PRIVACY POLICY
Effective date: January 2026
Last Updated: May 2026
FlipWork Inc. | Privacy Policy
FlipWork, Inc. (“FlipWork”, “we”, “us”, or “our”) is committed to protecting your privacy and handling your personal information with transparency, care, and respect. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit our website (flipwork.ai), purchase or access our products and programs (collectively, the “Services”), or otherwise interact with us.
By using our Services or our website, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree, please do not use our Services. This Privacy Policy is incorporated by reference into our Terms of Service.
1. INFORMATION WE COLLECT
We collect the following categories of personal information:
(a) Information You Provide Directly:
• Registration and account information: name, email address, job title, employer, industry, and password when you create an account or register for a program.
• Assessment and program data: your responses to the FlipFactor assessment, FlipLab program activities, and any other diagnostic tools or program materials, including psychometric and behavioral data generated through your use of our Services.
• Payment information: billing name, address, and credit card or payment details. Note that payment card data is processed by our third-party payment processor and is not stored by FlipWork.
• Communications: information you provide when you contact us by email, through our website contact form, or otherwise, including the content of your messages.
• Profile and preference data: any information you choose to provide in your account profile or program settings.
(b) Information We Collect Automatically:
• Usage data: pages visited, features used, time spent, clicks, and other interactions with our website and Services.
• Device and technical data: IP address, browser type and version, operating system, device identifiers, and referring URLs.
• Cookies and similar technologies: we use cookies, web beacons, and similar tracking technologies as described in Section 6 below.
(c) Information From Third Parties:
• If you access our Services through a third-party platform or single sign-on provider, we may receive basic profile information from that provider.
• If you were referred to FlipWork by an employer or organization, we may receive your name and contact information from that organization in connection with your enrollment.
2. HOW WE USE YOUR INFORMATION
We use your personal information for the following purposes:
• To provide, operate, and improve our Services, including processing your enrollment and payment, delivering program content, generating your FlipFactor assessment report, and providing access to FlippyAI.
• To personalize your experience and tailor program content, coaching, and recommendations to your individual profile and archetype.
• To communicate with you about your account, purchases, program updates, and support requests.
• To send you marketing and promotional communications, including newsletters and information about new FlipWork programs and offerings, where you have consented or where permitted by applicable law. You may opt out at any time as described in Section 7.
• To conduct research, analytics, and product development, including using anonymized and aggregated data derived from your use of the Services to improve our diagnostic tools, benchmarking databases, and program effectiveness. Such aggregated data does not identify you individually.
• To comply with our legal obligations, enforce our Terms of Service, protect the rights and safety of FlipWork and our users, and respond to legal process or government requests.
• To maintain records of your acceptance of our Terms of Service and this Privacy Policy, including the date, time, and version accepted.
3. LEGAL BASIS FOR PROCESSING (EEA AND UK CUSTOMERS)
If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data on the following legal bases under the General Data Protection Regulation (GDPR) or UK GDPR:
• Contract performance: processing necessary to provide the Services you have purchased and to fulfill our obligations under our Terms of Service (e.g., delivering your FlipFactor report, providing program access).
• Legitimate interests: processing necessary for our legitimate business interests, such as improving our Services, preventing fraud, and maintaining the security of our platform, where such interests are not overridden by your rights.
• Consent: where we rely on your consent, such as for marketing communications or the use of non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
• Legal obligation: processing necessary to comply with applicable laws and regulations.
The FlipFactor assessment collects psychometric and behavioral data that may constitute “special category” data under the GDPR (specifically, data revealing psychological characteristics). We process such data on the basis of your explicit consent, which you provide when you complete the assessment. You may withdraw this consent at any time by contacting us at [[email protected]], but doing so may affect your ability to use certain features of our Services.
4. HOW WE SHARE YOUR INFORMATION
We do not sell your personal information. We share your personal information only in the following circumstances:
(a) Service Providers.
We share your information with trusted third-party vendors who assist us in operating our business and delivering our Services, including payment processors, email and communication platforms, cloud hosting providers, analytics providers, and learning management system providers. These vendors are contractually required to use your information only to provide services to us and in accordance with applicable law.
(b) Organizational Clients.
If your enrollment in a FlipWork program was arranged or paid for by your employer or another organization, we may share relevant program participation and completion data with that organization as agreed at the time of enrollment. Individual assessment responses and psychometric data are not shared with your employer without your express consent, except in aggregated and anonymized form.
(c) Business Transfers.
If FlipWork is involved in a merger, acquisition, reorganization, or sale of all or substantially all of its assets, your information may be transferred as part of that transaction. We will provide notice before your personal data is transferred and becomes subject to a different privacy policy.
(d) Legal Requirements.
We may disclose your information if required to do so by applicable law, regulation, legal process, or governmental request, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of FlipWork, our users, or the public.
(e) With Your Consent.
We may share your information for other purposes with your prior consent.
5. INTERNATIONAL DATA TRANSFERS
FlipWork is based in the United States. If you are located outside the United States, your personal data will be transferred to and processed in the United States, which may have different data protection laws than your country of residence.
EEA and UK Customers: Transfers of personal data from the EEA or UK to the United States will be conducted using appropriate safeguards in accordance with the GDPR and UK GDPR, including Standard Contractual Clauses (SCCs) approved by the European Commission or UK Information Commissioner’s Office, as applicable. By using our Services, you acknowledge that your data will be transferred to the United States. You may request a copy of the applicable transfer mechanisms by contacting us at [[email protected]].
