Who we are
Flowverly is operated by Harnord Inc, a corporation registered in the Commonwealth of Virginia, United States. Harnord Inc is the data controller for information about our own customers, and a data processor for the conversation data those customers’ callers generate.
That distinction matters. If you called a business and spoke to their Flowverly receptionist, the business you called is the controller of that conversation. We process it on their instructions. Requests about your conversation are best directed to that business, and we will support them in answering you.
What we collect
| Category | What it is | Why |
|---|---|---|
| Call and message content | Transcripts of what was said or texted, and — where recording is enabled and disclosed — the audio. | To answer the caller, book the appointment, and let the business review what happened. |
| Caller contact details | Phone number, and any name, email or address the caller provides. | To identify a returning caller and to complete a booking. |
| Appointment details | Requested service, time, and address of the job. | To place the booking in the business’s calendar. |
| Business account data | Business name, contact details, opening hours, services and pricing, and the details of staff who log in. | To configure the receptionist and to bill the account. |
| Usage and diagnostics | Call duration, timing, model usage, error traces and audit records of privileged actions. | Billing, reliability, and being able to answer “who accessed this, and when”. |
We do not sell personal information, and we do not share it for cross-context behavioural advertising.
Call recording and AI disclosure
Where a business enables recording, the receptionist plays a disclosure at the start of the call stating that the call is being handled by an automated assistant and may be recorded. Our system records whether that disclosure actually played; if it did not play, the recording is not retained.
Consent requirements differ by state, and several require all parties to consent. Businesses using Flowverly are responsible for the disclosure configuration applicable where they and their callers are located. This section in particular should be reviewed by counsel before launch in all-party-consent states.
Who else processes this data
We use a small number of sub-processors. Each is listed because our code actually sends data to it, not because it is a common name to list.
| Sub-processor | What it receives | Purpose |
|---|---|---|
| Twilio | Phone numbers, call audio in transit, message content. | Telephony and messaging carriage. |
| OpenAI | Conversation text needed to generate the next reply. | Understanding the caller and composing a response. |
| Appointment details, for businesses who connect Google Calendar. | Writing the booking into the business’s own calendar. | |
| Amazon Web Services | Encrypted storage and compute for all of the above. | Hosting, encrypted secret storage, backups. |
We require a zero-retention, no-training agreement from every model provider in the conversation path. Conversation content is not used to train anyone’s models, ours included.
How long we keep it
These are the periods our database enforces automatically, not aspirations:
| Data | Retention |
|---|---|
| Conversation transcripts and messages | 24 months |
| Call recordings | Deleted with the transcript, or immediately where the disclosure did not play |
| Usage records used for billing | 7 years |
| Audit records of privileged access | 7 years |
| Business account data | For the life of the account, then deleted on request subject to the periods above |
Businesses on our healthcare tier may be subject to stricter handling and different retention. Billing and audit records are kept for the full period above even after an account closes, because we are required to be able to account for what was charged and who accessed what.
Text messages and opting out
If you receive a text from a business using Flowverly, reply STOP to stop receiving them, or HELP for contact details. A STOP is recorded before we confirm it, so the business cannot message you again once you have opted out. Message and data rates may apply.
Security
Every business’s data is isolated at the database level, enforced by the database itself rather than by application code alone. Credentials and tax identifiers are held in a dedicated secret store, never in our application database. Access to a business identifier is recorded with the reason it was accessed, before the value is released.
Conversation content is excluded from our logs and diagnostics by default. No system is perfectly secure, and we do not claim otherwise.
Your rights
Depending on where you live, you may have the right to access, correct, delete or port your personal information, and to object to certain processing. If you are a caller, contact the business you called; if they route the request to us, we will act on it. If you are a Flowverly customer, contact us directly.
We do not discriminate against anyone for exercising these rights. Some data — billing and audit records in particular — must be retained for the periods listed above even after a deletion request.
Children
Flowverly is a tool for businesses and is not directed at children. We do not knowingly collect information from anyone under 13.
Changes and contact
If we make a material change we will update the date at the top of this page and notify account holders. Questions, requests, or anything that looks wrong:
privacy@flowverly.com
Harnord Inc, Virginia, United States