Privacy Policy
Effective July 17, 2026
Scope
This policy explains how FL2ai.com handles information submitted through this website. It applies to the public marketing site, contact form, and the private lead-management dashboard. Third-party sites linked from FL2ai.com have their own privacy practices.
Information we collect
When you use the contact form, we collect the information needed to review and respond to your inquiry:
- Your inquiry type, name, email address, message, and any optional company or phone information you provide
- The page path, page title, referrer, and campaign parameters associated with the inquiry
- Your IP address and browser user-agent for abuse prevention and request context
Do not submit protected health information, patient records, medical images, government identifiers, financial account data, passwords, or other sensitive personal information. FL2ai.com is not a clinical or HIPAA intake channel.
How we use information
- To respond to founder, healthcare-organization, and strategic-partner inquiries
- To evaluate fit, record follow-up notes, and manage the inquiry through a private dashboard
- To understand which pages or campaigns led to an inquiry
- To prevent spam, automated abuse, unauthorized access, and other security incidents
- To comply with lawful requests and protect the rights, safety, and integrity of the site and its users
We do not sell contact-form information or use it for unrelated automated decision-making.
Service providers
- Vercel hosts the website. Contact records are stored as private objects in Vercel Blob.
- Upstash provides distributed abuse-prevention counters. Rate-limit keys use one-way HMAC identifiers instead of raw email addresses, usernames, or IP addresses.
We may also disclose information when required by law or reasonably necessary to protect the site or others.
Storage, retention, and security
Contact records are restricted to authorized administrators. We use private storage, signed HTTP-only admin sessions, same-origin request checks, input limits, honeypot filtering, rate limiting, and secure transport controls. We periodically review records and delete information when it is no longer needed for the inquiry, operations, security, or legal obligations. No internet transmission or storage system can be guaranteed completely secure.
Your choices
You may ask whether we hold a contact record associated with you and request correction or deletion, subject to security, legal, and record-integrity needs. Email request access or deletion. We may need to verify your identity before acting on a request.
Children
This website is intended for business and professional audiences and is not directed to children under 13. Do not submit information about a child through the contact form.
Changes and contact
We may update this policy when the site or its providers change. The effective date above identifies the current version. Questions may be sent to admin@goodsam.ai.