Privacy Policy

1. Information We Collect

1.1 Information Business Owners Give Us

• Account registration: name, email address, phone number, business name, website URL, profile photo;
• Professional information: credentials, certifications, specializations, service descriptions, pricing. Flyk does not verify licenses or credentials;
• Financial information: Stripe Connect account details (we do not store raw bank account or card numbers);
• Calendar and scheduling data: availability windows, booking preferences, timezone;
• Integration credentials: third-party API keys and access tokens for connected services (encrypted at rest in our database, and encrypted again by our application with a key derived separately for each Business Owner — see Section 6);
• Communications: messages sent through the Platform, support requests.

1.2 Information Clients Give Us

• Identity: name, email address, optional phone number;
• Booking information: selected Business Owner, service type, date/time, session notes;
• Call and message content: the text transcript of a call answered by a Flyk AI assistant, and the content of texts, WhatsApp messages, and website-widget chats you send (we do not retain call audio recordings);
• Payment information: processed by Stripe; we retain only payment status and transaction IDs, never raw card numbers.

1.3 Information We Generate or Collect Automatically

• Business Owner Agent Cards: AI-generated structured profiles derived from publicly available information and Business Owner-submitted data, published in AFODP-compliant format;
• Reputation attestations: cryptographically signed records of session completions, Client interactions, and the credentials a Business Owner lists or their website shows (Flyk does not verify them), stored in an append-only ledger;
• Conversation data: interactions between Clients and Business Owner AI agents, kept for the periods in Section 4;
• Usage data: session logs, API call logs, feature usage, access timestamps;
• Device and technical data: IP address, browser type, operating system, referring URLs (via standard server logs);
• AI conversation content: the prompts and replies exchanged with an AI agent, retained so the Business Owner has a record of the conversation and so we can debug and improve the service. We do not use your conversations to train AI models.

1.4 Information From Third Parties

• Publicly available business data: (a) the content of a business's own public website, including its structured schema.org/JSON-LD markup — fetched during onboarding at the Business Owner's request, or ahead of any claim in order to pre-build a listing a Business Owner can later claim; (b) directory- and review-profile links that appear on that website or that a Business Owner pastes in themselves — we record the link, not the third-party platform's ratings or reviews; and (c) bulk business-listing data (business name, phone number, website, address, categories, opening hours, description) obtained from third-party business-data sources, used to pre-populate unclaimed listings that a Business Owner can later claim and correct. Some of this data (business names, addresses, phone numbers, categories and map locations) comes from Overture Maps Foundation: © Overture Maps Foundation and its contributors, under the CDLA-Permissive-2.0 license, with parts under the Apache-2.0 and CC0-1.0 licenses. Flyk does not integrate with third-party review-platform APIs and does not import ratings or reviews from them;
• Calendar providers: availability data from connected Google Calendar, Apple iCal, Calendly, Acuity, Square Appointments, Mindbody, or other scheduling services a Business Owner chooses to integrate (Vagaro and Jane App are listed in the product as planned integrations and cannot be connected today, so no data flows from them);
• Consumer Agent platforms: when a third-party AI agent queries the Flyk registry on a user's behalf, we receive the query and standard API authentication data. We do not receive the end user's identity unless they complete a Booking.

1.5 Information Our Mobile Apps Collect

Sections 1.1 to 1.4 apply to the apps too. In addition, the apps collect the information below. They contain no advertising, analytics, or crash-reporting software, do not use your phone's advertising identifier, and do not track you across other companies' apps or websites.

In Flyk Business (for business owners):

• Your account and business details: the email address you sign up with, and the business details you add or edit — name, phone number, address, services, hours, and the website we read to fill them in;
• Your replies and drafts: replies you send to customers from Messages, and follow-up messages you ask Flyk to improve before you send them (a draft may name a customer). A follow-up you send goes out through your phone's own Messages or Mail app, and we do not see it;
• Your chats with the assistant, and what it remembers: your conversations with the Flyk assistant, and a short list of facts it keeps about you and your business from past conversations — what you want, what you approved, your preferences. It is instructed never to remember anything about your customers, and email addresses and phone numbers are removed from what it keeps.

