Data Use & Privacy

Last updated: October 6, 2026

This page supplements our Privacy Policy with practical details about how Flitch Solutions Pty Ltd ABN 57 682 821 512 of 191 St Georges Terrace, Perth, WA 6000, Australia (“Flitch”, “we”, “us” or “our”) handles your data when you use our AI platform for building dashboards, reports, apps and workflows.

1. Overview

Here's a quick summary of our data practices:

  • Your data stays yours: We never sell your data or use it for advertising.
  • No training on your data: AI providers do not train models on your content.
  • Encrypted at rest and in transit: Industry-standard encryption protects your data.
  • Delete anytime: Export or delete your data at any time.

2. What Data We Collect

Account Information

Email address and name. We use OAuth-only authentication (Google or Microsoft sign-in), so we never store your passwords. We receive basic profile information from your chosen authentication provider.

Your Prompts and Data

The text prompts you provide and data you upload or connect (data files such as CSV or Excel spreadsheets, database connections, cloud storage) to build dashboards, apps, reports and workflows.

  • Uploaded files (CSV, Excel): Stored in encrypted cloud storage (Amazon S3). We store only metadata about your files (column names, data types, row counts) in our database, not the data itself.
  • Data extracted or generated on the Data page (Upload & extract from a PDF, document, or image; From a URL; Describe a dataset): The resulting dataset is stored in encrypted cloud storage (Amazon S3), the same as an uploaded file. For Upload & extract, the original source file is also stored in S3 and read to pull out its data. We keep only metadata (column names, data types, row counts) in our database. The dataset and any source file are deleted when you delete the dataset.
  • Connected data sources: Queried live from your data source when needed. We store connection credentials and metadata (column names, data types, row counts), not copies of your data.

Prompt Attachments

You can attach files to a message in the chat, or to a dashboard, app or report you are editing. When creating one from the home page, you can attach images only:

  • Images (screenshots, logos, style references): used as visual reference so what is built matches a target look or branding, or kept in what you build where you ask for that.
  • Documents (PDFs, Word documents and text files): read by the AI so it can answer from them or build from them. If you ask, their data is extracted into a table, which is shown to you first and becomes a dataset only when you save it (see above).
  • Retention : attachments are briefly held in a temporary upload area, and that copy is deleted within 24 hours. A file kept in what you build, such as a logo, is deleted when what it belongs to is deleted.

A spreadsheet or CSV is added as data instead, on the Data page or with Add data in the chat, and so is any other file you want kept as a standing data source.

What You Build

The dashboards, apps, reports, workflows and code generated by our AI based on your prompts. These are stored in your account and belong to you.

Usage Information

Basic analytics about how you use the platform (features accessed, dashboards, apps, reports and workflows created) to help us improve the service. We do not track your activity across other websites.

3. How AI Processes Your Data

When you build a dashboard, app, report or workflow, your prompts and relevant data context are sent to AI providers for processing. Here's how this works:

1

You submit a prompt

Your prompt, data metadata (column names and types), a sample of rows read from your data source at request time, and any files you attach are sent to our backend. Sample rows are read on demand and are not stored in our database.

2

AI builds what you asked for

We send the request to our AI providers (Anthropic, Google, Replicate, and OpenAI or xAI where your team selects them) to generate its code and assets. Attached images are processed using AI vision capabilities to match a target look or branding, and attached documents are read for their content.

3

Request data is not retained

AI providers process the request and return results. They do not store your data or use it for training.

4

Saved to your account

What was built is stored in your account, where only you (and your team) can access it.

Important: We use API access to AI providers, which means your data is not used for model training. This is contractually guaranteed by our API agreements with every provider we reach, including any your team selects.

4. AI Providers We Use

We use the following third-party AI providers to process your requests:

Anthropic (Claude)

Used for building dashboards, reports and apps, code planning, and intelligent assistance. During generation, Anthropic Claude (Opus model) receives your prompt, any attached files, and connected data samples for planning and code generation. It also reads files you connect on the Data page via Upload & extract, or attach in the chat, to pull structured data out of them. It is the default model for an AI step in a workflow, which receives the rows or documents that reach that step each time the workflow runs; a step can name another provider your team has selected instead.

  • Location: United States
  • API data is not used for training
  • Anthropic retains API request logs for up to 7 days for abuse monitoring only
  • Privacy Policy: anthropic.com/privacy

Google (Gemini)

Used for code generation, data processing, and validation tasks. Google Gemini (Flash Lite model) receives attached images for intent classification to determine how to use them during generation.

  • Location: United States
  • API data is not used for training
  • Google retains paid API data for a limited period for policy monitoring only
  • Privacy Policy: policies.google.com/privacy

Replicate (Flux)

Used for generating custom icons and images for what you build.

5. Data Storage & Retention

Where Your Data Is Stored

  • Account data: Stored in our database hosted on Neon (PostgreSQL) in Australia (Sydney).
  • Dashboards, apps, reports and workflows: Stored in our database, associated with your account.
  • Workflow runs: Each step of a run keeps a small, capped sample of the rows it produced, so you can see what the run did in its history.
  • Datasets (uploads, Upload & extract, From a URL, Describe a dataset): Stored in Amazon S3 in Australia (Sydney), encrypted at rest. Only metadata (column names, types, row counts) is stored in our database. For Upload & extract, the original source file is stored in S3 too. The dataset and any source file are deleted when you delete the dataset.
  • Prompt attachments: Images and documents attached in a chat or while building. The temporary upload buffer is cleared within 24 hours. A file kept in what you build is deleted when what it belongs to is deleted, and a table you save from a file is stored as a dataset.

How Long We Keep Data

  • Account data: While your account is active. After account closure, you have a 14-day grace period to cancel the deletion and recover your data, after which it is permanently deleted.
  • Dashboards, apps, reports and workflows: Until you delete them or close your account. Closing your account deletes your personal space and everything in it. Work in a shared team stays with that team.
  • Usage logs: Up to 12 months for security and improvement purposes.
  • Payment records: 7 years as required by tax laws.

6. Your Controls

You have full control over your data:

Export Your Data

Download your dashboards, reports, apps and data at any time through the platform's export features.

Delete Your Data

Delete anything you have built, or request complete account deletion, at any time.

Access Your Information

Request a copy of all personal information we hold about you.

Correct Your Information

Update your profile information or request corrections to any inaccurate data.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Contact Us

If you have any questions about how we handle your data, please contact us:

Email: [email protected]

Address: 191 St Georges Terrace, Perth, WA 6000, Australia

For our complete privacy practices, please read our Privacy Policy.