Privacy Policy

Data Must Flow
Last updated: September 2025

Overview

Data Must Flow operates the CWYT (Conversation With Your Thoughts) application and the datamustflow.com website. This Privacy Policy explains how we collect, use, and protect your information across all our services.

Information We Collect

CWYT Application

When you use the CWYT application, we collect:

Account Information: Email address and name for authentication
Content Data: Stories, documents, and text files you upload
Usage Data: Chat conversations, search queries, and feature usage
Technical Data: Session information, preferences, and system logs

Website and Marketing

When you visit our website or interact with our marketing:

Contact Information: Name, email address, and any information you provide in contact forms, waitlist signups, or surveys
Website Analytics: Pages visited, time spent, browser information, and general location (city/region level)
Marketing Interactions: Responses to advertisements, newsletter signups, and communication preferences

Third-Party Integrations

We may collect information through:

Google Forms: Information you submit through our forms hosted on Google's platform
Social Media: Interactions with our Facebook, LinkedIn, or other social media advertisements and pages
Email Services: Email engagement data when you receive communications from us

How We Use Your Information

CWYT Application

Provide AI-powered conversation and search capabilities
Store and organize your personal content securely
Improve system performance and user experience
Provide customer support and troubleshooting

Business Operations

Process inquiries and provide customer service
Send important updates about our services
Manage waitlists and notify you about availability
Understand user needs and improve our offerings
Comply with legal obligations and protect our rights

Analytics and Improvement

Analyze usage patterns to improve our services
Understand market demand and user preferences
Optimize our website and application performance
Develop new features and capabilities

Data Protection and Security

Content Security

Your uploaded stories and personal content are encrypted at rest
Content is isolated by user account and project permissions
We use enterprise-grade security measures to protect your data
Staff cannot access your personal content without explicit authorization

General Data Protection

All data transmission is encrypted using industry-standard protocols
We implement role-based access controls for our systems
Regular security audits and updates protect against threats
Data backups are securely stored and encrypted

Analytics and Cookies

Google Analytics

We use Google Analytics to understand how our services are used:

Page views, navigation patterns, and session duration
Browser type, device information, and screen resolution
General geographic information (city/region level only)
User interactions with features and content
IP addresses are anonymized in our Analytics configuration

Cookies and Tracking

Essential cookies: Required for login, security, and basic functionality
Analytics cookies: Help us understand usage patterns (can be opted out)
Preference cookies: Remember your settings and choices

You can control cookie preferences through your browser settings.

Information Sharing

We do not sell, rent, or trade your personal information. We may share information only in these limited circumstances:

Service Providers

Trusted third-party services that help us operate (hosting, email, analytics)
These providers are bound by strict confidentiality agreements
They can only use your information to provide services to us

Legal Requirements

When required by law, court order, or regulatory authority
To protect our rights, safety, or property, or that of our users
To investigate potential violations of our terms of service

Business Transfers

In the event of a merger, acquisition, or sale of assets
You would be notified of any change in ownership or data practices

Your Rights and Choices

Access and Control

Account Access: View and update your account information
Data Export: Download your content in standard formats
Data Deletion: Request deletion of your account and associated data
Communication Preferences: Opt out of marketing communications

European Users (GDPR)

If you're in the European Union, you have additional rights:

Right to access your personal data
Right to correct inaccurate information
Right to delete your data ("right to be forgotten")
Right to restrict or object to processing
Right to data portability
Right to withdraw consent

California Users (CCPA)

California residents have specific rights including:

Right to know what personal information is collected
Right to delete personal information
Right to opt-out of sale (note: we don't sell personal information)
Right to non-discrimination for exercising privacy rights

Data Retention

CWYT Application Content

Your stories and content are retained as long as your account is active
Content may be retained for up to 30 days after account deletion for recovery purposes
System logs and usage data are retained for up to 2 years for security and improvement purposes

Marketing and Website Data

Contact information is retained until you request removal or unsubscribe
Website analytics data is retained according to Google Analytics retention settings
Email engagement data is retained for up to 3 years for communication preferences

International Data Transfers

Your information may be processed and stored in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place for international data transfers.

Children's Privacy

CWYT is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will take steps to delete the information promptly.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of significant changes by:

Posting the updated policy on our website
Sending email notification for material changes
Providing notice within the CWYT application

Contact Us

If you have questions about this Privacy Policy or our data practices:

Email: hello@datamustflow.com
Website: datamustflow.com
Mail: Data Must Flow, Kirkland, WA, USA

For GDPR-related inquiries or to exercise your privacy rights, please include "Privacy Request" in your email subject line.

This policy is effective as of the date listed above and applies to all information collected by Data Must Flow through any of our services, websites, or communications.