Privacy Policy

Fluid builds and runs AI agents that do repetitive office work for small businesses. To do that work, an agent needs permission to read and write in systems you already use, such as your email or your accounting software. This page explains exactly what we access, why, where it goes, and how to get rid of it.

Fluid is operated by Fluid LLC, an Iowa limited liability company based in Johnston, Iowa. If anything here is unclear, email john@makeitfluid.com and a human will answer.

What we collect

We handle three kinds of information.

• Account information. Your name, email address, company name, and the settings for your agents.
• Data from systems you connect. When you connect an account, we access only the specific information your agents need. For an email account that may include message subjects, bodies, senders, recipients, dates, and attachments in the mailboxes or labels you point us at.
• Activity records. A log of what each agent did on each run, including short summaries of the work, so you can review it.

Why we access it, and nothing else

We access data from connected accounts for one purpose: to perform the task you asked an agent to perform, and to show you what it did. We do not browse your data for any other reason.

Every agent is limited to the specific accounts and permissions you grant it. An agent cannot reach a system nobody connected to it. You can revoke any connection at any time from your provider or by asking us, and the agent stops immediately.

Google user data

If you connect a Google account, Fluid's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we do not and will not:

• Use Google user data to train, improve, or develop any AI model.
• Use Google user data for advertising of any kind.
• Sell, rent, or trade Google user data.
• Transfer Google user data to anyone except the service providers listed below, and then only to run the task you asked for, or where the law requires it.
• Allow humans to read your Google user data, except with your explicit permission for a specific problem you have asked us to fix, or where the law requires it.

Who else touches your data

We use a small number of established providers to run the service. Each one is bound by contract to handle your data only on our instructions.

• Anthropic processes the text an agent is working on so the agent can understand it and draft a response. Anthropic does not use data submitted through its business API to train its models.
• Supabase stores your account, agent settings, and activity records, on servers in the United States.
• Vercel hosts the Fluid website and dashboard.
• Resend delivers our emails to you, such as sign-in codes.

We do not sell your information. We do not share it with advertisers. We have no interest in your data beyond doing the job you hired us for.

How long we keep it

• Content from connected accounts is held only as long as an agent needs it to finish its work, and is not retained afterward beyond the activity record described below.
• Activity records are kept for as long as your account is open, so you have a history of what your agents did. These contain short summaries, which may quote small amounts of the underlying content.
• Account information is kept while your account is open.

When you close your account, or if you ask us to delete your data, we remove it within 30 days, other than anything we are legally required to retain.

Keeping it safe

• Connections use the provider's official permission system. We never ask for or store your passwords.
• Access tokens are encrypted, and are never exposed to your browser.
• Each customer's data is walled off in the database itself, so one customer's account can never read another's.
• Every action an agent takes is recorded and visible to you.

No system is perfect. If we ever discover a breach affecting your data, we will tell you promptly and plainly.

Your choices

• Disconnect any connected account at any time.
• Pause or stop any agent at any time.
• Ask us for a copy of your data, ask us to correct it, or ask us to delete it, by emailing john@makeitfluid.com.

Depending on where you live, you may have additional rights over your personal information. We honor those requests regardless of where you live.

Children

Fluid is a tool for businesses. It is not intended for anyone under 18, and we do not knowingly collect their information.

Changes

If we change this policy in a way that materially affects how we handle your data, we will email account holders before it takes effect. The date at the top always reflects the current version.

Contact

Questions, requests, or concerns: john@makeitfluid.com.