Privacy Policy

Effective Date: 2026-02-26

FlowPrimo LLC ("FlowPrimo," "we," "us," or "our") is committed to protecting the privacy of our users ("you" or "your"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website flowprimo.com (the "Site") and use our products and services, including the BJJ Training App, Elevite platform, and any other software applications we offer (collectively, the "Services").

Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.

1. Information We Collect

1.1 Personal Information You Provide

We may collect personal information that you voluntarily provide to us when you register for an account, make a purchase, subscribe to our newsletter, participate in activities on the Services, or otherwise contact us. This information may include:

• Name (first and last)
• Email address
• Phone number
• Mailing or billing address
• Payment information (credit card numbers, billing details)
• Account credentials (username, password)
• Profile information (profile picture, bio, preferences)
• Any other information you choose to provide

1.2 Information Collected Automatically

When you access our Services, we may automatically collect certain information about your device and usage patterns, including:

• Device information (device type, operating system, unique device identifiers)
• Browser type and version
• IP address and approximate geographic location
• Pages visited, time spent on pages, and navigation paths
• Referring URLs and exit pages
• Date and time of access
• Clickstream data and interaction patterns

1.3 Information from Third-Party Services

If you connect a third-party account (such as Google or Apple) to our Services, we may receive information from that third-party service, such as your name, email address, and profile picture, in accordance with that service's privacy policies and your privacy settings on that service.

1.4 App-Specific Data

Depending on which FlowPrimo products you use, we may collect additional data specific to that application:

• BJJ Training App: Training logs, technique preferences, belt rank, gym affiliations, workout history, and performance metrics.
• Elevite Platform: Project data, workflow configurations, usage analytics, and team collaboration data.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and Maintain Services: To create and manage your account, process transactions, and deliver the features and functionality of our Services.
• Improve and Personalize: To understand how you use our Services, develop new products and features, and personalize your experience.
• Communications: To send you transactional emails, service updates, security alerts, and support messages. With your consent, we may also send promotional communications.
• Analytics and Research: To analyze usage trends, monitor the effectiveness of our Services, and conduct research to improve our offerings.
• Security and Fraud Prevention: To detect, prevent, and address technical issues, fraud, and other illegal or unauthorized activities.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

3. Cookies and Tracking Technologies

3.1 What Are Cookies

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work efficiently and to provide reporting information.

3.2 How We Use Cookies

This website currently sets no cookies of its own and does not embed any analytics or tracking tool. We neither build usage profiles nor recognise visitors across pages.

One exception applies when you open the booking window for an initial call: the service Cal.com may then set cookies within its own frame that are technically required for the booking process. See "Appointment booking via Cal.com" below.

Should we introduce an analytics tool later, we will update this policy beforehand.

3.3 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can set your browser to refuse all or some cookies, or to alert you when cookies are being sent. However, if you disable or refuse cookies, some parts of our Services may become inaccessible or not function properly.

4. Third-Party Services

We use the following service providers to operate this website. They receive access to personal data only to the extent required for their respective task.

• Vercel Inc. (USA) — Hosting and delivery of the website and protection against automated access. When a page is requested, server log data including your IP address is processed.
• Sanity AS (Norway) — Content management system. It holds the editorial content of this website as well as enquiries received via the form or the chat.
• Anthropic PBC (USA) — AI language model for the chat assistant. Your input is not used to train the models.
• Cal.com — Appointment booking. It loads only once you explicitly open the booking window — see the section below.

No analytics or advertising service is currently in use. No payments are processed through this website.

We encourage you to review the privacy policies of the providers named above.

Appointment booking via Cal.com

On our offer pages you can book a free initial call. The booking window is provided by Cal.com and loads only when you click the "Book a call" button. If you merely visit the page without clicking, no connection to Cal.com is made.

Opening the booking window transmits your IP address to Cal.com; for technical reasons Cal.com also receives information about your browser and operating system. If you book an appointment, Cal.com additionally processes the details you enter: name, email address, time zone and your message.

The legal basis is Art. 6(1)(b) GDPR — the processing serves pre-contractual measures taken at your request. The provider’s privacy policy is available at cal.com/privacy.

[TO BE COMPLETED: the exact legal entity and address of the provider and, where data is processed outside the EU, the basis for that transfer — both from the contract or data processing agreement with Cal.com.]

5. AI Chat Assistant and Contact Form

flowprimo.com offers an AI-powered chat assistant and a contact form. This section describes the data processed when you use them.

5.1 AI Chat Assistant

The chat is labeled as an AI assistant. When you use it, we process your chat messages and the conversation history, a randomly generated session identifier, and, briefly, your IP address to protect against abuse. Your messages are sent to an AI language model to generate the responses (see section 5.3). Please do not enter sensitive data in the chat.

The purposes of this processing are answering your questions, initiating a potential collaboration, improving our offering by reviewing conversations, and protecting against automated abuse.

