Do Not Sell or Share My Personal Information

1. Purpose and Scope

This Do Not Sell or Share My Personal Information Notice ("Notice") explains how FLOWTASK LLP ("FlowTask," "we," "our," or "us") collects, uses, discloses, and processes personal information in accordance with applicable United States privacy laws, including the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act, and other applicable state privacy laws that provide similar consumer rights.

This Notice applies solely to individuals who are entitled to the rights provided under applicable United States privacy laws and whose personal information is collected through our websites, applications, products, services, or any other platform that links to or references this Notice (collectively, the "Services").

The purpose of this Notice is to provide clear and transparent information regarding our data handling practices, including whether FlowTask sells or shares personal information, the categories of personal information we collect, the purposes for which personal information is processed, the categories of third parties with whom information may be disclosed, and the rights available to eligible individuals under applicable law.

As of the Last Updated date of this Notice, FlowTask does not sell personal information for monetary or other valuable consideration. FlowTask also does not knowingly share personal information for cross context behavioral advertising or targeted advertising in a manner that would require an opt out under applicable United States privacy laws. Where personal information is disclosed to service providers, contractors, or other authorized third parties, such disclosures are made solely for legitimate business purposes, the performance of our contractual obligations, compliance with applicable law, security, fraud prevention, or the operation and improvement of the Services.

This Notice supplements, and should be read together with, our Privacy Policy, Terms of Service, Cookie Policy, AI Transparency Disclosure, and any other privacy related notices published by FlowTask. In the event of any inconsistency between this Notice and applicable law, the applicable law shall govern to the extent of such inconsistency.

Nothing contained in this Notice shall be interpreted as creating contractual rights beyond those provided by applicable law or limiting any rights, obligations, or remedies available to FlowTask under applicable law, our Terms of Service, or any agreement entered into between FlowTask and its customers or users.

2. Definitions

For purposes of this Notice, the following definitions shall apply. Capitalized terms used but not otherwise defined in this Notice shall have the meanings assigned to them in our Privacy Policy or Terms of Service.

"Personal Information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household, as defined under applicable United States privacy laws. Personal Information does not include publicly available information, deidentified information, or aggregated information that cannot reasonably be used to identify an individual.

"Sensitive Personal Information" means personal information that receives additional protection under applicable law, including information such as account credentials, financial account information, payment card information, authentication information, precise geolocation data, or other categories of information designated as sensitive by applicable law.

"Sell," "Sale," or "Sold" means the disclosure, transfer, release, dissemination, making available, or other communication of Personal Information to a third party for monetary or other valuable consideration, where such disclosure constitutes a sale under applicable United States privacy laws.

"Share," "Shared," or "Sharing" means the disclosure of Personal Information to a third party for purposes of cross context behavioral advertising or targeted advertising, where such disclosure is considered sharing under applicable law.

"Service Provider" means a person or entity that processes Personal Information on behalf of FlowTask pursuant to a written agreement and solely for the business purposes specified by FlowTask, without using the information for its own independent commercial purposes except as otherwise permitted by law.

"Contractor" means a third party engaged by FlowTask to provide services pursuant to a written agreement that restricts the use, retention, and disclosure of Personal Information in accordance with applicable law.

"Third Party" means any person or organization that is not FlowTask, a Service Provider, or a Contractor acting on behalf of FlowTask.

"Business Purpose" means the use of Personal Information for legitimate operational purposes reasonably necessary to provide, maintain, secure, improve, support, or administer the Services, comply with legal obligations, prevent fraud, investigate security incidents, process transactions, provide customer support, perform analytics, develop product features, or carry out other activities permitted by applicable law.

"Consumer" means an individual who is entitled to the rights provided under applicable United States privacy laws.

"Applicable Privacy Laws" means the California Consumer Privacy Act, as amended by the California Privacy Rights Act, together with any other United States federal, state, or local privacy laws that apply to FlowTask's collection, processing, disclosure, retention, or use of Personal Information.

