Privacy Policy

This Privacy Policy explains how Flint collects, uses, shares, and protects personal data. Flint is offered only in the United States. We aim to comply with US federal and state privacy laws (including CCPA/CPRA) and, as an Indian-incorporated company, with applicable Indian obligations under the IT Act, 2000 and IT Rules, 2021.

About this policy

This policy describes how we handle information relating to Flint accounts, users, visitors, and others who interact with us. It forms part of our Terms of Service.

Who we are

Data controller: Anycast Technology Private Limited, WeWork, Two Horizon Center, Sector-43, Gurgaon, Haryana — 122002, India.

Flint is Anycast's standalone product; personal data collected through Flint is not combined with data from other Anycast products or brands, except for shared security, legal, and audit functions.

India Grievance Officer (IT Rules, 2021): Jivesh Gupta, support@flintads.com. All privacy questions: support@flintads.com.

Scope (US only)

This policy applies to account holders, authorised users, site visitors at flintads.com, and recipients of our communications. Flint is offered only to individuals and entities in the United States; this policy is written accordingly. If you are not located in the United States, please do not sign up for or use the Service.

Data we collect

Information you provide

• Account data: name, work email, mobile, company name, role.
• Product / campaign data: product URLs, descriptions, images, SKUs, pricing, brand guidelines — used to generate ads.
• Prompts and the generated Output.
• Support communications.

Information collected automatically

• Usage data: pages visited, features used, generation metadata (not Input Materials), click events.
• Device and connection: IP address, approximate geolocation, browser, OS, device identifiers.
• Cookies and similar technologies (see Section 16).
• Server and security logs.

Billing information via the Merchant of Record

Payments are processed by one or more authorised third-party Merchants of Record ("MoR"). The MoR for your transaction is disclosed at checkout. The MoR collects billing information (name, address, payment details, tax IDs, transaction data) as an independent controller for its own compliance. We receive from the MoR only the information required to operate your account (customer identifier, plan, entitlements, settlement totals). Each MoR's own privacy policy governs the data it collects directly.

Purposes & legal bases

We process personal data for these purposes, on the bases noted:

• Provide and operate Flint — contract / legitimate interests.
• Generate AI Output using your Input Materials — contract.
• Billing (via MoR), accounting, tax — legal obligation.
• Security, fraud prevention, abuse investigation — legitimate interests.
• Product analytics and improvement — legitimate interests / consent where required.
• Marketing communications — consent, with opt-out at any time.
• Responding to legal requests — legal obligation.

No AI training on your data

We do not use your Input Materials, prompts, or Output to train, fine-tune, or evaluate foundation AI models, whether our own or a third party's. We use only aggregated, anonymised, non-reversible operational metadata (render latency, error rates, feature-usage counts) to improve Service reliability.

Sharing & processors

We share personal data with the following categories of recipients, each bound by written agreements:

• Cloud hosting: Amazon Web Services (AWS Mumbai, ap-south-1, as primary region).
• Third-party AI model providers — Google (Veo), ElevenLabs, Seedance, VEED, sync.so, and others we may add. Input Materials and Output are transmitted to these providers for processing, including in regions outside India (primarily US).
• Merchant-of-Record partners used for global checkout and tax handling (disclosed at checkout on each transaction).
• Email, analytics, and customer-support providers.
• Professional advisors (legal, accounting, audit).
• Law enforcement, regulators, or courts where required by law or to protect rights.
• A successor entity in a merger, acquisition, financing, or sale of assets.

We do not sell personal data. We do not share personal data for cross-context behavioural advertising as defined under California law.

International transfers

Although the Service is offered only in the United States, your personal data may be stored and processed in other countries in the ordinary course of running Flint:

• Primary hosting: AWS Mumbai (ap-south-1), India.
• AI model providers may process data in the US, EU, or other regions.
• The applicable Merchant-of-Record partner may process billing data in its own region.
• Email and analytics providers may process data in the US.

By using the Service, you consent to these transfers. We apply contractual safeguards with each processor. Request a summary by emailing support@flintads.com.

Retention

• Account data: life of the account + 3 years.
• Input Materials: 90 days from submission, or until account deletion, whichever is earlier.
• Generated Output: 90 days from generation; download earlier to retain.
• Prompt and usage logs: up to 12 months.
• Security logs: up to 18 months.
• Billing and tax records: as required by law (up to 8 years under Indian GST/Income Tax rules).
• Deletion on request: within 30 days, except where retention is required to defend legal claims or comply with law.

Your privacy rights

Regardless of where in the United States you are located, you may:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion, subject to legal retention obligations.
• Withdraw consent where processing is consent-based.
• Opt out of marketing communications at any time.

To exercise any right, email support@flintads.com. We respond within 30 days and may verify your identity before responding.

California residents (CCPA / CPRA)

If you are a California resident, you have the following additional rights:

• Right to know the categories and specific pieces of personal information we collect, the sources, purposes, and categories of third parties with whom we share it.
• Right to delete personal information, subject to statutory exceptions.
• Right to correct inaccurate personal information.
• Right to opt out of sale / sharing. We do not sell personal information and we do not share personal information for cross-context behavioural advertising.
• Right to limit use and disclosure of sensitive personal information.
• Right to non-discrimination for exercising these rights.

To exercise California rights, email support@flintads.com with "California Privacy Request" in the subject line. You may designate an authorised agent; we may require written authorisation and identity verification.

Other US state laws

We honour comparable rights (access, correction, deletion, opt-out of targeted advertising, opt-out of sale) under other US state privacy statutes (Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA, Texas DPSA, Oregon OCPA, and others) to the extent they apply. Email support@flintads.com to make a request.

Automated decision-making

We do not make decisions that produce legal or similarly significant effects on you based solely on automated processing. AI generation is a creative output; you decide whether to use it.

Children

Flint is not directed to, or available to, persons under 18. We do not knowingly collect personal data from minors. If we learn that we have, we will delete it.

Security

We apply reasonable technical and organisational measures: encryption in transit and at rest for sensitive fields, least-privilege IAM, MFA for admin access, logging, vulnerability scanning, secrets management, and incident response. No system is perfectly secure; we will notify affected users of breaches as required by law.

Cookies

We use only strictly necessary cookies for authentication and session management. You can control cookies via your browser settings.

Geographic availability

Flint is offered only to individuals and entities located in the United States. We do not offer or market Flint in the United Kingdom, the European Economic Area, or any other jurisdiction. If you are not located in the United States, please do not sign up; we may block or terminate accounts that appear to originate outside the United States.

Changes

We will post updates here and notify registered users by email at least 15 days before material changes take effect.

Contact

• Privacy questions and rights requests: support@flintads.com
• India Grievance Officer: Jivesh Gupta, support@flintads.com
• Registered office: Anycast Technology Pvt Ltd, WeWork, Two Horizon Center, Sector-43, Gurgaon, Haryana — 122002, India