Privacy Policy

Last updated: September 14, 2026

Notice: This is a preliminary policy that is pending review by legal counsel. It is provided as general information and may change before it is finalized. Please check back for the reviewed version.

Who we are

Fluxara LLC ("FluxPilot", "we", "us", "our") builds software for designing utility-scale battery energy storage systems. This policy covers the fluxpilot.app website and the FluxPilot application. "The FluxPilot application" (or "the application") means the FluxPilot software however we deliver it to you: in your browser at studio.fluxpilot.app, or as installable software that we may provide to some customers. Your commercial license to the application is governed by the separate license agreement provided to customers.

The FluxPilot application

Account data. To give you access to the application we process your email address, your name, the organization you belong to and your role in it, and a record of your sign-in events. For security logging we also record the IP address and the browser or application version used to sign in and to make requests. When you use the application in a browser it sets session cookies or holds sign-in tokens that keep you signed in and protect your session. These are strictly necessary for the application to work; they are not advertising cookies, and we do not share them with advertisers.

Your content. The projects, equipment libraries, documents, and files you create or upload are stored in your account on our infrastructure at Amazon Web Services (United States). They remain your content, we do not use them to train any machine-learning model, and we access them only to operate the service, to support you at your request, or as required by law. Content you share within your organization, including shared organization libraries, can be seen and edited by the other members of your organization who have access to it, and your organization's administrators may see and manage it. When you use installable software we provide, some content may also be stored on your device.

How long we keep it. We keep your account data and your content while your account is active. When your license ends or your account is closed, we delete them on the schedule set out in the Terms of Use, keeping only what we need for billing, security, or legal compliance.

AI-assisted import

The application can read a document you choose to import, such as an equipment datasheet or a spreadsheet, and propose values for a library record or a project.

What is sent. Only when you start an import: the document you selected, our instructions, and the structure of the record being filled. Nothing is sent from your account otherwise.
Who processes it. Anthropic, PBC (United States), the provider of the Claude models, through Amazon Web Services, processes the document only on our behalf. Anthropic does not use content submitted through its API to train its models, as described in its commercial terms and privacy policy.
How long it is kept. Anthropic retains inputs and outputs for a limited period for trust and safety purposes and then deletes them. We keep the proposed values in your account only until you review them, and the record you save is yours like any other.
Your choice. The feature runs only when you choose to import a document. You can enter every record by hand instead.

Diagnostic and usage data

The application sends anonymized diagnostic and product usage data to us so that we can improve the product and find and fix bugs. This is on by default and you can turn it off at any time in the application under Settings, General, "Share anonymous usage data".

What is sent. Feature usage events (for example that a project was created, a sizing run completed, or a layout was exported, with non-identifying counts and sizes), performance measurements, error and crash reports, the application version, your browser type when you use the application in a browser, and your operating system. Events are tied to a random identifier and, when you are signed in, to your account identifier so that we can investigate a problem you report. We do not send your email address.
What is never sent. Your confidential data is not part of this diagnostic data. Project files, equipment libraries, site boundaries, drawings, coordinates, weather and electricity rate lookups, file names, file paths, and any other project content are never uploaded by this mechanism.
Error reports. Crash and error reports may include the error message and a stack trace. When you use installable software we provide, file paths are removed before the report leaves your device.
Who processes it. The data is sent through our own domain to PostHog, Inc., which is hosted in the United States and processes it only on our behalf under the PostHog Privacy Policy.
How long we keep it. Event and error data is retained according to PostHog's default retention periods and is deleted when no longer needed to operate and improve the product.

Sign-in and license enforcement

Sign-in to the application is handled by WorkOS, Inc. (United States), which processes your email address, name, and sign-in events on our behalf, as described in the WorkOS Privacy Policy. License checks are served by our own infrastructure on Amazon Web Services and process your account email, your organization membership, and your active sessions in order to enforce your license. When you use installable software we provide, the license check also processes an identifier for the device the software is installed on. This processing is separate from the diagnostic data described above.

The fluxpilot.app website

Demo bookings. When you book a demo through the scheduler embedded on our homepage we collect the details you enter: your name, email, and your answers to the booking questions (such as company, role, and what you want to see). The scheduler is Google Calendar appointment scheduling, provided by Google LLC, which processes this information on our behalf to place the meeting on our calendar and send you the invite. Google also sets its own cookies inside the embedded scheduler and processes technical data such as your IP address and browser characteristics under the Google Privacy Policy.
Demo requests by email. If you use the email form instead of the scheduler, we collect the details you enter: your name, work email, company, role, project pipeline range, and anything you write in the message field.
Technical logs. Our hosting provider (Amazon Web Services, including CloudFront) records standard access logs such as IP address, browser type, and the pages requested. We use these to keep the site running and secure.
Bot protection. The email form is protected by Cloudflare Turnstile, which runs a silent, invisible check in the background to tell real visitors apart from bots. You are never asked to solve a puzzle. To do this, Cloudflare processes limited technical signals (such as your IP address and browser characteristics) on our behalf, as described in the Cloudflare Turnstile Privacy Addendum.
Web analytics. We use Cloudflare Web Analytics for privacy-first page view counts. It does not use cookies or track you across sites, as described in the Cloudflare Privacy Policy.
Session insights. We use Microsoft Clarity to understand how visitors move through the site, including heatmaps and replays of page interactions. Form fields and other sensitive content are masked, and Microsoft processes this data on our behalf, as described in the Microsoft Privacy Statement.
Product analytics. We use PostHog to understand how the site is used: the pages you view, the links and buttons you interact with, and when a demo is booked or a demo request is submitted (for the email form we record the role and pipeline range you selected, never your name, email, company, or message). This data is sent through our own domain to PostHog, Inc., which is hosted in the United States and processes it only on our behalf, as described in the PostHog Privacy Policy.

We do not run advertising trackers on this site, and we do not use third-party ad networks.

How we use your information

To provide the application to you and your organization, including hosting your content, keeping you signed in, and enforcing your license.
To hold the demo you booked, or to respond to your demo request and schedule the walkthrough you asked for.
To follow up with you about FluxPilot when you have expressed interest.
To operate, secure, debug, and improve the website and the FluxPilot application.

What we do not do

We do not sell your personal information. We do not share it with third parties except the service providers that operate our infrastructure, such as Amazon Web Services for hosting, storage, and email delivery, Google for demo scheduling, Cloudflare for bot protection and web analytics, Microsoft Clarity for session insights, WorkOS for sign-in, PostHog for product analytics and error reporting, and Anthropic for AI-assisted document import in the application, and those providers process it only on our behalf. We may also disclose information when the law requires it.

How long we keep it

We keep demo booking and request details for as long as we need them to handle your inquiry and any resulting business relationship. You can ask us to delete them at any time. Account data and application content are kept while your account is active and deleted after termination as described above and in the Terms of Use.

Your choices and rights

You can ask us to access, correct, or delete your personal information by emailing us at the address below. If your account was created for you by your organization, we may need to work with your organization's administrator to carry out your request. Depending on where you live, you may have additional rights under laws such as the CCPA or the GDPR. We will honor valid requests as required by applicable law.

Security

The site and the application are served over HTTPS, so information you submit is transmitted encrypted. We apply reasonable, least-privilege practices on our infrastructure. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

Children

The site and the application are business-to-business services and are not directed to anyone under 16. We do not knowingly collect information from children.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the date at the top of this page.

Contact

Questions about this policy? Reach us at contact@fluxpilot.app.