Privacy Policy

Your information, handled responsibly.

This policy explains what personal information we collect, how we use it, and the choices you have when interacting with Fluenik.

Effective date: February 20, 2026  ·  Last updated: April 3, 2026

Legal entity: Fluenik, LLC (a Michigan limited liability company in the United States).

1. Scope

This Privacy Policy applies to personal information collected through fluenik.com, including our contact forms and our mailing-list form, along with related communications. Fluenik, LLC does not sell products or services directly through fluenik.com. Customers who engage Fluenik for services will be provided with separate, project-specific agreements and privacy terms.

2. Accountability and Privacy Contact

Fluenik, LLC is responsible for personal information under its control. Fluenik, LLC is a Michigan limited liability company in the United States.

  • Privacy Contact: Fluenik, LLC Privacy Officer
  • Request label: Please include "Privacy Request" in the subject line so we can route your inquiry quickly.

3. Information We Collect

3.1 Through our contact forms

We collect information you provide directly when you submit our general contact form or quote request form:

  • Contact details such as name, email address, and company name.
  • Project or inquiry details you include in your message.
  • Any additional details you choose to provide in free-text fields.

3.2 Promotional emails

We send promotional emails about our products and updates only with your consent. You may unsubscribe at any time using the link in our emails or by contacting us.

We retain your email address for marketing purposes until you unsubscribe or request deletion.

We use third-party email delivery providers (Proton) to send communications.

We do not use phone numbers for marketing communications unless explicitly stated.

3.3 Through our mailing-list form

When you subscribe through our mailing-list form, we collect information needed to manage your subscription:

  • Contact details such as email address and, if provided, your name.
  • Subscription metadata such as consent preferences and subscribe/unsubscribe timestamps.
  • Technical and anti-abuse data such as IP address, browser or device metadata, and captcha verification status when anti-spam checks are enabled.

You can unsubscribe at any time using the unsubscribe link in promotional emails or by contacting [email protected]. We may retain minimal suppression-list data (such as email address and unsubscribe status) to honor opt-out requests and comply with legal obligations.

3.4 Through fluenik.com (automatically collected data)

On our public-facing website, we collect limited information automatically, including IP address, browser type, device information, and page-visit data. This data is used for security, network management, performance monitoring, and privacy-friendly web analytics.

Specifically, fluenik.com uses:

  • Cloudflare for CDN and security services, which processes IP addresses and sets strictly necessary cookies for bot protection.
  • Plausible Analytics for cookie-free, privacy-friendly web analytics, which processes anonymized page-visit data without setting cookies or tracking individuals across sites.

If you enable the optional anti-spam check on a form, hCaptcha may also process IP address and device information as described in Section 8 below.

4. Service Providers

The following third-party service providers process personal data on our behalf or as part of operating fluenik.com. A full list with transfer mechanism references is published at fluenik.com/subprocessors.

  • DigitalOcean — application hosting. Processes contact form submissions, mailing-list data, and all website data stored at rest.
  • Cloudflare — CDN, DDoS protection, bot management, and DNS. Processes IP addresses, request headers, and sets strictly necessary security cookies on page load.
  • Proton — email communications. Processes email addresses and message content for transactional email delivery (such as contact form responses and privacy request replies).
  • hCaptcha (Intuition Machines, Inc.) — anti-spam verification on contact and mailing-list forms (consent-gated; not loaded unless you enable it). Processes IP address and device interaction data when activated. See Section 8 for details.
  • Plausible Analytics (Plausible Insights OÜ) — cookie-free, privacy-friendly web analytics. Processes anonymized page-visit data (page URL, referrer, browser, OS, and country derived from IP address, which is discarded after processing). Does not track individuals across sites or sessions and does not set cookies.

5. How We Use Information and Legal Bases

We collect and use personal information for the following purposes:

  • Respond to contact form inquiries — to answer your questions and follow up on project requests. Legal basis: legitimate interest in responding to inquiries (GDPR Article 6(1)(f)); or, where you are requesting us to take steps before entering a contract, performance of pre-contractual measures (Article 6(1)(b)).
  • Manage mailing-list subscriptions and send product updates — only where you opt in. Legal basis: consent (Article 6(1)(a)).
  • Protect against fraud, abuse, and unauthorized access — including anti-spam verification. Legal basis: legitimate interest in securing our services (Article 6(1)(f)).
  • Analyze anonymized website usage — through privacy-friendly analytics. Legal basis: legitimate interest in understanding site usage (Article 6(1)(f)).
  • Comply with legal obligations. Legal basis: legal obligation (Article 6(1)(c)).

