contact Us