Privacy Policy

This Privacy Policy describes how Flowlayers ("Flowlayers", "we", "us") collects, uses, and discloses personal information when you visit www.flowlayers.com or interact with us through other channels.

1. Who we are

Flowlayers is an AI-powered business automation agency. Our registered point of contact is in Cairo, Egypt. The founder is Ahmed Elrayes. You can reach the data controller at a.elrayes@flowlayers.com.

2. What we collect

We collect personal data in three ways:

• Contact form data. When you submit our contact form we collect your name, email address, optional company, optional role, optional industry, and the content of your message.
• Lead-magnet downloads. When you request a downloadable resource (case study PDF, AIOS Buyer's Guide), we record your name and email address.
• Analytics data. We use Vercel Analytics, Google Analytics 4, and Microsoft Clarity to understand how visitors use the site. This data includes IP address (anonymized), browser type, pages visited, and session interaction.

We do not collect special-category data, financial data, or government-identifier data.

3. Why we collect it

• To respond to your inquiry and discuss potential engagements.
• To deliver requested resources (case studies, guides).
• To improve the site, measure conversion, and understand user behavior.
• To send occasional newsletters or follow-up communications, only if you have explicitly opted in.

4. How we store and protect it

Contact form data is forwarded to our internal CRM and may also be relayed to automation workflows. Lead-magnet email addresses are stored in our newsletter platform (Beehiiv). Analytics data is stored by Vercel, Google, and Microsoft per their respective privacy practices.

We use HTTPS site-wide, strict security headers (HSTS, X-Frame-Options, X-Content-Type-Options, Content-Security-Policy), and we rate-limit our contact endpoint to mitigate abuse.

5. Who we share it with

We do not sell personal data. We share it with: (a) our analytics processors (Google, Microsoft, Vercel) for the limited purpose of measurement; (b) our CRM hosting provider; (c) our newsletter platform (Beehiiv); (d) legal authorities if required by law.

6. Your rights

Under the applicable privacy regimes (KSA PDPL, UAE PDPL, Egypt PDPL, Kuwait DPPR, GDPR where it applies), you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (right to erasure).
• Object to processing for marketing purposes.
• Withdraw consent at any time.
• Lodge a complaint with the supervisory authority in your jurisdiction.

To exercise any of these rights, email a.elrayes@flowlayers.com. We will respond inside 30 days.

7. International transfers

Our service providers operate in multiple jurisdictions. Where personal data is transferred outside your country of residence, we rely on the standard contractual clauses or analogous legal instruments offered by the processor.

8. Cookies and tracking

We use first-party cookies for session continuity and analytics. We do not set third-party advertising cookies at this time. A cookie consent banner is provided when GDPR-grade consent is required by jurisdiction.

9. Retention

Contact form submissions are retained for up to 24 months. Lead-magnet email lists are retained until you unsubscribe. Analytics data follows the processor's default retention (Google: 14 months by default; we can shorten on request).

10. Children

This site is not intended for, and we do not knowingly collect data from, children under 16.

11. Changes

We will update this policy when our practices change. Material changes will be reflected in the Effective date at the top of this page.

12. Contact

Questions, requests, or complaints: a.elrayes@flowlayers.com