Privacy Policy

Fluid builds and runs AI agents that do repetitive office work for small businesses. To do that work, an agent needs permission to read and write in systems you already use, such as your email or your accounting software. This page explains exactly what we access, why, where it goes, and how to get rid of it.

Fluid is operated by Fluid LLC, an Iowa limited liability company based in Johnston, Iowa. If anything here is unclear, email help@makeitfluid.com and a human will answer.

What we collect

We handle four kinds of information.

• Account information. Your name, email address, company name, and the settings for your agents. If you choose to receive text messages, the mobile number you give us and the fact that you verified it.
• Data from systems you connect. When you connect an account, we access only the specific information your agents need. For an email account that may include message subjects, bodies, senders, recipients, dates, and attachments in the mailboxes or labels you point us at. For a folder of files, in Google Drive or in Microsoft OneDrive or SharePoint, it may include the names and contents of the files in the one folder you choose, and who changed them and when. Fluid reads nothing outside that folder and never changes a file.
• Activity records. A log of what each agent did on each run, including short summaries of the work, so you can review it.
• What a customer's staff send to an agent. Some agents work with people at a customer's business who have no Fluid account, such as sales reps who send a daily report from a link on their phone. For them we keep their name and mobile number, which the customer gives us; what they say or type on their page; the photos they add, with the time, place and camera each photo records; and when they sent it. A recording is turned into text and then deleted. We never keep audio.

Why we access it, and nothing else

We access data from connected accounts for one purpose: to perform the task you asked an agent to perform, and to show you what it did. We do not browse your data for any other reason.

Every agent is limited to the specific accounts and permissions you grant it. An agent cannot reach a system nobody connected to it. You can revoke any connection at any time from your provider or by asking us, and the agent stops immediately.

Google user data

If you connect a Google account, Fluid's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we do not and will not:

• Use Google user data to train, improve, or develop any AI model.
• Use Google user data for advertising of any kind.
• Sell, rent, or trade Google user data.
• Transfer Google user data to anyone except the service providers listed below, and then only to run the task you asked for, or where the law requires it.
• Allow humans to read your Google user data, except with your explicit permission for a specific problem you have asked us to fix, or where the law requires it.

Who else touches your data

We use a small number of established providers to run the service. Each one is bound by contract to handle your data only on our instructions.

• Anthropic processes the text an agent is working on so the agent can understand it and draft a response. Anthropic does not use data submitted through its business API to train its models.
• Supabase stores your account, agent settings, activity records and photos, on servers in the United States.
• OpenAI turns a recording made on an agent's page into text. OpenAI does not use what it receives through its business API to train its models, and may keep it for up to 30 days to check for abuse.
• Vercel hosts the Fluid website and dashboard.
• Fly.io runs the machine your agents work on. The text an agent is working on passes through it while the agent runs, on servers in the United States, and is not kept there.
• Resend delivers our emails to you, such as sign-in codes.
• Twilio delivers our text messages to you, if you have asked for them.
• Stripe takes your payment and holds the card or bank account you pay with. Those details go from your browser to Stripe without passing through Fluid, and we never see or store them.

We do not sell your information. We do not share it with advertisers. We have no interest in your data beyond doing the job you hired us for.

Text messages

Fluid can text you when one of your agents has prepared work that needs you, or has stopped. This is off unless you turn it on, and it is never required to use Fluid.

You give us your own mobile number inside your account, on the “How you hear” screen. We text you a six digit code and the number does nothing until you enter it, so a number that was mistyped never receives anything. Nobody can add a number on your behalf, and no one else can change how you are contacted. You then choose, for each agent separately, whether it should tell you straight away.

How often depends entirely on your own agents and the settings you chose. Message and data rates may apply. Reply STOP to any message to stop them, or HELP for help, and you can change or remove your number at any time on the same screen you added it.

We do not share or sell mobile numbers, or the fact that you consented to be texted, to anyone for marketing purposes. Your number is used to deliver the messages you asked for and nothing else. It goes to Twilio because Twilio is what sends them, and to nobody else.

Texts to a customer's staff. Some agents text people at a customer's business, such as sales reps. We text only the number the customer gave us, and only after that person opens their own page, asks for a code, and types it back. After that we send a reminder when a report they owe is missing, and nothing else. Reply STOP to stop them, or HELP for help.

How long we keep it

• Content from connected accounts is held only as long as an agent needs it to finish its work. The one exception is notes an agent writes about a long document, so it does not have to read the whole document again. Those notes are kept only until the document changes, the connection is removed, or the agent is removed, and are used for nothing else.
• Activity records are kept for as long as your account is open, so you have a history of what your agents did. These contain short summaries, which may quote small amounts of the underlying content.
• Account information is kept while your account is open.
• What a customer's staff send is kept while the customer's account is open, so the customer has the history, and is deleted like the rest of the account when it closes. A customer can ask us to delete one person's reports at any time.

When you close your account, we disconnect your connected accounts right away and keep your data for 90 days so you can ask for a copy. After that we delete what your agents worked on. We keep the record of what each agent did, and what you were billed, for as long as a claim about it could still be brought, or longer if the law requires it. If you ask us to delete your data sooner, we remove it within 30 days, other than anything we are legally required to keep.

Keeping it safe

• Connections use the provider's official permission system. We never ask for or store your passwords.
• Access tokens are encrypted, and are never exposed to your browser.
• Each customer's data is walled off in the database itself, so one customer's account can never read another's.
• Every action an agent takes is recorded and visible to you.

An outside lab checked this. TAC Security tested Fluid against Google's Cloud Application Security Assessment in September 2026, and Fluid passed every requirement. Certification 741321b8, good through 16 September 2027. Ask us for a copy.

No system is perfect. If we ever discover a breach affecting your data, we will tell you promptly and plainly.

Your choices

• Disconnect any connected account at any time.
• Pause or stop any agent at any time.
• Ask us for a copy of your data, ask us to correct it, or ask us to delete it, by emailing help@makeitfluid.com.

Depending on where you live, you may have additional rights over your personal information. We honor those requests regardless of where you live.

Children

Fluid is a tool for businesses. It is not intended for anyone under 18, and we do not knowingly collect their information.

Changes

If we change this policy in a way that materially affects how we handle your data, we will email account holders before it takes effect. The date at the top always reflects the current version.

Contact

Questions, requests, or concerns: help@makeitfluid.com.