These definitions are provided solely for the interpretation of this Notice. Where applicable law provides a different or more specific definition for any term used herein, the definition established by applicable law shall control to the extent required by law.

3. Our Commitment

FlowTask is committed to respecting the privacy rights of its users and processing Personal Information in a lawful, transparent, and responsible manner. We recognize that privacy is a fundamental component of the trust placed in us by our users, customers, and business partners, and we are committed to maintaining appropriate standards for the protection of Personal Information.

As of the Last Updated date of this Notice, FlowTask does not sell Personal Information to third parties for monetary or other valuable consideration. We also do not knowingly share Personal Information with third parties for cross context behavioral advertising or targeted advertising in a manner that would require an opt out under applicable United States privacy laws.

FlowTask does not permit third parties to purchase, license, rent, or otherwise acquire Personal Information collected through the Services for their own independent marketing, advertising, profiling, or commercial purposes.

Where Personal Information is disclosed to Service Providers, Contractors, or other authorized third parties, such disclosures are made solely for legitimate business purposes, including the operation, maintenance, security, improvement, and delivery of the Services, payment processing, customer support, fraud prevention, legal compliance, analytics, infrastructure management, artificial intelligence features requested by users, and other operational purposes permitted under applicable law.

Any disclosure of Personal Information to a Service Provider or Contractor is subject to contractual obligations that require the recipient to process Personal Information only for the purposes specified by FlowTask, implement appropriate security measures, maintain the confidentiality of Personal Information, and comply with applicable legal obligations.

FlowTask does not knowingly disclose Personal Information to data brokers or other organizations whose primary business involves the commercial acquisition, sale, licensing, or resale of Personal Information.

Nothing in this Notice shall be interpreted as restricting FlowTask from disclosing Personal Information where such disclosure is required to comply with applicable law, court orders, regulatory requirements, lawful governmental requests, contractual obligations, or to protect the rights, property, security, or legitimate interests of FlowTask, its users, or other persons, as permitted by applicable law.

FlowTask continually reviews its privacy practices to ensure that its collection, use, disclosure, retention, and protection of Personal Information remain consistent with applicable legal requirements and evolving industry standards. Should our practices regarding the sale or sharing of Personal Information materially change in the future, we will update this Notice and provide any disclosures, notices, or consumer rights required by applicable law before implementing such changes.

4. Categories of Personal Information We Collect

The categories of Personal Information that FlowTask collects depend upon the manner in which an individual interacts with the Services, the features utilized, the integrations authorized, and the information voluntarily provided by the user. FlowTask does not collect more Personal Information than is reasonably necessary to provide, secure, maintain, and improve the Services or as otherwise permitted by applicable law.

The categories of Personal Information that may be collected include, but are not limited to:

• Identifiers, including name, username, email address, telephone number, account identifier, organization name, Internet Protocol (IP) address, device identifiers, and other similar identifiers.
• Account Information, including login credentials, authentication information, profile information, account preferences, subscription details, billing information, and account settings.
• Commercial Information, including subscription plans, transaction history, invoices, payment status, purchase records, and records relating to products or services obtained through the Services. Payment card information is processed by authorized payment service providers and is not stored by FlowTask except as necessary to complete or verify a transaction.
• Internet or Electronic Network Activity Information, including browser type, operating system, device information, application usage, interaction history, diagnostic information, crash reports, pages visited, session information, referral URLs, and other technical information relating to the use of the Services.
• Communications and Workspace Content, including information voluntarily submitted by users through workspaces, documents, comments, tasks, files, messages, notes, communications, prompts, AI interactions, and information received through integrations that have been expressly authorized by the user or the applicable workspace administrator.
• Integration Data, including information received from connected third party services such as email providers, messaging platforms, calendars, productivity applications, or other integrations that a user elects to connect to the Services. Such information is processed only to the extent necessary to provide the requested functionality.
• Customer Support Information, including communications with our support team, feedback, reports, troubleshooting information, support requests, and other information voluntarily submitted during customer service interactions.
• Security Information, including authentication logs, security events, audit logs, fraud prevention information, device verification information, login history, and information necessary to detect, investigate, or prevent unauthorized access, misuse, or other security incidents.
• Sensitive Personal Information, where applicable, may include authentication credentials, account access information, payment related information, or other categories of information afforded additional protection under applicable law. FlowTask processes Sensitive Personal Information only where reasonably necessary to provide the Services, fulfill legal obligations, protect the security of the Services, or for other purposes permitted by applicable law.

