FLASH

Legal

Privacy Policy

This policy describes the personal data handled by the current Flash website and demo-request workflow.

Last updated: 25 August 2026. This draft is excluded from search indexing until the operating entity, retention schedule, transfer safeguards, and final legal basis have been approved.

Who is responsible

Flash operates this website while the final legal entity details are being approved for publication. Privacy enquiries can be sent to contact@flashagent.dev.

Data we process

When you request a demo, we process the details you enter: name, email address, company, optional role and engineering-team size, use case, target hardware, referral source, and any project information you choose to add.

The website and API also process limited technical information needed to deliver and secure the service, such as request timestamps and network addresses in transient infrastructure logs. For demo-form rate limiting, the application stores keyed, non-reversible identifiers derived from the visitor address and email address; it does not store the raw address in the rate-limit table.

If you sign in, Auth0 handles authentication and Flash receives the account information required to maintain your session. Your identity-provider avatar is loaded only when you allow preference technologies.

How we use the data

  • to review and respond to your demo request;
  • to arrange a technical evaluation related to the project you described;
  • to prevent duplicate, abusive, or automated submissions; and
  • to operate and secure authenticated areas of the product.

A demo request is not treated as consent to receive unrelated marketing. The current form does not subscribe you to a mailing list.

The final lawful-basis wording is under legal review. Depending on the request and the final operating entity, processing may be necessary to take steps at your request before entering a contract or for the legitimate interest of responding to a business enquiry.

Service providers and transfers

The current deployment uses Vercel to host the website, Fly.io to host the API, Auth0 for authentication, and an SMTP email provider to deliver demo-request notifications to an approved company mailbox.

Provider entities, processing locations, contracts, and any international-transfer safeguards remain subject to final legal review.

Retention

Demo requests are retained only while they are needed to evaluate and respond to the enquiry, then deleted under the approved retention process. The exact retention schedule and the configured operational-log periods for hosting, authentication, and email providers will be published after final review.

Your choices and rights

Subject to the law that applies to you, you may ask to access, correct, delete, restrict, or obtain a copy of your personal data, or object to certain uses. You may also complain to your competent data-protection authority. Send requests to contact@flashagent.dev. We may need to verify your identity before acting on a request.

You can change optional website preferences at any time using “Cookie settings” in the footer. See the Cookie Policy.

Required legal review

  • Legal company name, registration details, and postal address
  • Any appointed data-protection representative
  • the lawful basis that applies to demo-request processing
  • the final retention period for demo requests and server logs
  • the countries and safeguards used by the selected hosting and email providers