Privacy Policy

Brainstack Tech LTD (“Brainstack Tech LTD”, trading as “Fless”, “we”, “us”) operates from 3a Habitat Close, Lekki Phase 1, Lagos, Nigeria, with registered entity Brainstack Tech LTD (Nigeria, CAC) and planned international headquarters in Delaware, USA. We provide an AI workforce platform: marketing, sales, voice, support, hiring, finance, operations, and HR desks that run from one workspace, in every market you operate.

For questions about this policy, write to privacy@getfless.com or use Contact.

This policy applies to getfless.com, the Fless product at app.getfless.com, signup, billing, and related support. It covers personal data we process as a controller (accounts, billing, site visitors) and describes how we handle customer content as a processor when you use the product.

If you have a written data processing addendum (DPA) with us, that DPA controls where it conflicts with this page.

Account and billing. Name, work email, company, role, workspace name, city or region you select, plan, payment identifiers from our processor (we do not store full card numbers), and invoices.

Workspace content. Briefs, files, knowledge you connect, tickets, call metadata, drafts, logs of what a desk did, and settings. This is your customer data. You own it.

Usage and device. Product events (which desks are on, feature use), approximate location from IP, browser type, and diagnostics. We use this to keep the product up and to debug failures.

Support. Emails, call notes, and attachments you send when you ask for help.

Fless allows workspaces to connect external marketing, communications, and productivity services via OAuth 2.0. When you connect a third-party platform, you explicitly grant Fless permission to access specific data scopes. We only request permissions necessary to execute authorized actions:

We use personal data to:

• Create and authenticate workspaces, and deliver the product
• Bill, prevent fraud, and send transactional mail (receipts, security alerts)
• Provide support and investigate incidents
• Improve reliability, latency, and the desks you already use
• Meet legal, tax, and accounting duties

We do not sell personal data. We do not use your workspace content for advertising.

Desks generate drafts, replies, call handling, and similar output from your briefs and connected context. Inputs and outputs stay in your workspace unless you export them or connect a tool that sends them onward.

We do not train public or shared foundation models on your files, tickets, recordings, or prompts. Where a subprocesser model API is used to run a desk, it is under contract, for inference, with no right to use your content to train their general models — as those vendors state in their terms.

High-risk actions (payments, outbound at volume, irreversible deletes) are designed to pause for a person. You remain responsible for reviewing work that goes live in your name.

We share data only with:

• Subprocessors that host, bill, email, or run inference — under contract, limited to what the job needs
• Your admins and teammates inside the workspace, according to roles you set
• Authorities when the law requires it, or to protect people from serious harm
• A buyer if Fless is acquired, with notice where the law says we must

A current subprocessors list is available on request at privacy@getfless.com.

You may run work in more than one market. We and our subprocessors may process data in the United States, United Kingdom, European Economic Area, United Arab Emirates, Nigeria, and other locations where we or they operate.

Where a transfer needs a legal mechanism, we use standard contractual clauses (or the UK equivalent) and additional safeguards as required. Enterprise customers can contract for a named region or private VPC.

Account data lasts for the life of the workspace plus a limited period for invoices and legal holds. Workspace content is kept while the workspace is active. After you delete a workspace or a desk’s data, we remove it from production systems within 30 days, and from backups on their rotation cycle (typically within 90 days), unless the law requires longer.

You can export activity and knowledge before you close an account. Ask support if you need a packaged export.

You can disconnect third-party platforms or request complete deletion of your data at any time:

• Self-serve integration disconnect: Navigate to Settings → Integrations in the dashboard and click Disconnect next to any service. Tokens are invalidated instantly.
• Workspace deletion: Account owners can delete their entire workspace in Settings → Workspace. All customer content, credentials, and logs are wiped.
• Third-party portal revocation: You can revoke permissions directly inside your Facebook, Google, LinkedIn, or TikTok account settings.

For detailed instructions and tracking Meta automated deletion callbacks, read our dedicated User Data Deletion Instructions.

Depending on where you live (including Nigeria under the NDPR, the UK, the EEA under GDPR, California under the CCPA/CPRA, and similar data protection regimes), you may have the right to access, correct, delete, or export personal data, to object or restrict certain processing, and to withdraw consent. Workspace owners can often do this in-product; otherwise email privacy@getfless.com.

We will not discriminate against you for exercising these rights. You may lodge a complaint with your local supervisory authority. We would rather fix the issue first — write to us.

We use essential cookies to keep you signed in and to protect the product. We use limited analytics cookies to understand which pages fail and which desks people turn on. You can block non-essential cookies in your browser; the product still works for core use.

Fless is a business product. We do not knowingly collect personal data from children under 16. If you believe we have, contact us and we will delete it.

If we change this policy in a material way, we will update the date above and, where required, notify workspace owners by email or in-product. Continued use after the effective date means you accept the updated policy, unless a contract says otherwise.

Data Controller: Brainstack Tech LTD (trading as Fless)
Privacy: privacy@getfless.com
Security: security@getfless.com
Physical address: 3a Habitat Close, Lekki Phase 1, Lagos, Nigeria
Data deletion instructions: Data Deletion Instructions
Postal and enterprise: use Contact and we will route it.