Mexican Customers: We process personal data from Mexico in accordance with the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP). Our Privacy Notice (Aviso de Privacidad) for Mexican data subjects is incorporated into this Privacy Policy. Your personal data may be transferred outside of Mexico in accordance with applicable law.
Australian Customers: We process personal information from Australia in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. We take reasonable steps to ensure that any overseas recipients of your information protect it in accordance with the Australian Privacy Principles.
New Zealand Customers: We process personal information from New Zealand in accordance with the Privacy Act 2020 (NZ). We take reasonable steps to ensure that any overseas recipients of your information protect it in a manner comparable to the Privacy Act 2020.
6. COOKIES AND TRACKING TECHNOLOGIES
6.1. Types of Cookies We Use.
We use the following types of cookies and similar technologies on our website and Services:
• Essential cookies: necessary for the operation of our website and Services, such as session management and authentication. These cannot be disabled.
• Analytics cookies: help us understand how visitors interact with our website, including which pages are visited and how long users spend on each page. We use this information to improve our Services.
• Functionality cookies: allow our website to remember your preferences and provide enhanced features.
• Marketing cookies: used to deliver relevant advertisements and track the effectiveness of our marketing campaigns, where you have consented.
6.2. Your Cookie Choices.
Where required by applicable law (including in the EEA and UK), we will obtain your consent before placing non-essential cookies. You can manage your cookie preferences through our cookie consent tool on our website, or through your browser settings. Please note that disabling certain cookies may affect the functionality of our Services.
7. YOUR RIGHTS AND CHOICES
Depending on your location, you may have certain rights regarding your personal information. We honor these rights for all customers to the extent required by applicable law.
All Customers:
• Access: you may request a copy of the personal information we hold about you.
• Correction: you may request that we correct inaccurate or incomplete personal information.
• Deletion: you may request that we delete your personal information, subject to certain exceptions (e.g., where retention is required by law or necessary to complete a transaction).
• Marketing opt-out: you may opt out of receiving marketing communications from us at any time by clicking the “unsubscribe” link in any marketing email or by contacting us at [[email protected]].
• Data portability: you may request a copy of your personal information in a structured, commonly used, machine-readable format.
EEA and UK Customers (GDPR / UK GDPR):
• Right to restrict processing: you may request that we restrict the processing of your personal data in certain circumstances.
• Right to object: you may object to processing based on our legitimate interests or for direct marketing purposes.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.
• Right to lodge a complaint: you have the right to lodge a complaint with your local data protection supervisory authority. A list of EEA supervisory authorities is available at edpb.europa.eu. The UK supervisory authority is the Information Commissioner’s Office (ico.org.uk).
Mexican Customers (LFPDPPP — ARCO Rights):
• You have the right to Access, Rectify, Cancel, and Object (ARCO Rights) to the processing of your personal data. To exercise these rights, please contact us at [[email protected]] with your name, a description of the right you wish to exercise, and sufficient information to identify your account. We will respond within 20 business days as required by law.
Australia and New Zealand Customers:
• You have the right to access and correct your personal information. To make a request, please contact us at [[email protected]].
To exercise any of the rights above, please contact us at [[email protected]]. We may need to verify your identity before processing your request. We will respond within the timeframes required by applicable law and will not discriminate against you for exercising your rights.
8. DATA RETENTION
We retain your personal information for as long as necessary to provide our Services, fulfill the purposes described in this Privacy Policy, and comply with our legal obligations. Specifically:
• Account and registration data is retained for the duration of your account and for a reasonable period thereafter.
• Assessment and program data is retained for the period of your program access and for up to three (3) years thereafter, to support trend reporting and longitudinal insights available through the Services.
• Payment records are retained as required by applicable tax and financial regulations, typically seven (7) years.
• Marketing consent and opt-out records are retained indefinitely to honor your preferences.
When we no longer need your personal information, we will securely delete or anonymize it.
9. SECURITY
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include encryption of data in transit and at rest, access controls, and regular security assessments. However, no method of transmission over the internet or electronic storage is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and, where required, the relevant supervisory authority, within the timeframes required by applicable law.
10. CHILDREN’S PRIVACY
Our Services are not directed to individuals under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have inadvertently collected personal information from a child, please contact us immediately at [[email protected]] and we will take steps to delete such information.
11. THIRD-PARTY LINKS AND SERVICES
Our website and Services may contain links to third-party websites or integrate with third-party platforms. This Privacy Policy does not apply to those third-party sites or services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.
12. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or our Services. When we make material changes, we will notify you by posting the updated Privacy Policy on our website and, where required by law, by sending you a direct notification by email. The updated Privacy Policy will be effective thirty (30) days after notice is provided, unless a shorter period is required by law. Your continued use of our Services after the effective date of the updated Privacy Policy constitutes your acceptance of the changes.
CONTACT US
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
FlipWork, Inc.
Email: [email protected]
Website: flipwork.ai
For data protection inquiries from EEA or UK customers, please indicate “GDPR Request” or “UK GDPR Request” in the subject line of your email. For Mexican customers, please indicate “ARCO Rights Request.” We will respond within the timeframes required by applicable law.