In Flyk Concierge (for people finding businesses), which you can use with or without an account:

• Your Concierge account (optional): if you sign in, the email address you sign in with, using a one-time code we email to you. Your account holds your people (My People), what Flyk remembers, your chats, and your appointments, so they stay with you on a new phone;
• Approximate location (optional): only when you tap to use your location, and only with your permission. The app asks your phone for an approximate, city-level location and turns it into a city name on the phone; your coordinates are not sent to us. The city name is sent with your searches and lookups so that results are near you. You can type a different city at any time, or turn off location access in your phone's settings;
• A contact you pick (optional): when you add someone to My People from your phone's contacts, the app opens your phone's contact picker and copies only the one contact you choose — their name, first phone number, first email address, and first postal address. We never read your address book. The entry is saved to your list on our servers;
• A device ID: the first time you open the app, it creates a random ID for that installation and registers it with us, along with the platform (iOS or Android) and the app version. It is not your phone's hardware ID or advertising ID. We use it to keep your things together when you are not signed in, and to limit abuse;
• Your searches: the businesses you search for, and the websites or phone numbers you look up, with your city name if you have set one;
• Your chats, and what Flyk remembers: your conversations with Flyk and with businesses in the app, and the notes Flyk keeps so it can help you next time (a preference, a need, an outcome). You can see these notes under What Flyk remembers and remove any of them;
• Calling Flyk from the app: if you tap Call instead, the app opens your phone's own dialer to Flyk's number with a one-time code. The app records nothing. When the call comes in, the code links the call, and the number you are calling from, to the app on your phone (see Section 3.7).

If an app sends push notifications and you allow them, we also receive a push token from Apple or Google so we can deliver them. You can turn notifications off at any time in your phone's settings.

1.6 Private Early Access (Invite List)

Before Flyk opens to everyone, you can ask for an invite on flyk.app. This section explains what the invite list keeps about you and why. The rest of this policy also applies.

When you ask for an invite, we keep:

• Your contact details: your email address or your mobile phone number. If you give a phone number, we also note whether it is a mobile line;
• Your answers about your business (optional): if you answer the questions after you sign up, whether you run a business or are looking for one, your business name, the kind of work you do (and your own words if you choose "Something else"), whether you have a website and its address, whether you are an agency or manage several businesses, and when you saved your answers;
• Your readiness check (optional): if you take the AI readiness check on flyk.app/check and then leave your email, we store your answers, your score and who's taking it (owner, staff or just looking) with your sign-up, to tailor your invite and the fixes we send you, and to improve Flyk;
• Your agreement: when you agreed to our Terms and this policy, which version of the wording you saw, and the IP address and browser details (user agent) of the device you used, so we can show what you agreed to and when;
• How you found us: the campaign details in the link you followed (for example utm_source, utm_medium and utm_campaign), the web page that sent you if your browser shares it, which version of our page you saw, its language, and whether you were on a phone or a computer;
• Our emails to you: when we sent your invite email, when you confirmed your email address, and when you unsubscribed, if you did;
• Your choices: whether and when you ticked "Send me Flyk updates by email" or the box to get texts from Flyk. Both boxes start unticked.

Why we use it: to send your invite and messages about your request; to use your optional answers to prepare your invite; to send you Flyk updates by email, only if you ticked that box; and to understand, in total, which links and pages bring people to Flyk. We do not sell any of it (Section 3.5).

Legal basis (Section 2.4): sending your invite and messages about your request is processing you asked for; your optional answers, Flyk updates and texts are based on your consent, which you can withdraw at any time; how you found us is based on our legitimate interest in knowing which links work; using your readiness check answers to improve Flyk, whether kept with your sign-up or without your details, is based on our legitimate interest in improving Flyk.

Texts: we text the number you give only if you ticked the box to get texts from Flyk. We do not send texts to the invite list today. If we start, you can reply STOP to any text to stop them (Section 3.6).

Who handles it: the invite list is stored with Amazon Web Services in the United States, and invite emails are sent from together@flyk.app through Twilio SendGrid. Both act as our service providers (Section 3.2).

Spam protection: to keep automated sign-ups out, the form is protected by Amazon Web Services' web application firewall, which may ask you to solve a short puzzle. It checks your request (including your IP address and browser details) and doesn't keep your answers to the questions.

