Privacy Policy
Last updated: October 19, 2026
This Policy explains how ClientFlux.ai collects, processes, and protects personal data when you use our marketplace, Demand Engine, Business Passport, AI Business Agents, free website generator, ClientFlux Circle rewards program, Sales Partner Portal, and related services.
1. Who we are
ClientFlux.ai is a global local commerce network operated by Davick Int'l Trade, LLC (“ClientFlux,” “we,” or “us”). For privacy questions or to exercise any rights below, contact privacy@clientflux.ai.
2. Data we collect
Account data
Name, email, and a hashed password (never stored in plain text). We use email/password authentication only.
Business Passport data
Business name, category, address, city, region, country, phone, email, website, social links, service area, services, prices, hours, timezone, currency, language, photos, and descriptions — submitted by you and published only on your public Passport and free website as you authorize.
Consumer demand data
Name, email, service category, city/country, details, and preferred date when you post a Need or Request. We assign a unique Request ID and route it to matched eligible businesses.
Lead, booking, and CRM data
Leads, lead status, messages between consumers and businesses, booking requests, and outcomes. Row Level Security ensures a business sees only its own leads and a consumer sees only their own requests.
ClientFlux Circle rewards data
Eligible welcome benefits you claim, digital loyalty card progress, verified visits, and referral links. We do not operate a cash wallet, transferable monetary points, or cashback. Rewards are non-monetary loyalty benefits controlled by participating merchants and subject to their terms.
Sales Partner data
Partner applicants submit name, email, country, city, phone/WhatsApp, professional background, and a motivation statement. Approved partners may prepare business drafts, send claim invitations, and view their own commission ledger (pending, approved, payable, paid, declined, or voided).
Usage and technical data
Device, browser, approximate location, and usage logs for security, abuse prevention, and analytics. When configured, we may use Google Analytics 4; analytics tracking is gated by applicable consent and configuration.
3. How we use data
- To register and authenticate business and consumer accounts.
- To operate the marketplace, Demand Engine, matching, lead delivery, and bookings.
- To publish your Business Passport and generate your free business website.
- To power your AI Business Agent (Gemini or a configured provider) using your Passport as its knowledge source, with per-business usage limits.
- To run ClientFlux Circle loyalty and referral features.
- To administer the Sales Partner Portal and commission ledger.
- To detect fraud, prevent abuse, and enforce our Acceptable Use Policy.
- To send service notifications and, where you consent, marketing communications. You can opt out at any time.
4. AI and provider data flows
Your AI Business Agent is shared, secure AI infrastructure with business-specific configuration and strict tenant isolation. A business's agent never accesses another business's private data. We use Gemini as a preferred provider and may use OpenAI or others through a provider-independent adapter, with per-business usage and cost controls.
When a provider is unavailable or a key is not set, the agent uses a clearly labeled deterministic fallback rather than fabricating information. Agents never invent prices, availability, or reservations.
We use third-party discovery sources (Google Places, Foursquare, when authorized) to discover businesses for acquisition. We respect each provider's terms on storage, caching, reuse, and display, separate external provider data from first-party ClientFlux records, and do not bulk-copy restricted provider content.
5. Payments (ClientFlux Pay)
ClientFlux Pay is a provider-independent payment integration layer. Licensed payment providers (Stripe Connect, and regional providers supporting GCash, Maya, M-Pesa, or Mobile Money where available) handle regulated financial services. ClientFlux does not directly hold consumer funds or operate an unlicensed money-transfer service. Online payment is optional; existing booking flows remain operational without it. Live payments, payouts, and automatic commissions are disabled until explicitly authorized. We store only provider-independent transaction references and status, protected by Row Level Security.
6. Data sharing
We share the minimum necessary with matched businesses to deliver a consumer request, and with providers whose services you or we use (AI, discovery, payments). We do not sell personal data. We may disclose data when required by law or to protect rights, safety, or platform integrity.
7. International transfers
Because ClientFlux is global from day one, your data may be processed outside your country. Where applicable (EU/EEA, UK, Switzerland), we rely on appropriate safeguards and transfer only the data necessary to provide the service.
8. Your rights
Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, port, or object to processing, and to withdraw consent. Email privacy@clientflux.ai. We verify identity before acting on requests.
California (CCPA / CPRA)
California residents may know, delete, correct, or opt out of the “sale” or “sharing” of personal information. We do not sell personal data.
EU / UK (GDPR / UK GDPR)
Lawful bases include contract performance, legitimate interests (security, fraud prevention), and consent (optional marketing and non-essential cookies). You may lodge a complaint with your supervisory authority.
9. Data retention
We retain account data while your account is active and for a reasonable period afterward for legal, security, and reconciliation needs. We separate demonstration data from real production records and never present demonstration data as genuine commercial activity.
10. Children
ClientFlux is not directed to children under 16 and we do not knowingly collect their data. If you believe we did, contact us and we will delete it.
11. Changes
We may update this Policy. We will post the updated version and revise the “Last updated” date. Material changes will be communicated through the platform or by email where appropriate.