FlowSharp privacy notice

The controller for website processing and its own business relationships is BizCom.IT S.r.l., registered office Via Palombarino 8, Osimo (AN), Italy, VAT number 02621920426, REA AN202301. Its operating office is Via Primo Maggio 20, 60131 Ancona (AN).

For information or requests about your data: privacy@bizcom.it. General enquiries: info@bizcom.it; administration and contracts: amministrazione@bizcom.it. Certified email (PEC): BIZCOMITSRL@PEC.IT; phone: 0712861468.

BizCom.IT is controller for its website browsing, enquiries, demos, newsletter, business and administrative relationships and management of its own activations and licences. Access, support and case content do not automatically share the same privacy role: the relevant question is who determines each processing activity's purposes and means.

For data entered in customer processes, the customer determines purposes and legal bases. Where BizCom.IT processes it on the customer's behalf, it acts as processor under the instructions and applicable agreement pursuant to Article 28 GDPR. This notice replaces neither that DPA nor the customer's notice and does not declare an agreement already signed.

For on-premise installations, any support access, connections to external services and online licensing are separate matters. Local installation does not exclude external communications; the product's offline mode does not automatically synchronise the licence.

Demo, services and partner forms collect name, email, company and enquiry content, with other fields used such as sector, process or notes. The newsletter collects email and language. Forms may send language and the originating page without query strings or fragments. The website also processes technical communications and security data such as IP address, requests and browser information.

Data comes from you or from the organisation identifying you as a contact or enabling your access. For clarification about the source or a copy of this notice, contact privacy@bizcom.it.

Depending on enabled features, platform data includes profiles, roles, tenants, assignments, case content, documents, histories, audits and AI-feature data. The AI log may include user or process references, model, timing, usage and outcome and, if full logging is enabled, requests and responses. Do not enter passwords, credentials, health data or other unrequested special-category data in public forms.

The table concerns processing by BizCom.IT as controller, not legal bases for customer processes. Rows distinguish the individual contracting party from a contact acting for an organisation.

Retention criteria are not universal numerical deadlines. Cookie lifespans concern browser identifiers, not all copies or data already transmitted to providers.

Required fields are marked in each form and identify the contact and handle the enquiry in its business context. Other fields are optional. Avoid unnecessary personal content in free-text fields.

Submitting a demo or contact enquiry does not subscribe you to the newsletter. Subscription takes place in its dedicated form and is optional: subscribing expresses consent to the newsletter, not website trackers. General processing consent is not required to answer an enquiry.

You can withdraw newsletter consent by writing to privacy@bizcom.it. Newsletter withdrawal is separate from cookie preferences and does not require disabling browsing analytics.

The website uses cookies and similar technologies, including local storage. Strictly necessary preferences remember choices. Browsing analytics and optional support are separate purposes: both are disabled before a valid choice. You can refuse, accept all or save only selected purposes without preventing browsing or form submission.

Preferences remain accessible in the footer and via the permanent link on this page. The local choice contains purposes, timestamp, choice version and notice version, without an additional visitor identifier. It has no automatic expiry. Earlier combined acceptance is not automatically converted into the new separate consent.

Withdrawal prevents subsequent loading for the disabled purpose. If its script is already active, the website reloads the document to stop it: unsubmitted form fields may be lost. The website attempts to remove identified PageSense cookies and local data it can manage on its own domain; it cannot directly delete third-party cookies, cookies inaccessible to code or data already sent to providers. An identifier remaining in the browser does not authorise continued use.

PageSense loads from cdn-eu.pagesense.io to analyse pages and interactions. Boei loads from app.boei.help for the contact and support widget. Loading Boei does not prove a chat or AI assistant is enabled: platform-feature terms are not automatically those of the website widget.

The inventory distinguishes browser observations from service settings. Observed PageSense requests do not establish which heatmaps, recordings, form analytics or tests are enabled, or masking and IP handling. Observed lifespans depend on configuration and do not indicate server retention. A script's European domain does not guarantee every processing operation takes place in the EEA.

Requesting a trial licence sends name, email, optional company and language. Online activation sends installation information, version and counts needed to manage the licence.

Online synchronisation may send version, tenant/user/flow counts, tenant references, integrity information and technical counters used to enforce licence terms. The examined licensing payload does not contain case content. Technical references are not automatically anonymous: they may be linked to an organisation or individual. The product's offline mode does not automatically synchronise the licence.

AI features process data made available to the specific feature according to the organisation's permissions and configuration. Depending on the environment, processing may involve external services or local systems. Data transmitted and processing conditions depend on the feature and provider used.

