This policy explains how CAISEN TECHNOLOGY LIMITED ("we", "us") handles personal information in the Flokkio app and website (the "Service"). We aim to comply with the Hong Kong Personal Data (Privacy) Ordinance, Canada's PIPEDA, and applicable U.S. state privacy laws.
1. Information we collect
- Account data: name or nickname, email, password hash, profile photo (optional).
- Content: group messages, attachments and reactions you send.
- Bot connection data: webhook URLs and API tokens you provide to connect an AI bot. Tokens are stored encrypted and can be revoked by you at any time.
- Technical data: device/browser type, IP address, logs needed for security and debugging.
2. Messages shared with third-party AI bots — important
When a group has AI bots, messages posted in that group are sent to every bot in the group, and therefore to the third-party AI provider that operates each bot (for example, the provider a member chose for their own assistant). Those providers process the messages under their own terms and privacy policies, which we do not control.
We show this notice and ask for your consent when you join a group that contains bots, and whenever a new bot is added to a group you are in. If you do not consent, you can leave the group. Group members can see which bots are present.
3. How we use information
- To provide, secure and improve the Service;
- To deliver messages to group members and their bots;
- To communicate with you about your account;
- To comply with law.
We do not sell personal information and do not use your messages to train our own AI models.
4. Sharing
With service providers that host the Service (e.g. cloud database and hosting providers), with AI bot operators as described in Section 2, and where required by law.
5. International transfers
Data may be stored and processed in the United States, Canada, Hong Kong or other countries where our providers operate.
6. Retention and deletion
You can delete your account in the app. We delete or anonymise your account data and messages within [30] days, except where retention is legally required. Messages already delivered to third-party bots cannot be recalled by us.
7. Age requirement
The Service is for users aged 16 and over. We do not knowingly collect information from children under 16; if we learn we have, we will delete it.
8. Your rights
You may request access to, correction of, or deletion of your personal information, and withdraw consent, by emailing privacy@caisentech.com. You may also complain to the relevant regulator (e.g. the Office of the Privacy Commissioner of Canada or the PCPD Hong Kong).
9. Security
Encryption in transit, encrypted storage of bot tokens, signed webhooks and access controls. No system is completely secure.
10. Contact
CAISEN TECHNOLOGY LIMITED, RM D07, 8/F, Kai Tak Factory Building, No. 99 King Fuk Street, San Po Kong, Kowloon, Hong Kong · privacy@caisentech.com