FlowTask does not knowingly collect Personal Information that is unnecessary for the operation of the Services, nor does it intentionally collect categories of Personal Information that are prohibited or restricted by applicable law without an appropriate legal basis.

5. Categories of Personal Information We Disclose

FlowTask may disclose Personal Information to Service Providers, Contractors, and other authorized third parties where such disclosure is reasonably necessary to provide, operate, secure, maintain, improve, or support the Services. Such disclosures are made only for legitimate business purposes and are not intended to constitute a sale or sharing of Personal Information under applicable United States privacy laws.

Depending upon the nature of the Services used, FlowTask may disclose the following categories of Personal Information:

• Identifiers, including account identifiers, names, email addresses, IP addresses, and similar identifiers, for authentication, account management, security, and operational purposes.
• Account Information, including subscription information, account preferences, authentication data, and profile information, for account administration and service delivery.
• Commercial Information, including payment status, subscription details, invoices, billing records, and transaction history, to authorized payment processors and billing service providers for the purpose of completing and managing financial transactions.
• Internet or Electronic Network Activity Information, including diagnostic information, browser information, device information, usage logs, crash reports, and technical analytics, for security monitoring, troubleshooting, fraud prevention, service optimization, and performance analysis.
• Communications and Workspace Content, including information submitted by users through the Services or through authorized integrations, where necessary to provide requested features, process user instructions, generate AI assisted functionality, synchronize connected services, or facilitate collaboration within an authorized workspace.
• Customer Support Information, including communications with our support team, technical support requests, reported issues, and related correspondence, for the purpose of investigating, resolving, and responding to customer inquiries.
• Security Information, including authentication records, audit logs, security events, access history, device verification records, and other information necessary to detect, investigate, prevent, or respond to fraud, abuse, unauthorized access, or other security incidents.

FlowTask discloses Personal Information only to categories of recipients that have a legitimate need to receive such information in connection with providing or supporting the Services. These recipients may include infrastructure providers, cloud hosting providers, payment processors, authentication providers, communication service providers, artificial intelligence service providers, analytics providers, customer support providers, legal advisors, auditors, regulatory authorities, law enforcement agencies where legally required, and other service providers acting on behalf of FlowTask pursuant to written agreements.

FlowTask requires its Service Providers and Contractors to process Personal Information only for the purposes specified by FlowTask, maintain appropriate administrative, technical, and organizational safeguards, preserve the confidentiality of Personal Information, and comply with applicable contractual and legal obligations.

6. No Sale or Sharing of Personal Information

As of the Last Updated date of this Notice, FlowTask does not sell Personal Information for monetary or other valuable consideration. We also do not knowingly share Personal Information with third parties for cross context behavioral advertising, targeted advertising, or any other purpose that would constitute a sale or sharing under applicable United States privacy laws.

FlowTask does not permit advertisers, marketing networks, data brokers, or other third parties to purchase, license, rent, or otherwise obtain Personal Information collected through the Services for their own independent commercial purposes.

The disclosure of Personal Information to Service Providers, Contractors, and other authorized third parties solely for the purpose of operating, maintaining, securing, improving, supporting, or delivering the Services does not constitute a sale or sharing of Personal Information under this Notice. Such disclosures are made only where reasonably necessary to fulfill legitimate business purposes and are subject to contractual obligations requiring the recipient to process Personal Information only on behalf of FlowTask and in accordance with applicable law.

