Privacy Policy
This explains what FLYNTO collects, who else sees it, and how to get rid of it. It is written to be read, not to be survived.
The short version. We collect your account details and the deal figures you type in. If you choose Google or Apple sign-in, we receive the account information described below. We never see your card details — Stripe handles payment. To write a paid report, your deal figures and the industry and location you entered are sent to Anthropic’s API. We do not sell your data, we do not advertise, and we do not track you across other websites. Email legal@flynto.net and we will delete everything.
1Who is responsible
Administradora de bienes y servicios del futuro LLC, 234 Geddington, San Antonio, TX 78249, is the controller of the personal information described here. Contact us at legal@flynto.net.
2What we collect
Your account and sign-in information. We collect your email address when you create an account. You can sign in with your email address and password, a one-time code sent to your email, Google, or Apple. Supabase manages authentication, including password hashes, email-code verification and sign-in sessions. Email verification and password recovery also use emailed codes.
Google or Apple sign-in. If you choose either service, we receive a provider account identifier and the email address it supplies through Supabase. Depending on the provider and what it shares, this may also include basic profile information such as your name or profile image. Apple may supply a private relay address if you choose Hide My Email. We use these details to create, recognise and secure your account. We do not receive your Google or Apple password, and we do not request access to your email messages or contacts.
The deal information you enter: business name, industry, location, asking price, revenue, earnings, add-backs, inventory, equipment, and any structure or horizon settings you choose. If you save a deal, this is stored against your account until you delete it.
Purchase records: which deals you bought reports for, when, and how much you paid. Not your card number — see clause 3.
Ordinary technical information: IP address, browser type and request logs, kept by our host for security and debugging.
We do not ask for and do not want your social security number, your bank details, or the seller’s personal information. Please do not enter them.
Deal figures leave our systems to produce a paid report. When you buy a report, the figures you entered and the industry and location you chose are sent to Anthropic’s API, which writes the research. If any of that information is confidential — from a broker’s memorandum or under a non-disclosure agreement — consider whether you are permitted to submit it before you do. The free on-screen analysis does not send anything to Anthropic; it is arithmetic that runs on our own servers.
3Who else sees it
We use a small number of service providers. Each one sees only what it needs:
| Provider | What it does | What it sees |
|---|---|---|
| Supabase | Database, authentication and file storage | Email address, password hashes, sign-in verification and session data, provider identifiers and shared profile information, saved deals, generated documents |
| Vercel | Website hosting | Request logs, IP address |
| Stripe | Payment processing | Email address, payment details — handled entirely by Stripe |
| Anthropic | Generating the written research in paid reports | The deal figures and industry/location you enter |
| ScrapingBee | Retrieving public web pages cited in research | No customer data — public URLs only |
| Resend | Sending service email | Email address and service-email content, including verification codes |
If you choose Google or Apple sign-in, that provider receives and processes your sign-in request under its own privacy policy: Google Privacy Policy or Apple Privacy Policy. We do not send your deal figures or reports to Google or Apple as part of sign-in.
We do not sell your personal information, and we do not share it for advertising or for anyone else’s marketing. We will disclose information if the law requires it, or to protect our rights or someone’s safety. If the business is ever sold or merged, your information may transfer with it, and this policy will continue to apply until you are told otherwise.
4Why we are allowed to hold it
We process your information to provide the service you asked for (performing our contract with you), to keep the service secure and working (our legitimate interests), and to meet tax and accounting obligations (legal obligation). We do not rely on consent for anything except optional email you can unsubscribe from, and we do not send marketing email you did not ask for.
5How long we keep it
Saved deals and generated reports stay until you delete them or close your account. Purchase records are kept for seven years, because tax rules require it. Technical logs are kept for a short period by our host and then discarded. When you close your account we delete your deals and documents, and keep only the minimum transaction record the law requires.
6Your rights
Wherever you live, you may ask us to show you what we hold, correct it, delete it, or send you a copy. Email legal@flynto.net and we will respond within 30 days. We will not charge you, and we will not treat you differently for asking.
You can revoke Google or Apple sign-in access in that provider’s account settings. Doing so does not itself delete your FLYNTO account or its data; contact us at legal@flynto.net to request deletion.
If you are in California, this covers your rights to know, delete, correct and opt out of sale or sharing — we do not sell or share, so there is nothing to opt out of. If you are in the EEA or the UK, this covers your rights of access, rectification, erasure, restriction, portability and objection, and you may complain to your local supervisory authority. Our providers are based in the United States, so your information is processed there.
7Cookies
We use one kind of cookie: the one that keeps you signed in. It is required for the service to work and it is not used to track you. We do not use advertising cookies, third-party trackers, or cross-site analytics, which is why you have not been asked to dismiss a consent banner.
When you choose Google or Apple, that provider may use cookies on its own sign-in pages under its own privacy policy.
We do count visits, so that we know which pages people find useful. That counting is done by our hosting provider, Vercel, and it sets no cookie, builds no profile, and cannot follow you to any other website. It records that a page was viewed and that a step was reached — for example that an analysis was run, or that a report was bought. It never records what you entered: not the business, not the price, not the earnings, not the location. Those figures are yours and they are not sent anywhere for measurement.
8Security, children, and changes
Data is encrypted in transit and at rest, access to production systems is limited, and generated documents are stored privately and served through short-lived links. No system is perfectly secure; if a breach ever affects your information we will tell you and the relevant authority as the law requires.
FLYNTO is not for anyone under 18 and we do not knowingly collect information from children. If we learn that we have, we will delete it.
If we change this policy we will update the effective date above, and tell account holders by email when the change is material. Questions: legal@flynto.net.