Publication checklist: Before this notice is used in production, dFlowIQ Labs must replace the example privacy email and add its full legal entity name, registered address and applicable company registration details.
Last updated: 13 August 2026
1. