Privacy Policy — Fluxify

Effective date: July 23, 2026 Last updated: July 23, 2026

This Privacy Policy explains how Gonz Ventures LLC ("Fluxify," "we," "us") collects, uses, and shares information when you use the Fluxify website and application at fluxify.app and app.fluxify.app (the "Service"). Fluxify is an AI photo-editing tool for real-estate imagery.

By using the Service you agree to this Policy. If you do not agree, do not use the Service.

---

1. Information we collect

Information you provide

• Account details: your email address, and a name (which you enter, or which we receive from Google if you sign in with Google, or from Aryeo when you sign in as an existing customer).
• Password: if you set one. We store only a cryptographic hash, never the password itself.
• Photos and content: the property/real-estate images you upload for editing, any optional notes or prompt text you add, and — for the character-consistency feature — persona details you enter (such as a described appearance).
• Payment information: when you purchase credits, edits, or a subscription, payment is handled by Stripe. We do not receive or store your full card number; we store a Stripe customer identifier, the amounts, and the status of your purchases.

Information collected automatically

• Login codes: one-time login codes are generated and stored only as a hash, and expire after a short period.
• IP address: we read your IP address to rate-limit requests and to prevent abuse of free trials. We retain an IP address associated with a successful free-trial grant for anti-abuse purposes.
• Cookies and similar technologies: we set an essential session cookie to keep you logged in and store your light/dark theme preference in your browser's local storage. With your consent where required, we also use analytics and advertising cookies and pixels (Google Analytics, the Meta Pixel, and the Google Ads pixel) to understand how the Service is used and to measure and target our advertising. See Section 5 for details and your choices.

Waitlist: if you join the waitlist, we collect the email address, chosen persona/ segment, optional team size, referral code, and campaign (UTM) parameters you arrive with. We may use an email marketing provider (such as Klaviyo) to store and send waitlist and marketing communications.

We do not collect your phone number, and we do not buy personal information about you from third parties.

2. How we use information

• To provide the Service: authenticate you, process and return your edited images, manage credits and purchases, and deliver results.
• To send transactional messages: login codes, email verification, password resets, and purchase/delivery notifications.
• To operate and secure the Service: rate-limiting, fraud/abuse prevention, debugging, and maintaining records of admin actions.
• To measure and improve the Service and to market it: with your consent where required, we use analytics and advertising tools to understand usage and to show and measure ads.
• We send product or marketing email only to users who have opted in; other users receive transactional messages only.

We do not sell your personal information for money. We do not use your uploaded photos or edited results to train or improve any AI model. You do grant us a license to use images you upload for our own marketing and demonstration purposes (see Section 3 and the Terms of Service); this marketing license does not include AI-model training.

3. AI processing of your images

To edit your images, we send the image data and your prompt/notes to Google's Gemini API, a third-party AI service operated by Google. Some image-classification steps run on our own servers and are not sent to any third party.

We use the paid tier of the Gemini API. Google states that it does not use paid-tier API data to train its models. Images are sent to Google only to perform the edit you request — not to train any model.

Your use of the Service and this processing are subject to Google's applicable terms for the Gemini API.

4. How we share information (subprocessors)

We share information only with service providers that help us run Fluxify, and only as needed:

Provider	Purpose	What is shared
Google (Gemini API)	AI image editing & classification fallback	Uploaded images, prompt/notes text
Google (OAuth)	"Sign in with Google"	Standard sign-in profile (email, name)
Stripe	Payment processing	Email, account identifier, purchase amounts
Aryeo	Verifying/looking up your orders as a customer	Your email (to look up your account)
Dropbox	Importing property photos (listing-client / admin flows)	Listing address, photo files
Google Analytics	Website/app usage analytics	Usage events, device/browser data, IP-derived data
Meta Pixel	Advertising measurement & retargeting	Site activity, advertising identifiers
Google Ads pixel	Advertising measurement & retargeting	Site activity, advertising identifiers
Email marketing provider (e.g. Klaviyo)	Waitlist / marketing email	Email address, waitlist details
Hosting provider (United States, Phoenix, Arizona)	Hosting / infrastructure	All Service data, at rest
Google Workspace (Gmail SMTP)	Sending transactional email	Your email address and message contents

We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, and property of Fluxify, our users, or the public. If we are involved in a merger or acquisition, information may be transferred as part of that transaction.

5. Cookies, analytics, and advertising

We use the following categories of cookies and similar technologies:

• Essential: a session cookie that keeps you logged in, and a theme preference stored in local storage. These are always active and cannot be turned off.
• Analytics: Google Analytics, to understand how the Service is used.
• Advertising: the Meta Pixel and the Google Ads pixel, to measure our advertising and to show you relevant ads on other platforms (retargeting).

Where required by law (including in the EU, the UK, and California), we present a cookie consent banner that lets you accept or reject analytics and advertising cookies separately before they are set. You can change your choices at any time through the banner or your browser settings.

California residents: our use of advertising cookies for cross-context behavioral advertising may be considered a "sale" or "sharing" of personal information under California law. We provide a "Do Not Sell or Share My Personal Information" control, and we honor Global Privacy Control (GPC) signals where applicable.

6. Data retention

We keep your account, uploaded photos, and edited results for as long as your account is active. When you close your account (or if it is abandoned), we delete your associated personal data and images within 90 days, except where we must keep certain records longer for legal, tax, or accounting reasons (such as payment records). We keep waitlist email addresses indefinitely until you unsubscribe or request deletion. Expired login codes and verification tokens are deleted automatically.

7. Your choices and rights

• Access / correction / deletion: you can request a copy of your data, corrections, or deletion of your account and associated data by emailing hello@fluxify.app, or by using the deletion option in your account settings.
• Marketing: we send marketing email only if you opt in, and you can opt out of any marketing email using the unsubscribe link.
• Cookies / advertising: you can accept or reject analytics and advertising cookies through our consent banner, and California residents can use the "Do Not Sell or Share" control described in Section 5.

Depending on where you live, you may have additional rights. EU/UK (GDPR) residents may request access, correction, deletion, restriction, portability, and objection, and may withdraw consent or lodge a complaint with a supervisory authority. California (CCPA/CPRA) residents may request access, deletion, and correction, may opt out of the sale/sharing of personal information, and will not be discriminated against for exercising their rights. To exercise any right, contact hello@fluxify.app.

8. Security

We use reasonable technical and organizational measures to protect your information, including hashed passwords and login codes, signed session tokens, private storage for image files, and release of full-resolution results only after payment. No method of transmission or storage is completely secure. In the event of a data breach affecting your information, we will notify affected users without undue delay as required by law.

9. Children

The Service is not directed to children. You must be at least 18 years old to use it, and we do not knowingly collect information from anyone under that age.

10. International users

The Service is operated from the United States and we serve users internationally. If you use the Service from outside the United States, you understand your information will be processed in the United States and other countries where our subprocessors operate. Where we transfer personal data out of the EU/UK, we rely on appropriate safeguards such as the Standard Contractual Clauses.

11. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, where required, notify you.

12. Contact

Questions or requests: hello@fluxify.app — Gonz Ventures LLC, 14255 Lanning Drive, Whittier, CA 90604.