If FlowTask's business practices regarding the sale or sharing of Personal Information materially change in the future, we will update this Notice before implementing such changes and, where required by applicable law, provide affected individuals with any notices, rights, or mechanisms required to exercise their choices under applicable United States privacy laws.

7. Business Purposes for Collect ing and Disclosing Personal Information

FlowTask collects, uses, retains, and discloses Personal Information solely for legitimate business purposes that are reasonably necessary to operate, maintain, improve, secure, and support the Services, fulfill our contractual obligations, comply with applicable law, and protect the rights, property, and security of FlowTask, our users, and other parties.

Depending upon the nature of the Services used and the user's interactions with the platform, Personal Information may be collected, processed, or disclosed for one or more of the following business purposes:

• To create, administer, verify, and maintain user accounts.
• To authenticate users, manage account access, and maintain the security and integrity of the Services.
• To provide, operate, deliver, and improve the products, services, features, integrations, and functionality requested by users.
• To process subscription purchases, invoices, billing activities, refunds, and other payment related transactions.
• To provide customer service, respond to inquiries, investigate reported issues, and resolve technical support requests.
• To monitor, detect, investigate, prevent, and respond to fraud, abuse, unauthorized access, malicious activity, security incidents, or violations of our Terms of Service and other applicable policies.
• To maintain system availability, diagnose technical issues, perform maintenance, monitor infrastructure performance, and improve the reliability and stability of the Services.
• To process information submitted through authorized integrations, including third party communication platforms, productivity applications, and connected business services, solely for the purpose of providing requested functionality.
• To provide artificial intelligence features, workflow automation, content analysis, summarization, task generation, and other functionality expressly requested or initiated by users through the Services.
• To perform internal analytics, service measurement, product development, testing, quality assurance, feature evaluation, debugging, capacity planning, and performance optimization using information processed in accordance with applicable law.
• To comply with legal obligations, regulatory requirements, court orders, lawful governmental requests, accounting requirements, tax obligations, and other applicable legal processes.
• To establish, exercise, or defend legal claims, protect our contractual rights, investigate disputes, or enforce our legal agreements and policies.
• To protect the safety, security, rights, property, systems, employees, contractors, customers, business partners, and users of FlowTask where reasonably necessary and permitted by law.
• To communicate with users regarding their accounts, subscriptions, product updates, security notifications, policy changes, service announcements, support communications, or other operational matters necessary for the administration of the Services.
• To develop new products, features, integrations, security controls, and improvements based upon user feedback, usage patterns, operational requirements, and lawful business needs.

8. Consumer Privacy Rights

Subject to applicable United States privacy laws and any applicable exemptions or limitations, eligible consumers may have certain rights regarding their Personal Information. The availability and scope of these rights may vary depending upon the consumer's state of residence, the nature of the Personal Information processed, and the legal requirements applicable to FlowTask.

• Where required by applicable law, eligible consumers may have the right to request confirmation as to whether FlowTask processes their Personal Information.
• Eligible consumers may have the right to request access to the categories and specific pieces of Personal Information that FlowTask has collected about them, subject to applicable legal limitations and verification requirements.
• Consumers may have the right to request that inaccurate Personal Information maintained by FlowTask be corrected where such information is incomplete, inaccurate, or outdated, subject to reasonable verification and applicable legal requirements.
• Consumers may have the right to request the deletion of Personal Information collected from or about them, subject to exceptions permitted by applicable law.
• Where applicable law provides such rights, consumers may request a copy of their Personal Information in a portable and readily usable format, to the extent technically feasible and required by law.
• Where applicable, consumers may have the right to limit the use or disclosure of Sensitive Personal Information if such processing exceeds the purposes authorized by applicable law.

The exercise of any privacy right is subject to reasonable identity verification procedures designed to protect Personal Information from unauthorized disclosure, alteration, or deletion. FlowTask may request additional information reasonably necessary to verify the identity or authority of the individual submitting a request before taking action on such request.

9. How to Exercise Your Privacy Rights

Where permitted by applicable United States privacy laws, eligible consumers may submit requests to exercise their privacy rights by contacting FlowTask through the methods identified in this Notice.