Anonymous page counts: the invite page also keeps daily totals: how many visits it had, how many reached the form or watched a film, how many times the invite form's button was pressed and how many of those did not go through, with a short reason (for example, a field check). The readiness check keeps the same kind of totals: how many started it, finished it and pressed "Email me my fixes". These totals are split only by page version, language, phone or computer, and the link's source (the readiness check's starts also by who's taking it: owner, staff or just looking). They contain nothing about you: no name, email address, phone number, IP address or ID. The readiness check also keeps your answers, to improve the product, whether or not you leave your email: your yes or no to each question, your score, and who's taking it (owner, staff or just looking), with only the day, the language, phone or computer, and the link's source. They are kept without anything that identifies you (no name, email address, phone number, IP address, or ID of you or your device) and each set of answers is deleted after about 13 months. Separately, our site analytics (Section 7) also record these pages: each action counted above, with the random ID in your browser and your approximate location, and a screen recording in which what you type is hidden, but what you tap or click and what the page shows you, such as your check answers and your score, can be seen.

How long we keep it: we keep your invite request until you ask us to delete it. Unsubscribing stops our emails but does not delete your request. When we delete a request, copies can remain in our backups for up to 35 days.

Unsubscribing and deleting: every invite-list email has an unsubscribe link. To see, correct or delete your invite request, or to withdraw a consent, email privacy@flyk.app from the address you signed up with, or tell us the phone number you gave. Your rights in Section 5 apply.

2. How We Use Your Information

2.1 To Operate the Platform

• Create and maintain Business Owner and Client accounts;
• Generate, publish, and maintain Agent Cards and AFODP-compliant Business Owner profiles;
• Compute and maintain reputation trust scores based on verified attestations;
• Process Bookings and facilitate payments via Stripe Connect;
• Operate AI agent conversations between Clients and Business Owner agents;
• Manage calendar synchronization with connected third-party services;
• Enable masked communication sessions (where Twilio integration is active) between Business Owners and Clients without revealing real phone numbers to either party.

2.2 To Improve the Platform

• Analyze usage patterns to improve features and user experience;
• Debug, monitor, and improve the quality of agent replies — reviewing conversations when something goes wrong or when a surface is reported as inaccurate. We do not train AI models on your Content; if that ever changes we will update these terms and give notice first;
• Conduct research on matching quality, discovery effectiveness, and reputation signal accuracy.

2.3 To Communicate

• Send transactional communications: booking confirmations, reminders, payment receipts, integration status alerts;
• Send service notifications: the result of a request to prove a business is yours, and subscription billing notices;
• Send marketing communications with your consent, which you may opt out of at any time.

2.4 Legal Basis (for EEA/UK Users)

Where GDPR or UK GDPR applies, we process personal data on the following legal bases:

• Contract performance: processing necessary to deliver the Platform services you have requested;
• Legitimate interests: improving the Platform, preventing fraud, maintaining security, generating reputation signals, enabling discovery;
• Consent: marketing communications;
• Legal obligation: compliance with applicable laws and regulatory requirements.

3. How We Share Your Information

3.1 With Other Users

Business Owner profile information is shared publicly through the Platform and via Agent Cards that Consumer Agents can read. This includes name, business information, services, pricing signals, availability signals, trust score tier, and integration capabilities. Raw email addresses and personal phone numbers are not included in public Agent Cards.

Client identity is shared with the relevant Business Owner when a Booking is confirmed. Client information is not included in public-facing Agent Cards or AFODP discovery responses.

3.2 With Service Providers

We rely on a small number of third-party service providers to operate the Platform. They process data on our instructions to provide their service to us; some may also keep it for a limited time to prevent fraud and abuse, meet legal duties, or keep service statistics. Section 3.8 shows, for each AI provider, what its own published terms say about training AI and how long it keeps data. The categories:

Each service provider handles the data under the terms it offers its business customers, which limit what it may do with the data. The specific providers may change as the Platform evolves; our AI providers are named in Section 3.8, with links to their terms, and the current list of all providers is available on request at privacy@flyk.app.

3.3 With Consumer Agent Platforms

Business Owner Agent Cards are accessible to third-party AI agents that connect to Flyk through the AFODP protocol, MCP, UTCP, and published APIs. This is core to the Platform's purpose: letting AI agents that connect to Flyk get Business Owners' information from them, without marketplace intermediaries. Once Flyk is answering for a business, its Business Owner can hide it at any time: when the Business Owner stops Flyk answering from the dashboard, people can't find it through Flyk, and Flyk stops sharing it with AI agents (which may keep what they already read) until the Business Owner lets Flyk answer again. Before Flyk answers for a business, a listing Flyk built from public information may still appear as an unclaimed business.