The legal bases are Art. 6(1)(b) GDPR (pre-contractual steps taken at your request) and Art. 6(1)(f) GDPR (our legitimate interest in answering inquiries, improving our offering, and preventing abuse).

Retention: chat conversations are deleted no later than 30 days after the last message. If you submit an inquiry through the chat, section 5.2 applies to that inquiry. In your browser, the history is kept locally only for the duration of your browser session (sessionStorage, no cookies).

5.2 Contact Form and Inquiries via Chat

When you send us an inquiry through the contact form or the chat, we process the details you provide (name, email address, and optionally company, website, company size, and timeframe), your message, and, for inquiries from the chat, a summary or transcript of the conversation.

The legal basis is your consent (Art. 6(1)(a) GDPR), which you give via a checkbox before submitting. You may withdraw your consent at any time with effect for the future, for example by emailing [email protected]. We store inquiries until they are resolved or you withdraw your consent, unless statutory retention obligations require otherwise.

5.3 Service Providers

We use the following service providers as processors for the chat and contact form:

• Vercel Inc. (USA) — website hosting, provision of the chat (AI Gateway), and protection against automated access (bot detection, provided with Kasada). This involves processing technical characteristics of your browser and your IP address.
• Anthropic PBC (USA) — AI language model used to generate the chat responses. Your messages are not used to train the AI models.
• Sanity AS (Norway) — storage of inquiries and chat conversations.

Where data is transferred to the United States in this context, we rely on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses (see also the "International Data Transfers" section).

6. Data Sharing and Disclosure

We may share your personal information in the following circumstances:

• Service Providers: With trusted third-party vendors who assist us in operating our Services, conducting our business, or servicing you, so long as those parties agree to keep this information confidential.
• Legal Requirements: When we believe in good faith that disclosure is necessary to comply with applicable law, regulation, legal process, or governmental request.
• Protection of Rights: To enforce our Terms of Service, protect the security or integrity of our Services, and protect the rights, property, or safety of FlowPrimo, our users, or others.
• Business Transfers: In connection with a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred as a business asset.
• With Your Consent: We may share your information for any other purpose disclosed to you at the time we collect the information, or with your express consent.

We do not sell your personal information to third parties for their marketing purposes.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Services. We will also retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

When your personal information is no longer necessary for the purposes for which it was collected, we will delete or anonymize it. If deletion is not possible (for example, because your information has been stored in backup archives), we will securely store your information and isolate it from any further processing until deletion is possible.

8. Data Security

We implement appropriate technical and organizational security measures designed to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security assessments and vulnerability testing
• Access controls and authentication mechanisms
• Secure software development practices
• Employee training on data protection and security

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

9. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: You can request a copy of the personal information we hold about you.
• Correction: You can request that we correct inaccurate or incomplete personal information.
• Deletion: You can request that we delete your personal information, subject to certain exceptions.
• Portability: You can request a machine-readable copy of your personal information.
• Opt-Out: You can opt out of receiving promotional communications by following the unsubscribe link in any marketing email or by contacting us directly.
• Withdraw Consent: Where we rely on your consent to process personal information, you may withdraw your consent at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with additional rights regarding your personal information.

10.1 Right to Know

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information is collected, the business or commercial purpose for collecting the information, and the categories of third parties with whom we share the information.

10.2 Right to Delete

You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions provided by law.

10.3 Right to Correct

You have the right to request that we correct inaccurate personal information that we maintain about you.

10.4 Right to Opt-Out of Sale or Sharing

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising purposes. If this practice changes in the future, we will update this policy and provide you with an opt-out mechanism.

10.5 Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, or provide a different level or quality of goods or services for exercising your rights.

10.6 How to Exercise Your California Rights

To exercise your rights under the CCPA/CPRA, you may submit a verifiable consumer request by emailing us at [email protected]. You may also designate an authorized agent to make a request on your behalf. We may require verification of your identity before processing your request.

11. Children's Privacy (COPPA Compliance)

Our Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13 years of age. If we learn that we have collected personal information from a child under 13 without verification of parental consent, we will take steps to delete that information as quickly as possible.

If you are a parent or guardian and you believe your child under 13 has provided us with personal information, please contact us at [email protected] so that we can take appropriate action.

For users between the ages of 13 and 18, we recommend that a parent or guardian review this Privacy Policy with them and supervise their use of our Services.

12. International Data Transfers

FlowPrimo LLC is based in the United States. If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and our central database is operated.

By using our Services, you consent to the transfer of your information to the United States and acknowledge that the data protection laws in the United States may differ from those in your country of residence.

13. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you visit that you do not want to have your online activity tracked. Our Services currently do not respond to DNT signals. However, you can manage your tracking preferences through our cookie settings and by adjusting your browser settings.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Effective Date" at the top of this Privacy Policy and, where appropriate, through a notice on our website or via email.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

FlowPrimo LLC

Email: [email protected]

Website: flowprimo.com

We will make every effort to respond to your inquiry within a reasonable timeframe.