Consumers may submit a request by:

• Contacting us through the contact methods identified at the end of this Notice.
• Submitting a request through any privacy request mechanism that FlowTask may make available through the Services.
• Providing any additional information reasonably requested by FlowTask for the purpose of verifying the request.

FlowTask will acknowledge, review, and respond to privacy requests within the time periods required by applicable law. FlowTask may decline to delete or modify Personal Information where retention is reasonably necessary to complete a transaction, provide an ongoing service, maintain security, detect or prevent fraud, exercise or defend legal claims, or comply with applicable laws.

10. Verification of Consumer Requests

To protect Personal Information from unauthorized access, disclosure, alteration, or deletion, FlowTask may be required to verify the identity of an individual before fulfilling a privacy request. The verification process will depend on the nature and sensitivity of the request and the type of Personal Information involved.

Information provided solely for the purpose of verifying a privacy request will be used only to evaluate, process, and document that request, to prevent fraud or unauthorized access, and for other purposes permitted or required by applicable law.

FlowTask will not require an individual to create a new account solely for the purpose of submitting a privacy request where applicable law prohibits such a requirement.

If FlowTask cannot reasonably verify the identity or authority of the person submitting a request, we may decline to fulfill the request to the extent permitted by applicable law.

11. Authorized Agents

An individual may, where permitted by applicable law, authorize another person or entity to submit a privacy request on their behalf. If a request is submitted by an authorized agent, FlowTask may require the agent to provide reasonable evidence of the consumer's authorization before processing the request. Such evidence may include a written authorization, power of attorney, or other documentation reasonably sufficient to establish that the agent has been authorized to act on behalf of the consumer.

FlowTask may also require the consumer to independently verify their identity or confirm the authorization provided to the agent. FlowTask may decline to process an agent submitted request where the agent cannot reasonably establish their authority, where the consumer's identity cannot be verified, or where the request is otherwise subject to an applicable legal exception.

12. Non-Discrimination

FlowTask will not discriminate against an individual for exercising a privacy right available under applicable United States privacy laws. To the extent required by applicable law, FlowTask will not deny goods or services, charge different prices or rates, provide a different level or quality of goods or services, or otherwise penalize an individual solely because the individual exercised a privacy right.

FlowTask may, however, be unable to provide certain features where the information necessary to provide those features has been lawfully deleted or where the individual has withdrawn an authorization required for a particular integration or service. Such limitations will not be imposed as retaliation for exercising a privacy right.

13. Data Retention and Deletion

FlowTask retains Personal Information only for as long as reasonably necessary to provide the Services, maintain an individual's account, fulfill the purposes described in our Privacy Policy, comply with applicable legal and contractual obligations, resolve disputes, enforce agreements, maintain security, prevent fraud, and protect the rights and interests of FlowTask and others.

When Personal Information is no longer reasonably required for an applicable business or legal purpose, FlowTask will take reasonable steps to delete, anonymize, or otherwise securely dispose of the information in accordance with applicable law and our internal retention practices.

Deletion of an account or submission of a valid deletion request does not necessarily result in the immediate deletion of every copy of Personal Information. FlowTask may retain certain information where necessary or permitted by applicable law.

14. International Data Transfers

FlowTask is operated from India and may use infrastructure, technology providers, and Service Providers located in other countries. As a result, Personal Information may be transferred to, stored in, or processed in jurisdictions outside the country or state in which the individual resides. The countries in which Personal Information may be processed may include India, the United States, the Netherlands, France, Singapore, and other jurisdictions in which FlowTask or its Service Providers maintain infrastructure or operations.

Where Personal Information is transferred across jurisdictions, FlowTask will take reasonable measures to ensure that such transfers are conducted in accordance with applicable data protection and privacy laws.