3.4 Legal Disclosures

We may disclose information as required by applicable law, court order, or government authority; to protect the rights, property, or safety of Flyk, our users, or the public; or in connection with a corporate transaction (merger, acquisition, or sale of assets), with notice to affected users where legally required.

3.5 No Sale of Personal Data

Flyk does not sell personal data to third parties for their own commercial purposes. This is consistent with our commitment to a business-owned, ad-free platform model. Flyk products do not carry advertising, and we do not allow advertisers to target users through the Platform.

3.6 Mobile Phone Numbers and SMS Consent

When you provide your mobile phone number to Flyk — by texting one of our numbers, booking an appointment by text, or registering or verifying a business — we use it to reply to your messages, to send confirmations and reminders for bookings you make by text, to send business owners notices and security alerts about their account, and to deliver one-time verification codes. Message frequency varies. Msg & data rates may apply.

No mobile phone numbers or SMS opt-in consent data are ever sold or shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data will not be shared with any third party, except with service providers that deliver or process the messages you requested, and the business you are texting.

You can opt out of SMS at any time by replying STOP to any message. Reply HELP for assistance.

3.7 Calls, Texts and Chat Answered by AI

Some Business Owners use Flyk to answer their phone, texts, WhatsApp messages, and website chat. The channels a business can enable may change over time. When you call or message a Flyk-powered number, or use a chat widget embedded on a business's website, you are interacting with an AI assistant, not a human employee of that business. The assistant identifies itself at the start of the conversation.

For phone calls: your speech is processed in real time and converted to text so the assistant can respond and so the business has a record of what you asked for. We do not retain a recording of the call audio — only the text transcript, kept per the retention table above. Transcripts and messages are visible to the Business Owner you contacted.

For texts and WhatsApp: reply STOP at any time to opt out, or HELP for help. Opting out is recorded durably by Flyk, not only by your carrier. Text and WhatsApp messages are delivered through our communications provider and are subject to your carrier's or WhatsApp's own terms.

The assistant cannot pass your call to a person. If you would rather not speak with an AI assistant, contact the business through the phone number or website listed on its profile.

If you call Flyk from the Flyk Concierge app (Call instead), the call carries a one-time code that links the call, and the number you are calling from, to the app on your phone.

3.8 AI Providers

Flyk uses AI to answer people and to help Business Owners. To do that, we send some content to third-party AI providers. They process it as our service providers, on our instructions, to produce a result for us. Their published terms say they don't train their AI on what you send without permission, which Flyk hasn't given; most keep it for a limited time to detect abuse, then delete it. The last column of the table says what each provider's own terms say, with a link. Content is sent as it was written, so it includes any personal details you or a customer typed. We also use web-search providers to find and verify business information; they never receive a person's chat, and their terms differ (see the table). A provider a business owner chose for themselves is covered under 'Your own AI', below. Our providers today:

The last column summarizes each provider's terms as published on October 21, 2026. Providers can change their terms; the links go to the current version, and we update this table when we learn of a change that affects it.

Before your first chat in either app, a screen explains this and asks for your permission. If you decline, you can still use the parts of the app that do not use AI.

Your own AI. A business owner can choose their own AI model or connect their own AI provider or AI app, including but not limited to providers such as Anthropic, OpenAI and Groq, and connections such as their own API key, Flyk Studio or the WordPress plugin, including when they claim their business and set up how Flyk answers. When they do, what goes through it, including conversations people have with that business through Flyk, is processed by the provider the owner chose, under the owner's own agreement with that provider. Flyk stores any key it is given encrypted and uses it only for what it was connected for.

If we add or change an AI or web-search provider, we will update this list.

4. Data Retention

These are the retention periods we set. We delete or anonymize data on request as described in Section 5, and we do not keep personal data longer than we need it for the purposes above or for a legal obligation. Automatic deletion of records once their period ends is built but not yet switched on. We are switching it on; until it runs, some records may be kept past the period shown. You can ask us to delete your data at any time at privacy@flyk.app, and we will. After data is deleted, copies can remain in our encrypted backups until those backups expire: up to 30 days for database backups, and up to 12 months for other backups.

4.1 What a deletion actually removes — and what it does not

There are two kinds of deletion, and they differ in scope:

• Deleting a single business removes that business and its data — conversations, bookings, client contacts, services, availability, and its AI agent configuration — and removes it from Flyk and from what Flyk shares with AI agents (AI agents may keep what they already read). It is immediate and cannot be undone. Your account and any other businesses you own are unaffected.
• Deleting your account does the same for every business you own, and then removes your account itself. Your profile is permanently deleted, not archived or hidden.

