Data processing
What we do with your company's information, in plain words.
Who controls what
Your company controls the personal information your people put into FLO: mail, files, calendars, contacts, recordings and booking answers. FastFlowUp processes it on your instructions, which are the settings you choose and the way your people use the product.
For our own records, meaning account holders, invoices and the audit of our own staff, we are the controller.
What we process and why
| Category | Why |
|---|---|
| Names, work addresses, unit, role and the mobile number used for sign in codes | Running the service, signing people in, administration |
| Mail, attachments, files, events, contacts, transcripts and booking answers | Storing, delivering, searching and protecting your own content |
| Sign ins, audit events, scan verdicts and link clicks | Security, support and the audit trail you configure |
| The administrator contact and invoice details | Charging for the service |
We do not sell personal information, we do not use it for advertising and we do not train any model on it.
Where it is kept
The database and the object storage run in Singapore, which is where a company's mail, files and calendars live. The mail server keeps nothing of its own: it runs on the edge and stores every message in that database and storage. Sending a message passes through our sending service in the United States on its way out; meeting media is carried by the node nearest the people in the meeting. The subprocessors page lists each part and where it runs. It also says how to ask for the names of the providers.
A node inside a local internet exchange, such as Dhaka, is an option a company turns on. It holds encrypted bytes only and the keys never leave the chosen region. It does not change where anything else happens: sent mail still passes through the United States and text messages are still sent from Singapore. Our own staff reach your information only through the staff surface, with a recorded reason, under your residency.
Who else touches it
| The part | Where it runs |
|---|---|
| Application hosting and the edge, including the mail server, which stores nothing itself | Served globally, with everything stored in Singapore |
| Database and object storage | Singapore |
| Mail sending | United States |
| Text messages carrying sign in codes | Singapore |
| Meeting media | The node nearest the people in the meeting |
| Payments | Global |
| The escalated part of FLO IQ, with names replaced by tokens and retention off | United States |
We give thirty days' notice before adding one, which you may object to. The named providers behind each part are given on request; the subprocessors page says how to ask.
How it is protected
Passkey sign in, encryption in transit and at rest under a key for your company with the option to hold that key yourself, row level isolation in the database, an audit trail you can search and export, a check on every message and file, nightly backups under a lock with a rehearsed restore, and a staff surface behind hardware keys where every access carries a reason.
The security page says the same in more detail, including what encryption at rest does not promise.
Requests from your people
You answer your own people's access, correction and deletion requests through Console. Where a request needs us, we help within ten working days.
Deleting a person or a company destroys the key after the retention window you chose, thirty days by default. That is what makes every copy unreadable, including the backups, rather than a promise to hunt rows across systems.
If something goes wrong
We tell your administrators within seventy two hours of confirming a breach that affects your information: what happened, what was affected, what we did and what you should do.
Leaving
At the end of the agreement you may export mail, files, calendars and contacts in standard formats for thirty days. Then the key is destroyed as above.
Questions go to legal@fastflowup.com.