15. Sensitive Personal Information

FlowTask recognizes that certain categories of Personal Information may receive additional protection under applicable United States privacy laws. FlowTask processes Sensitive Personal Information only where reasonably necessary to provide the Services, maintain account security, process transactions, prevent fraud, comply with legal obligations, protect the Services and users, or for another purpose permitted by applicable law.

FlowTask does not use Sensitive Personal Information for purposes of inferring characteristics about an individual where such use is prohibited by applicable law. Payment card information and other payment credentials are processed through authorized payment service providers. FlowTask does not intentionally retain complete payment card numbers or security codes where such information is handled directly by the applicable payment provider.

16. Third Party Service Providers and Subprocessors

FlowTask relies on third party service providers and technology providers to operate, maintain, secure, and deliver certain components of the Services. These providers may process Personal Information on behalf of FlowTask where such processing is reasonably necessary to perform the services for which they have been engaged.

The categories of Service Providers that may process Personal Information include:

• Cloud infrastructure and hosting providers that provide computing, databases, storage, networking, and application infrastructure.
• Authentication and identity providers that support account registration, login, authentication, authorization, and account security.
• Payment and billing providers that process payments, subscriptions, invoices, refunds, and related financial transactions.
• Email and communication providers that deliver transactional emails, account notifications, security communications, and other service related communications.
• Artificial intelligence service providers that process information submitted to AI enabled features for the purpose of generating requested outputs, performing analysis, summarization, classification, or other AI functionality.
• Analytics and diagnostics providers that help FlowTask understand service performance, identify technical problems, detect errors, and improve the usability and reliability of the Services.
• Security and fraud prevention providers that assist with protecting the Services, detecting suspicious activity, preventing unauthorized access, and investigating security incidents.
• Professional advisors including legal counsel, auditors, accountants, insurers, consultants, and other advisors where access to Personal Information is reasonably necessary to provide their services to FlowTask.
• Government authorities, courts, regulators, law enforcement agencies, or other legally authorized recipients where disclosure is required or permitted by applicable law.

FlowTask does not authorize its Service Providers to sell Personal Information or use Personal Information received from FlowTask for independent advertising, marketing, profiling, or other commercial purposes that are inconsistent with the purposes for which FlowTask engaged the provider.

17. Advertising, Analytics, and Tracking Technologies

FlowTask may use cookies, pixels, analytics technologies, logging mechanisms, and similar technologies to operate the Services, maintain security, understand how the Services are used, diagnose technical issues, measure performance, and improve the user experience. FlowTask does not knowingly provide Personal Information to advertising networks or other third parties for cross context behavioral advertising or targeted advertising in a manner that constitutes "sharing" under applicable United States privacy laws.

Additional information regarding FlowTask's use of cookies and similar technologies is provided in our Cookie Policy.

18. Artificial Intelligence and Personal Information

FlowTask uses artificial intelligence technologies to provide certain features within the Services, including content analysis, summarization, task identification, natural language processing, contextual assistance, workflow automation, and other functionality requested or initiated by users.

FlowTask does not use customer content submitted through the Services to train proprietary artificial intelligence models. Where third party AI providers process information on behalf of FlowTask, their processing is subject to the applicable contractual arrangements, privacy commitments, and legal requirements governing the relevant service.

AI generated outputs are produced using probabilistic technologies and may contain inaccurate, incomplete, outdated, or inappropriate information. Users are responsible for reviewing AI generated content before relying upon it for business, legal, financial, employment, compliance, or other significant decisions.

Additional information concerning FlowTask's use of artificial intelligence is provided in our AI Transparency Disclosure.

19. Business Transfers and Corporate Transactions

FlowTask may disclose or transfer Personal Information in connection with an actual or proposed merger, acquisition, financing, reorganization, restructuring, sale of assets, sale of all or part of the business, bankruptcy, insolvency, dissolution, or other similar corporate transaction. Where required by applicable law, FlowTask will provide notice to affected individuals regarding a material change in the ownership or control of their Personal Information.

