Privacy Policy

Flamel AI, Inc. (“Flamel,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our websites, applications, and related services (collectively, the “Services”).

Flamel AI, Inc. is a Delaware corporation headquartered at:

Flamel AI, Inc.
727 Madison Ave
Covington, KY 41011
United States

By accessing or using the Services, you agree to this Privacy Policy.

Definition of Personal Information

“Personal information” means information that identifies, relates to, describes, or could reasonably be linked, directly or indirectly, to an individual or household.

1) Scope

This Privacy Policy applies to personal information we collect through:

• Our websites (including www.flamel.ai)
• Our web and mobile applications
• Integrations with third-party platforms you connect to Flamel
• Communications with us (support, sales, marketing)

This Privacy Policy does not apply to third-party websites, apps, or services we do not control.

2) Information We Collect

We collect information in the following categories:

• Account and profile information: name, email address, organization/workspace details, login credentials, and related profile metadata
• Contact information: business contact details you provide (for example, phone number, address, or billing contact details)
• Billing and transaction information: subscription status, billing records, invoices, payment status, and related transaction metadata. Payment card details are processed by our payment processors (such as Stripe) and are not stored by Flamel in full card form
• Connected account and integration information: when you connect third-party services (e.g., Google, Meta/Facebook/Instagram, LinkedIn, X/Twitter, TikTok), we may collect account identifiers, OAuth tokens/refresh tokens, scopes/permissions granted, and related connection metadata
• Content and business data: media, posts, comments, analytics inputs, campaign settings, location/business profile data, and other content you create, upload, or sync through the Services
• Usage and technical information: device/browser information, IP address, log data, timestamps, pages/features used, and diagnostic/error information
• Cookies and similar technologies: session cookies and related technologies used for authentication, security, functionality, and analytics

3) How We Use Information

We use information to:

• Provide, operate, maintain, and improve the Services
• Authenticate users, manage accounts, and secure sessions
• Process subscriptions, billing, and payments
• Support integrations and execute actions you request across connected platforms
• Provide customer support and respond to inquiries
• Monitor performance, troubleshoot issues, and prevent abuse/fraud
• Send administrative, transactional, and (where permitted) marketing communications
• Comply with legal obligations and enforce our terms

Role of Flamel

Flamel acts as a data controller for personal information related to account management, billing, and business operations.

Flamel acts as a data processor for content and data that users submit, manage, or process through the Services on behalf of their own customers or audiences.

4) Google User Data Disclosures

If you connect Google services to Flamel, we may access and process Google user data (including account and OAuth metadata, and Google API data you authorize) solely to provide and improve user-facing features of the Services.

Specifically:

• Access: We access Google data only with your authorization via OAuth permissions/scopes
• Use: We use Google data only to provide requested functionality (for example, account connection, configuration, synchronization, reporting, and management features)
• Storage: We may store Google OAuth tokens and related metadata (such as granted scopes and account linkage details) to maintain your connection and enable ongoing authorized API access
• Sharing: We do not sell Google user data. We share Google user data only as described in this Privacy Policy (e.g., service providers acting on our behalf, legal requirements, or with your direction)

Restricted uses:

We do not use Google user data for:

• targeted advertising
• sale to data brokers
• unrelated AI model training

AI statement:

We do not use Google user data or your customer content to train third-party foundation models without your authorization.

We do not use Google user data for generalized AI or machine learning model training.

5) How We Share Information

We may share information in the following circumstances:

• Service providers/processors: with vendors that help us operate the Services (e.g., hosting, storage, payments, security, support tooling, analytics, communications), under contractual obligations
• At your direction: when you connect integrations or instruct us to publish/sync data
• Corporate transactions: in connection with a merger, acquisition, financing, restructuring, or sale of assets
• Legal and safety: to comply with law, regulation, legal process, or to protect rights, safety, and security of Flamel, users, or others
• Business transfers: as part of due diligence or transaction execution

We use third-party service providers (subprocessors) to support the operation of the Services. These providers are contractually obligated to protect personal information and process it only on our behalf.

A current list of subprocessors is available upon request.

We do not sell personal information, including Google user data.

6) Data Retention

We retain personal information for as long as reasonably necessary to:

• provide the Services
• maintain account functionality
• comply with legal, tax, accounting, and contractual obligations
• resolve disputes
• enforce our agreements

Active account data is retained while your account remains active.

When you request deletion, we will delete or de-identify personal information within a reasonable timeframe, except where retention is required or permitted by law (including backups that are retained in the ordinary course).

7) Your Choices and Rights

Depending on your location and applicable law, you may have the following rights:

• Access: request access to the personal information we hold about you
• Correction: request correction of inaccurate or incomplete information
• Deletion: request deletion of your personal information
• Portability: request a copy of your data in a structured, commonly used format
• Objection/Restriction: object to or request restriction of certain processing
• Opt-out: opt out of the sale or sharing of personal information (note: we do not sell personal information)

To exercise your rights, contact us at hello@flamel.ai. We may take reasonable steps to verify your identity before fulfilling requests.

We will respond to requests within the timeframe required by applicable law.

You can also:

• update account information in your account settings (where available)
• unsubscribe from marketing emails via the unsubscribe link

8) Cookies and Similar Technologies

We use cookies and similar technologies for the following purposes:

• Essential cookies: required for authentication, security, and core functionality
• Analytics cookies: help us understand usage and improve the Services
• Functional cookies: remember preferences and settings

You can control cookies through your browser settings. If you disable certain cookies, some features of the Services may not function properly.

9) Data Security

We use commercially reasonable technical, administrative, and organizational safeguards designed to protect personal information, including controls such as encrypted transport (HTTPS/TLS), access controls, and monitoring.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

In the event of a data breach involving personal information, we will notify affected individuals and relevant authorities as required by applicable law.

10) Children's Privacy

Our Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, contact us at hello@flamel.ai, and we will take appropriate steps.

11) U.S.-Focused Privacy Notices

This policy is U.S.-first. Additional jurisdiction-specific notices may be added over time.

California: California residents may have rights under California law (including CCPA/CPRA), subject to applicable exceptions.

We recognize and honor Global Privacy Control (GPC) signals where required by applicable law.

Nevada: Nevada residents may request to opt out of certain covered sales under Nevada law (if applicable) by contacting hello@flamel.ai with subject line “Nevada Privacy Request.”

12) International Data Transfers

Flamel is headquartered in the United States, and information may be processed and stored in the U.S. and other jurisdictions where we or our service providers operate.

Where required by applicable law, we implement appropriate safeguards for international data transfers, such as Standard Contractual Clauses or equivalent legal mechanisms.

By using the Services, you understand that your information may be transferred to jurisdictions with different data protection laws.

13) Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated policy with a new “Last Updated” date and provide additional notice where required.

14) Contact Us

If you have questions or privacy requests, contact:

Flamel AI, Inc.
727 Madison Ave
Covington, KY 41011
United States

Email: hello@flamel.ai