In both cases we keep a small set of records, in the categories below. We keep them because we are permitted or required to — for fraud prevention, tax and financial-record obligations, and the ability to resolve a dispute — under GDPR Article 17(3) and CCPA §1798.105(d):

The principle, stated plainly: the money and ownership record stays, the person goes. Bookings are erased despite their financial relevance, because the payment record already carries what a tax or fraud enquiry needs without a client's name attached.

4.2 If you have a paid subscription

When you delete your account we cancel your subscription immediately and refund the unused remainder of the month you have already paid for. You do not need to cancel separately first, and you will not be charged again.

If we cannot cancel your subscription for a technical reason, we stop and delete nothing rather than leave you paying for an account we have erased — you keep your records. You can sign in again and retry, or email privacy@flyk.app and we will complete the deletion.

4.3 Deleting your data from the apps

You can delete your data yourself:

• Flyk Business: go to Account › Delete account. This is the account deletion described in Sections 4.1 and 4.2, including the subscription cancellation and refund;
• Flyk Concierge: go to Account › Delete my account. This removes, right away and for good, your Concierge account and everything saved with it — the email you sign in with, your people (including contact details you saved for them), your chats with Flyk and with businesses, and what Flyk remembers. The phone you delete from is forgotten too, including its device ID; any other phone signed in to the account is signed out and clears its own copy the next time it checks in. There is no restore. You can also remove a single person, a single note, or a single business chat at any time;
• Without the app: flyk.app/delete-account explains every way to delete your account; if you can't sign in, email privacy@flyk.app from your account's email address.

How to delete your Flyk account

If you use Flyk Concierge without an account, what is saved against your device is deleted after 12 months without use (see the table above), or sooner if you ask us.

5. Your Privacy Rights

5.1 All Users

Regardless of location, you have the right to:

• Access: request a copy of the personal data we hold about you;
• Correction: request correction of inaccurate data;
• Deletion (Right to Be Forgotten): delete your account from your dashboard or from either app (Section 4.3), or ask us to delete a single business at privacy@flyk.app. Deletion is immediate and permanent. Section 4.1 lists exactly what is removed and the small set of records we keep, and why. If you have a paid subscription we cancel it and refund the unused part of the month;
• Data portability: export your Business Owner profile, reputation attestations, and cryptographically signed portable reputation document at any time via the dashboard;
• Opt-out of marketing: unsubscribe from marketing emails at any time via the unsubscribe link in any email or by contacting privacy@flyk.app.

5.2 California Residents (CCPA / CPRA)

California residents have additional rights under the California Consumer Privacy Act and California Privacy Rights Act:

• Right to know the categories and specific pieces of personal information collected, and the purposes for which they are used;
• Right to delete personal information, subject to exceptions for legal compliance and legitimate business purposes;
• Right to opt out of the sale or sharing of personal information (we do not sell or share personal information for cross-context behavioral advertising);
• Right to correct inaccurate personal information;
• Right to limit use and disclosure of sensitive personal information;
• Non-discrimination: we will not discriminate against you for exercising any of these rights.

To submit a verifiable consumer request, contact privacy@flyk.app. We will respond within 45 days.

5.3 EEA and UK Residents (GDPR / UK GDPR)

EEA and UK residents have the right to:

• Object to processing based on legitimate interests;
• Restrict processing in certain circumstances;
• Withdraw consent at any time where consent is the legal basis (withdrawal does not affect the lawfulness of processing before withdrawal);
• Lodge a complaint with your local supervisory authority (e.g., the ICO in the UK, or your EU member state's DPA).

Flyk is not certified under the EU-US Data Privacy Framework. Where personal data is transferred from the EEA or UK to the United States, we rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable) together with supplementary technical measures, including encryption in transit and at rest.

To exercise any rights, contact us at privacy@flyk.app. We will respond within 30 days (or within applicable legal timeframes where shorter deadlines apply).

