Privacy Policy

Felix and Flywheel (the "Platform") are operated by Constellar Labs Limited, a company registered in England and Wales ("Constellar Labs", "we", "us", "our"). This policy covers the Felix and Flywheel web apps (including app.withfelix.ai and app.flywheelos.com), our websites, and the Felix integrations for AI assistants such as ChatGPT and Claude.

For personal data you give us to run your account, we are the data controller. For personal data inside content you ask us to process for you, we act on your instructions.

• Account data: your name, email address, profile picture, team and role, and login details.
• Connected social accounts: when you connect X, LinkedIn or another network, we receive your profile details and the access permissions needed to publish and read analytics on your behalf. Access tokens are stored encrypted.
• Your content: projects, ideas, drafts, scheduled and published posts, comments, voice and brand settings, uploaded media, knowledge base files and notes.
• Performance data: impressions, likes, comments, followers and similar metrics for your posts.
• Public social data: publicly available posts and profile details from sources you choose to monitor (for example competitors, creators or topics), and public profile details of people who engage with your posts, used for audience and lead insights.
• Billing data: your plan, credits and invoices. Card details are handled by Stripe; we never see or store full card numbers.
• Usage and device data: pages and features used, log data, IP address, browser type and error reports, used to keep the Platform working and improve it.

You can connect Felix to an AI assistant. You sign in to Felix and approve access, and the assistant receives a token limited to your account. You can revoke it at any time from the assistant's settings.

• When you ask the assistant to use Felix, it sends us the request (for example "list my scheduled posts") and we return the result to the assistant.
• We only receive what the assistant sends to Felix tools. We do not receive your other chats, memories or files in that assistant.
• Results you request through the assistant are then handled by the assistant provider (for example OpenAI or Anthropic) under their own privacy policy.
• Posts are only published when you explicitly schedule or publish them.

• To provide the Platform: generating ideas and drafts, scheduling and publishing posts, analytics and research.
• To write in your voice, using your past posts, settings and feedback on drafts for your account.
• To run billing, credits and account security.
• To send service emails and, where allowed, product updates you can opt out of.
• To fix problems, prevent abuse and improve the Platform.

Our legal bases are performing our contract with you, our legitimate interests in running and improving the Platform, your consent where we ask for it, and legal obligations.

To generate and analyse content, we send the relevant parts of your request and content to AI model providers (Anthropic, OpenAI, Google, Perplexity, and models accessed through OpenRouter). We use their business APIs, which do not use your data to train their models under their API terms. We do not use your private content to train shared models for other customers.

We do not sell your personal data. We share it only with service providers that help us run the Platform:

• Hosting and database: Google Cloud and Supabase
• AI models: Anthropic, OpenAI, Google, Perplexity and OpenRouter
• Social networks and publishing: X, LinkedIn and other networks you connect, and our publishing partner that delivers posts to them
• Public data collection: Apify and similar data providers, for public social data
• Payments: Stripe
• Product analytics and error tracking: PostHog and Sentry
• Email: Resend
• Integrations you turn on: for example Slack

Content you share with your team or clients, or through a share link, is visible to the people you share it with. We may also disclose data where required by law or to protect our rights and users.

Some providers process data outside the UK and EEA, including in the United States. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Addendum and the EU Standard Contractual Clauses.

We keep your data while your account is active. When you delete content or close your account, we delete or anonymise the related personal data within 90 days, except where we must keep it longer for legal, tax or security reasons. Backups are overwritten on a rolling basis.

We use encryption in transit, encrypted storage for social account tokens, access controls that separate each customer's data, and limited staff access. No system is perfectly secure, so please tell us at ops@flywheelos.com if you suspect a problem.

Under UK GDPR, EU GDPR and similar laws, you can ask us to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data
• Export your data in a portable format
• Restrict or object to processing, including marketing
• Withdraw consent where we rely on it

Email ops@flywheelos.com and we will respond within one month. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.

We use cookies needed to sign you in and keep the Platform secure, and analytics cookies to understand how features are used. We do not use advertising trackers or sell data to ad networks.

The Platform is for people aged 18 and over. We do not knowingly collect data from children.

We may update this policy. We will post changes here with a new date, and tell you by email or in the app if the changes are significant.

Questions or requests about privacy:

See also our Terms and Support pages.