This privacy policy is provided in English for convenience; the German version linked above remains the legally authoritative version.
The controller within the meaning of the General Data Protection Regulation (GDPR) for
this information offering is:
INSPIRED SOFTWARE, David Kubitsch, Schönfließer Straße 3, 10439 Berlin
Phone: +49 30 54632960 · Email: info@inspiredsoftware.de
This policy describes exclusively the data processing carried out by this information page. SupportFlowAI is delivered as software for independent installation on the customer's own servers (see the installation guide) — INSPIRED SOFTWARE does not operate any hosted instance of the application on your behalf. If your organization operates its own installation, it alone is the controller for the data of your users and customers processed there, and it must provide its own privacy policy for that installation. Sections 5 through 9 below therefore do not describe processing carried out by us, but rather the data processing that takes place within your own installation and for which you yourself are responsible — provided here as guidance for drafting your own privacy policy.
You have the following rights against us regarding your personal data:
To exercise these rights, please contact the address given above.
When you access these pages, the web server automatically processes technical access information (including IP address, date/time, page requested, browser/operating system identifier), as is technically necessary for the operation of any web server. This information is used exclusively to ensure the secure and stable operation of the pages and is not combined with other data sources. We do not use any analytics or tracking cookies, and no external analytics services, on this information page.
To sign in to SupportFlowAI itself (the /login area and beyond), a
technically necessary cookie is set that keeps the session active for up to 30 days
after login (HttpOnly, SameSite=Lax). This cookie is required
for the login function and is not used for analytics or advertising purposes.
SupportFlowAI processes a username, email address and a password (stored exclusively as a salted hash, never in plain text) for user accounts that are created. Mailbox credentials (IMAP/SMTP passwords) are stored exclusively in encrypted form (ASP.NET Core Data Protection), never in plain text.
To generate reply drafts and automated responses, SupportFlowAI processes the contents of the connected mailboxes (message text, sender, subject) as well as question/answer pairs derived from them for knowledge search. Personal data is automatically masked before being permanently stored in the training corpus.
To generate reply drafts and embeddings, the relevant content is sent to a locally operated Ollama service — SupportFlowAI is deliberately designed so that no external AI cloud API (e.g. from a third-party provider) is involved in the processing path: under normal operation, mailbox contents never leave your own infrastructure.
Account and usage data is retained for as long as the respective installation is operated. Security-relevant events (including logins, approvals, and activation of full automation) are recorded in an immutable audit log.
This privacy policy may be updated if the data processing carried out by this information page changes. The current version is always available on this page.