6. Data Security

We implement the following technical and organizational measures to protect your data:

• Encryption in transit: TLS 1.2 or higher for data sent to and from Flyk over the internet; connections to our database must be encrypted;
• Encryption at rest: AES-256 for our database, file storage and cache, with keys managed by Amazon Web Services; integration credentials are also encrypted by our application, with a key derived separately for each Business Owner;
• Tenant isolation: our application checks that each request belongs to the business it asks about, and our database adds row-level security that denies access by default, to keep each business's data separate from every other's;
• Credential handling: integration credentials are decrypted only at the moment of use and are never stored in decrypted form;
• Access controls: each Business Owner sees only the businesses they own or manage; only a small number of Flyk staff have admin access, which they use to support and secure the service;
• Audit logging: changes Flyk staff make through our admin tools, and events such as connecting or disconnecting an integration, are recorded in an audit log. Staff viewing of a business's data is not yet recorded there; we are adding it.

No security system is impenetrable. If a security incident exposes your personal information, we will notify you, and regulators where the law requires, without unreasonable delay and within the time the law of your state or country sets. If an incident affects the data of a Business Owner's business or clients, we notify that Business Owner without undue delay and no later than 72 hours after we confirm it, as Section 7.5 of our Terms describes, and we comply with the state breach-notice laws that apply. To report a security problem, email privacy@flyk.app with "URGENT" in the subject.

7. Cookies and Tracking

We keep cookies and browser storage to a minimum, and none of it is used for advertising:

• Strictly necessary cookies: required to operate the Platform (session management, authentication, security). These cannot be disabled.
• Page-version cookie: on flyk.app, one first-party cookie (flyk_v) remembers which version of our home page we showed you, for up to 30 days, so you see the same page each visit and we can count, in totals only, how each version does. It holds one letter, is never shared or sold, and is not used for advertising or to follow you to other sites.
• Site analytics: on every flyk.app page except the legal, support, account-deletion and texting pages, we use PostHog to count visits and record screen sessions, to improve the site. It isn't used for advertising. Recordings hide everything you type into a form and leave out the email or phone field entirely, and they are deleted after 30 days. It sets no cookie: it keeps a random ID in your browser's local storage that links your visits from that browser until you clear it. PostHog uses your IP address to estimate your approximate location (such as country and city), then discards the IP address.
• No advertising cookies: we do not use advertising, retargeting, or third-party behavioral tracking cookies.

You may block or delete cookies via your browser settings; note that blocking strictly necessary cookies will prevent you from signing in.

8. Children's Privacy

The Platform is not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children below these ages. If we become aware that we have collected information from a child without appropriate parental consent, we will delete it promptly. If you believe a child has provided us personal information, contact us at privacy@flyk.app.

Our mobile apps are not directed to children either: Flyk Business is a tool for business owners, and Flyk Concierge is intended for adults.

9. Changes to This Policy

We may update this Privacy Policy from time to time as the Platform evolves or as legal requirements change. We will provide notice of material changes via email or prominent platform notification at least 14 days before changes take effect. The updated effective date will be reflected at the top of this document. Your continued use of the Platform after the effective date constitutes acceptance of the revised policy.

What changed on November 14, 2026: Section 7, and the site analytics row in Section 3.2, now say that our site analytics run on every flyk.app page except the legal, support, account-deletion and texting pages, instead of naming each page. How they work has not changed. On October 25, 2026: Section 7, and the site analytics row in Section 3.2, say plainly how our site analytics work: PostHog uses your IP address to estimate your approximate location and then discards the IP address, a random ID in your browser links your visits, and screen recordings hide what you type and are deleted after 30 days. Section 1.6 says our site analytics also record the invite and readiness-check pages, and that we keep your answer to whether you run a business or are looking for one. Section 4 says how long site analytics are kept. Section 1.4 lists where the business information we use comes from. Sections 1.1 and 1.3 say that Flyk does not verify licenses or credentials, and Section 2.3 no longer mentions credential checks. Section 3.3 says when and how a Business Owner can hide their business, and Section 3.7 says that the AI assistant cannot pass your call to a person. Section 4 calls your saved list "Your people (My People)", and Section 1.6 refers to the invite form's button instead of quoting it. Section 4.3 explains how to delete your account without the app (flyk.app/delete-account lists every way, and if you can't sign in, you email us), and Section 4.2 says what you can do if your subscription can't be cancelled. On October 21, 2026: Section 6 now describes our security as it is today (TLS 1.2 or higher, how integration credentials are encrypted, and what our audit log records and does not yet record) and says when we notify you of a security incident. Section 3.8 shows what each AI provider's own published terms say about training and how long it keeps data, with links. Section 4 says plainly that automatic deletion is not yet switched on, and how long backups last.

10. Contact Us

For urgent security or breach-related matters, please include "URGENT" in your subject line.