Privacy Policy

Effective Date: 19 March 2026 | Last Updated: 19 March 2026

FlagIQ ("we," "us," or "our") operates the website flagiq.io and provides AI-powered due diligence and intelligence reporting services. This Privacy Policy describes how we collect, use, store, and protect your information when you use our services.

1. Information We Collect

When you submit a request through our platform, we may collect:

Personal Information: Full name, email address, company name
Investigation Subject Data: Names, company names, registration numbers, passport numbers, wallet addresses, and other identifying information you provide about third parties for due diligence purposes
Uploaded Documents: KYC documents, PDFs, images, and other files you upload for analysis
Account Data: Email and authentication credentials created during form submission
Usage Data: IP address, browser type, pages visited, and access timestamps (collected automatically)

2. How We Use Your Information

We use the information collected to:

Process and fulfil your due diligence report requests
Create and manage your account
Communicate with you regarding your requests and deliver reports
Improve our services and platform
Comply with applicable laws and regulations

3. Data Storage & Security

Your data is stored securely using Google Firebase infrastructure, including:

Firebase Authentication for account management
Cloud Firestore for request data (encrypted at rest)
Cloud Storage for uploaded documents (encrypted at rest and in transit)

We implement reasonable administrative, technical, and physical safeguards to protect your data. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

4. Data Sharing & Third Parties

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:

Service Providers: We use Google Firebase/Google Cloud Platform for hosting, storage, and authentication. Their privacy practices are governed by Google's Privacy Policy.
Legal Requirements: We may disclose information if required to do so by law, regulation, court order, or other governmental authority.
Protection of Rights: We may disclose information to protect our rights, property, safety, or the rights, property, or safety of others.

5. Investigation Subject Data

Information you provide about third parties (investigation subjects) is used solely for the purpose of conducting the due diligence investigation you have requested. By submitting this information, you represent and warrant that you have a legitimate and lawful basis for requesting this investigation.

We do not contact investigation subjects or notify them that an investigation has been conducted. All investigations are based on publicly available, open-source intelligence (OSINT) data.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide you services. Request data and uploaded documents are retained for a maximum of 12 months after report delivery, after which they are permanently deleted unless otherwise required by law.

You may request deletion of your data at any time by contacting us at privacy@flagiq.io.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Object to or restrict processing of your data
Receive your data in a portable format

To exercise any of these rights, contact us at privacy@flagiq.io.

8. Cookies

Our website uses essential cookies required for Firebase Authentication functionality. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your own, including the United States (where Google Cloud infrastructure is located). By using our services, you consent to such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of our services after changes constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: privacy@flagiq.io
Website: flagiq.io