Creating an account or submitting a form does not, by itself, constitute consent for all purposes. Where we rely on consent — specifically for promotional emails and optional hCaptcha anti-spam verification — you may withdraw consent at any time by using the unsubscribe link in promotional emails, disabling the anti-spam check, or by contacting our Privacy Officer. Withdrawal of consent does not affect the lawfulness of processing performed before withdrawal.

6. Sharing of Information

We do not sell personal information. We do not share personal information with third parties for advertising or marketing purposes.

We may share information with service providers that help us operate our infrastructure (hosting, security, email delivery, and analytics), subject to contractual confidentiality and security obligations. See Section 4 for a description of each service provider and the data it processes.

For mailing-list operations, subscription data may be processed by providers that support email delivery and list management on our behalf. We do not sell this data and do not share it for cross-context behavioral advertising.

We may also share information where required by law or to enforce our rights.

Our current subprocessor list, including transfer safeguard references, is available at fluenik.com/subprocessors.

7. EU/EEA/UK Article 13 Privacy Notice

If you are in the EU, EEA, or UK, this section provides Article 13 GDPR transparency for personal information we collect directly from you through fluenik.com.

  • Controller: Fluenik, LLC
  • Controller contact: [email protected]
  • Purposes and legal bases:
    • Pre-contractual measures (Article 6(1)(b)): responding to contact and quote form inquiries where you are requesting us to take steps before entering a contract.
    • Legitimate interests (Article 6(1)(f)): responding to general inquiries; securing our website and preventing abuse; analyzing anonymized website usage.
    • Consent (Article 6(1)(a)): sending promotional emails and product updates where you opt in; loading optional hCaptcha anti-spam verification when you enable it.
    • Legal obligation (Article 6(1)(c)): complying with applicable legal, regulatory, and accounting requirements.
  • Recipients: hosting providers (DigitalOcean), security and CDN (Cloudflare), anti-spam verification (hCaptcha, consent-gated), email communications (Proton), web analytics (Plausible Analytics), and professional advisors where required.
  • International transfers: our core services are hosted in the United States. Where required, we rely on recognized transfer safeguards such as adequacy decisions (including the EU-U.S. Data Privacy Framework where applicable) and/or Standard Contractual Clauses (including required UK and Swiss transfer addenda). See our Subprocessors page for current transfer references.
  • Retention: see Section 10 for specific retention periods by data category.
  • Your rights: subject to applicable law, you may request access, rectification, erasure, restriction, portability, objection, and withdrawal of consent (where processing is based on consent).
  • Complaint route: you may lodge a complaint with your local supervisory authority. A directory of EU supervisory authorities is available via the EDPB.
  • Whether provision is required: fields marked as required on our contact forms or mailing-list form are needed to process your request or subscription. If they are not provided, we may be unable to process the request.
  • Automated decision-making: we do not use solely automated decision-making that produces legal or similarly significant effects in relation to form submissions.

8. Cookies, hCaptcha, and Tracking Technologies

We use a small number of cookies and similar technologies to support site security and functionality. We do not use advertising cookies.

  • Cloudflare cookies (__cf_bm and related __cf_ prefixed cookies, strictly necessary) — our site is served through Cloudflare, which automatically sets essential cookies to manage bot protection, security, and network performance. These cookies are set on page load, do not track you across sites, and are not used for advertising. They are governed by the Cloudflare Privacy Policy.
  • Plausible Analytics (no cookies) — we use Plausible Analytics for privacy-friendly web analytics. Plausible does not set any cookies, does not use personal identifiers, and is configured to avoid identifying individual visitors. It processes anonymized page-visit data (page URL, referrer, browser, OS, and country derived from IP). The IP address itself is discarded by Plausible after processing and is not stored. See the Plausible Data Policy for details.
  • hCaptcha cookies (optional, consent-gated) — our contact and mailing-list forms optionally use hCaptcha to protect against spam and automated abuse. The hCaptcha widget is not loaded, and no hCaptcha cookies are set, unless you explicitly enable the anti-spam check by clicking the "Enable anti-spam check" button on the form. If you enable it, hCaptcha may set cookies (such as hc_accessibility and hmt_id) and may collect IP address, device information, and interaction data for security and anti-bot purposes. These cookies and data collection are governed by hCaptcha's own policies, which describe broader data uses than our summary here; for full details, see the hCaptcha Privacy Policy and hCaptcha Terms of Service. If you do not enable the anti-spam check, no hCaptcha cookies are placed.