20. Children's Privacy

FlowTask's Services are intended for business and general adult use. FlowTask does not knowingly collect, solicit, or intentionally process Personal Information from children where such collection or processing is prohibited by applicable law. Parents, legal guardians, or other individuals who believe that a child has provided Personal Information to FlowTask in violation of applicable law may contact us at [email protected].

21. Security and Protection of Personal Information

FlowTask maintains reasonable administrative, technical, and organizational measures designed to protect Personal Information against unauthorized access, acquisition, disclosure, alteration, destruction, loss, misuse, or other forms of unlawful processing. Access to Personal Information within FlowTask is limited to personnel, contractors, and service providers who have a legitimate business need to access such information and who are subject to appropriate confidentiality and security obligations.

No method of transmitting information over the Internet or storing information electronically can be guaranteed to be completely secure. Users are responsible for maintaining the confidentiality of their account credentials and for notifying FlowTask promptly if they suspect unauthorized access to their account or connected integrations.

22. Changes to This Notice

FlowTask may update this Do Not Sell or Share My Personal Information Notice from time to time to reflect changes in our business practices, Services, technology, third party service providers, applicable privacy laws, regulatory requirements, or the manner in which Personal Information is collected, used, disclosed, retained, or otherwise processed.

When changes are made, FlowTask will update the "Last Updated" date appearing at the beginning of this Notice. Users are encouraged to review this Notice periodically to remain informed about how FlowTask handles Personal Information and about the privacy rights available to them.

23. Contact Information and Privacy Requests

If you have questions regarding this Notice, believe that FlowTask has not handled your Personal Information in accordance with applicable privacy laws, or wish to exercise a privacy right available to you, you may contact FlowTask using the information below.

FLOWTASK LLP
Email: [email protected]
Website: https://flowtask.work

You may also submit privacy requests directly via our online form at https://flowtask.work/privacy-privacy.

FlowTask will acknowledge receipt of your privacy request within 10 business days and provide a substantive response within 45 calendar days, or as otherwise required by applicable law.

24. Governing Law and Legal Compliance

This Notice shall be interpreted and applied in accordance with the privacy and data protection laws applicable to FlowTask and to the individual whose Personal Information is being processed. FlowTask is committed to complying with applicable privacy and data protection requirements governing the collection, use, disclosure, retention, security, and deletion of Personal Information.

Where a conflict exists between this Notice and a mandatory requirement of applicable law, the mandatory legal requirement shall prevail to the extent of the conflict.

25. Entire Notice and Severability

This Notice forms part of FlowTask's broader privacy and data protection framework and should be read together with the FlowTask Privacy Policy, Terms of Service, Cookie Policy, AI Transparency Disclosure, Subprocessor information, and any other applicable privacy notices or contractual terms.

If any provision of this Notice is determined to be invalid, unlawful, or unenforceable under applicable law, that provision shall be interpreted or limited to the minimum extent necessary to make it valid and enforceable. If the provision cannot reasonably be interpreted or limited in that manner, it shall be severed from this Notice without affecting the validity or enforceability of the remaining provisions.

26. California Privacy Rights

This section applies to California residents to the extent that the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act, or any regulations issued under those laws, applies to FlowTask's processing of Personal Information.

California residents may have rights to know what categories of Personal Information FlowTask collects, the specific pieces of Personal Information collected, the purposes for which such information is collected or used, the categories of sources from which such information is obtained, and the categories of third parties to whom such information is disclosed.

California residents may also have the right to request correction of inaccurate Personal Information and, subject to applicable exceptions, request deletion of Personal Information collected from them.

As described in this Notice, FlowTask does not sell Personal Information for monetary or other valuable consideration and does not knowingly share Personal Information for cross context behavioral advertising in a manner that constitutes "sharing" under the CCPA.

FlowTask does not knowingly discriminate against California residents for exercising rights provided under the CCPA. California residents may designate an authorized agent to submit a privacy request on their behalf, subject to the verification and authorization requirements described in this Notice.

California residents may submit privacy requests by contacting FlowTask at [email protected]. FlowTask will respond to verified requests within the time period required by applicable California law.