The examined features use models for responses, classifications and automations. This description of inference does not guarantee every provider excludes retention or further uses. No universal prohibition on training is asserted: provider terms and BizCom.IT's specific commitments remain distinct.

Technically enabling a feature is not the individual's GDPR consent. The legal basis depends on the processing: customers determine it for their processes and inform affected individuals.

Data Shield applies shielding and pseudonymisation in the paths that provide for it, based on classification and configuration. Pseudonymisation is reversible and does not make all content anonymous. Data Gate checks the availability of data needed to continue the process.

Free text, documents and different channels require specific controls; an additional AI detector may involve another provider. Data Shield does not guarantee that no personal data leaves the system. Enabling a document for agent context is an application control over content availability, not the individual's GDPR consent.

The platform allows AI call logging to be configured. Depending on the selected level, the log can be disabled, contain technical metadata or also include requests and responses. Logged content may contain personal data. Access to the log is restricted to authorised persons and retention follows the applicable configuration.

The call log is distinct from assistant conversations, results saved in cases and external providers' logs. Disabling or deleting one does not automatically delete the others.

The website uses Replit infrastructure, a PostgreSQL database and App Storage. After the relevant consent it loads Zoho PageSense and Boei tools. Authorised personnel and technical, communications, support and advisory providers access data for their respective activities; authorities receive data where required by law.

Forms save enquiries in the website database. Active webhooks configured for the respective events may forward the saved enquiry or subscription to recipients. n8n is an automation technology, not in itself the identity of an instance operator or final recipient. These flows do not publish contacts on the website. For information about recipients of your enquiry, write to privacy@bizcom.it.

Platform integrations with customer systems, APIs, webhooks, MCP and AI providers follow the organisation's scope and instructions and do not automatically coincide with marketing-website providers.

Processing location depends on the actual environment, providers and integrations. It cannot be inferred from a script domain or a provider's European office. An on-premise environment may also communicate with external systems through support, online licensing or integrations.

For information about locations and safeguards applicable to your processing, and to request a copy of safeguards where permitted, email privacy@bizcom.it. Safeguards for transfers outside the EEA may include adequacy decisions or standard contractual clauses and supplementary measures under Chapter V GDPR; this notice does not attest that a specific safeguard has already been verified for every provider or that all data stays in Europe.

Retention of platform cases and logs depends on the environment's settings and the customer controller's instructions. Completed cases may be subject to automatic deletion according to the period configured for the flow. Technical and AI call logs follow distinct rules. Return, deletion and handling of backup copies are governed by applicable agreements.

The absence of an automatic case-deletion period does not mean anonymisation or immediate deletion. Legal holds may suspend certain deletions. Software defaults are not presented as actual SaaS retention periods and do not extend to conversations, documents, backups or external providers. The specific service is governed by applicable configurations and agreements.

The website restricts administration through access controls; API request logs exclude query strings and authorisation/cookie headers. These measures do not establish absence of personal data in every error or infrastructure log. Platform roles, permissions and data controls require appropriate configurations and procedures.

Website forms collect enquiries and subscriptions: the examined code saves data and may forward it to configured systems without performing an automated assessment with legal or similarly significant effects. This does not describe subsequent processing by unexamined external systems. Customer processes may include automations: universal human oversight is not promised, and customers remain responsible for assessing Article 22 GDPR conditions.

No measure eliminates every risk. This page does not attest ISO certifications, automatic GDPR or AI Act compliance, comprehensive encryption, immediate deletion or undocumented and unagreed service levels.

Where and to the extent provided by the GDPR, you may request access, rectification, erasure, restriction and portability, object to processing based on legitimate interests and withdraw consent. You may object to direct marketing at any time. Email privacy@bizcom.it identifying the processing; identity checks must be limited to what is necessary.

If a request concerns cases or data managed by the customer as controller, contact that organisation. If you send it to BizCom.IT, identify the customer and context without excessive data: BizCom.IT distinguishes the request from its own processing and handles it under applicable instructions and agreement, assisting the customer. This notice does not empower BizCom.IT to independently erase all customer data.

The ordinary response period is one month from receipt, extendable by two further months where permitted, with reasons communicated within the first month. You may complain to the Italian authority, Garante per la protezione dei dati personali (www.garanteprivacy.it), or another competent authority and use available judicial remedies.

The opening date and version identify this revision. Changes in purposes requiring new information or consent are not accepted merely by browsing. Service-specific information and applicable agreements supplement this general description.

For a copy of this notice or clarification about sources, recipients, retention and specific processing, write to privacy@bizcom.it. If another organisation supplied your contact details, you can use the same channel for information about their use.