9. California Notice at Collection (CCPA/CPRA)

At or before the point of collection, we provide this notice describing the categories of personal information collected, the purposes for collection or use, whether personal information is sold or shared, and retention periods.

  • Categories collected: identifiers (name, email address, IP address); professional information (company name, if provided); inquiry/project information (details you provide in our contact forms); mailing-list subscription data (consent/opt-in status, unsubscribe status, and related timestamps); and internet/network activity information (browser/device metadata and page interactions).
  • Sensitive personal information: we do not intentionally request sensitive personal information through our forms. Please do not submit payment card numbers or government ID numbers in free-text fields.
  • Business purposes: responding to contact and quote requests; communicating with you about requested services; managing mailing-list subscriptions; sending product updates where you opt in; protecting our website against spam and abuse; web analytics; maintaining unsubscribe and suppression lists; and complying with legal obligations.
  • Sold or shared: we do not sell personal information and do not share personal information for cross-context behavioral advertising.
  • Retention by category: see Section 10 for specific retention periods by data category.
  • Right to know, delete, correct, and opt out: California residents may exercise their rights under the CCPA/CPRA by contacting us at [email protected]. You may also designate an authorized agent to submit a request on your behalf; we may require the agent to provide proof of authorization and may separately verify your identity. We will not discriminate against you for exercising your privacy rights.

10. California Do Not Track Disclosure (CalOPPA)

Some browsers include a "Do Not Track" (DNT) setting. Because there is no universal standard for interpreting DNT signals, our website does not currently respond to DNT browser signals in a uniform way. We do not knowingly allow third-party advertising networks to collect personal information on fluenik.com for cross-site behavioral advertising.

11. Data Retention

We retain personal information only for as long as needed for the purposes described in this policy. The following retention periods apply:

  • Contact and quote form submissions — retained for up to 1 month unless required longer for an active support matter, security issue, dispute, or legal obligation.
  • Mailing-list subscription records — retained while you remain subscribed. After unsubscribe, we retain minimal suppression-list records (email address and opt-out timestamp) for as long as needed to honor your opt-out and comply with anti-spam laws.
  • Security and diagnostic logs — retained for up to 90 days for security monitoring and abuse prevention, unless a longer period is required for an active investigation or legal obligation.
  • Web analytics data (Plausible) — anonymized and aggregated; no personal data is retained by Plausible.

12. Data Security

We apply reasonable technical and organizational safeguards designed to protect personal information, including:

  • Encrypted transmission (HTTPS/TLS) for all data in transit.
  • Cloudflare DDoS protection and bot management.
  • Managed hosting on DigitalOcean with automated backups.

No system can be guaranteed 100% secure. We cannot guarantee absolute security of information transmitted over the internet.

13. Access, Correction, and Challenge Process

You may request access to personal information we hold about you, request corrections, or challenge our compliance with applicable privacy laws by contacting our Privacy Officer at [email protected].

  • We may need to verify your identity before processing requests.
  • We aim to respond within timelines required by applicable law, including Canadian privacy laws where they apply.
  • If you are not satisfied with our response, you may escalate concerns to the appropriate privacy regulator, such as the Office of the Privacy Commissioner of Canada or a relevant provincial or national data protection authority.

14. Regional Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or limit use of your personal information. You can submit requests by contacting us at [email protected].

If you receive promotional emails from us, you can unsubscribe at any time by clicking the unsubscribe link in the message.

For California residents, please see our California Notice at Collection above for CCPA/CPRA-specific rights and procedures.

For EU/EEA/UK residents, please see our Article 13 Privacy Notice above for GDPR-specific rights and procedures.

For Canadian visitors, rights and obligations may vary by jurisdiction, including federal law (PIPEDA) and applicable provincial private-sector privacy laws.

15. Children's Privacy

Fluenik services are not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected such information, please contact us at [email protected] so we can delete it promptly.

16. Changes to This Policy

We may update this policy from time to time. Updates will be posted on this page with a revised effective date. If we make material changes, we will provide notice by email where practicable. Where a material change involves a new use of personal data that requires consent under applicable law, we will obtain that consent before the new use takes effect.

17. Contact Us

If you have questions about this Privacy Policy, contact us at [email protected].