Skip to content
FlowZa AIBusiness Operating Systems
Legal

Privacy Policy

Last updated: July 26, 2026

A privacy policy document beside a shield-and-padlock mark and a clause index, standing for encrypted, access-controlled data.

Overview

FlowZa AI, operated by SoarTek LLC (Ghala, Muscat, Sultanate of Oman), provides nine AI-powered business operating platforms: FlowZa Finance, FlowZa Club, FlowZa LogisPro, FlowZa Spa Master, FlowZa QRForge, FlowZa POS and FlowZa Fleetza. This policy explains what personal data we collect across flowza.ai and the FlowZa platforms, why we collect it, and the rights you have over it.

Data We Collect

  • Account data — name, email address, phone number, company name and role, collected when you create an account, start a trial or contact us.
  • Usage data — how you interact with our products (features used, pages visited, device and browser information), used to improve the platforms.
  • Business data — the operational content you store in FlowZa products: invoices, contacts, inventory, bookings, payroll records and similar. This belongs to you. We process it only to provide the service.
  • Payment data — processed by Stripe (PCI-DSS compliant). We store only the last 4 digits of your card and the billing history we are required to keep.
  • Support communications — messages you send us via the contact form, email or WhatsApp, kept so we can resolve your requests.

How We Use Your Data

We use personal data to provide and improve the FlowZa platforms, process payments, respond to support requests, send service notifications, and — only with your consent — send product updates and marketing. We never use your identifiable data to train external AI models.

Data Sharing

We do not sell your personal data. We share data only with service providers who help us run the platforms (hosting, payment processing, email delivery), each bound by data protection agreements; with professional advisers where required; and with authorities when the law demands it.

Data Security

FlowZa runs on SOC 2 compliant infrastructure. All data is encrypted at rest (AES-256) and in transit (TLS 1.3). Access is governed by role-based permissions, every sensitive action is captured in an append-only audit trail, and tenant data is isolated at the database level. We commission penetration tests annually and remediate critical findings within 30 days.

Your Rights

You may request access to the personal data we hold about you, correction of inaccurate data, erasure, a portable export (CSV, Excel or JSON), or withdrawal of any consent you have given — at any time, by writing to privacy@flowza.ai. We respond within 30 days.

Data Retention

  • Financial records — retained for up to 7 years where tax and accounting law requires it.
  • Marketing data — retained for up to 3 years after your last interaction.
  • Account data — deleted within 90 days of account closure, except where retention is legally required.

Contact

Questions about this policy or your data: privacy@flowza.ai.

SoarTek LLC · Near Centara Hotel, Ghala, Muscat, Sultanate of Oman.

WhatsApp Us