Privacy Policy

This Privacy Policy describes how Comix-Flow (“Comix-Flow,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information in connection with our website (us.comix-flow.com) and our done-for-you AI agency services. Comix-Flow is operated by an Israeli company that provides services to clients located in the United States. Data may therefore be processed in both the United States and Israel, as well as by our vetted service providers in other locations. See Section 12 (International Data Transfers) below.

This Policy applies to information about visitors to our website and prospects, and to personal information we process on behalf of our business clients when providing the services (“Client Data”). When we process Client Data on behalf of a business client, that client is the controller / business and we act as a processor / service provider. Their privacy notice governs how they collect and use that data; this Policy explains our own practices.

Information you give us directly. When you request a demo, contact us, or otherwise interact with the site, we collect information such as your name, business name, business email, phone number, approximate monthly call minutes, how you heard about us, your consent to our Terms and this Policy, and anything else you choose to send us.

Client Data processed on behalf of clients. To operate AI agents for our clients we process: call audio recordings and transcripts; SMS, WhatsApp, and web-chat messages; caller phone numbers, names, and other identifiers provided during a conversation; scheduling data (appointments, no-shows); CRM records (contact, pipeline stage, notes, tags); and metadata (timestamps, channel, agent used, outcome, quality scores).

Automatically collected information. Server logs, IP address, browser type, device identifiers, referring URLs, pages viewed, and similar usage information. We use cookies and similar technologies to operate the site, remember preferences, measure performance, and support advertising.

• Respond to demo requests, provide quotes, and communicate with prospects and clients;
• Provide, operate, secure, and improve the services and the platform;
• Train and tune AI agents on aggregated and de-identified interaction data, and score / optimize quality on a per-client basis;
• Detect and prevent fraud, abuse, and security incidents;
• Comply with legal obligations, enforce our agreements, and defend claims;
• Marketing, including advertising, measurement, and retargeting on platforms like Meta.

We use cookies, pixels, and similar technologies for site operation and marketing. In particular, we use the Meta (Facebook) Pixel on this website to measure the performance of our advertising, understand which pages and actions lead to demo requests, and enable retargeting on Meta platforms (Facebook and Instagram). The Meta Pixel may set cookies and transmit certain events (for example, page views, form submissions, and scheduled demos) along with hashed identifiers to Meta.

You can opt out of interest-based advertising through your browser and device settings, through Meta’s ad preferences, and through the industry opt-out pages at optout.aboutads.info and optout.networkadvertising.org. You can also enable Global Privacy Control (GPC) in supported browsers, which we treat as an opt-out of “sale” and “sharing” for targeted advertising as described in Section 10.

We share personal information with:

• Service providers / subprocessors, including telephony carriers and messaging aggregators, cloud hosting and database providers, AI model providers, email delivery, scheduling providers (including Calendly), CRM providers, and advertising and analytics platforms (including Meta);
• Our clients, when we are processing information on their behalf (for example, delivering a lead captured through their agent);
• Legal and safety recipients, when required by law, subpoena, or other legal process, or to protect rights, property, or safety;
• Corporate transactions, in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality obligations.

We do not sell personal information for money. Some sharing for advertising and analytics may qualify as “sale” or “sharing” under certain state privacy laws — see Section 10.

Calls, messages, and chats handled by our AI agents may be recorded, transcribed, and stored for quality assurance, safety, dispute resolution, and continuous optimization of the services. Recording law varies by state; some states require all-party consent (including California, Florida, Illinois, Maryland, Massachusetts, Montana, New Hampshire, Pennsylvania, and Washington). When we operate agents on behalf of a client, that client is responsible for approving and configuring the required recording disclosures for their calling regions.

We retain personal information for as long as needed to provide the services, meet the retention requirements in our client agreements, comply with our legal obligations, resolve disputes, and enforce our agreements. Retention periods differ by data type — for example, call recordings and transcripts may be retained for the duration of the client engagement plus a limited period thereafter, while marketing contact records are retained until you unsubscribe or ask for deletion. When personal information is no longer required, we delete or de-identify it.

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, least-privilege permissions, logging, and vendor due diligence on subprocessors. No security program is perfect, and we cannot guarantee absolute security. Please use good security hygiene with any accounts and credentials associated with the services.

Depending on where you live, you may have rights under state privacy laws, including the California Consumer Privacy Act as amended by the CPRA, and analogous laws in Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and Texas (TDPSA). These rights may include the right to:

• Know what personal information we hold about you and how it is used and shared;
• Access or receive a copy of your personal information;
• Correct inaccurate personal information;
• Delete personal information, subject to legal exceptions;
• Opt out of the sale or sharing of personal information and out of targeted advertising;
• Limit the use of sensitive personal information, where applicable;
• Not be discriminated against for exercising your rights.

You can exercise these rights by emailing us at hello@comix-flow.com. We will verify your request and respond within the time period required by applicable law. You may designate an authorized agent to submit a request on your behalf. If your personal information was collected by us on behalf of one of our clients, we will refer your request to that client, who is the controller / business for that data.

We do not sell personal information for money. However, our use of the Meta Pixel and similar advertising technologies may qualify as “sharing” for cross-context behavioral advertising or “sale” under some state privacy laws. To opt out of this activity:

• Email hello@comix-flow.com with the subject “Do Not Sell or Share” and the browser / device you want us to opt out;
• Enable Global Privacy Control (GPC) in a supported browser — we treat GPC signals as valid opt-out requests for the browser sending the signal;
• Adjust your ad preferences directly on Meta and other advertising platforms.

Our services are directed to businesses. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

Comix-Flow is operated by an Israeli company serving clients located in the United States. Personal information collected through the site or the services may be transferred to, stored, and processed in the United States, Israel, and other countries where we or our subprocessors operate. Israel has been recognized by the European Commission as providing an adequate level of data protection, and we use appropriate safeguards for cross-border transfers where required by applicable law. By using the services, you consent to the transfer, storage, and processing of your information in these countries.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top and, if the changes are material, provide additional notice (such as through the website or by email). Your continued use of the services after the effective date of a change constitutes acceptance of the updated Policy.

Questions or requests about this Policy? Contact us at hello@comix-flow.com.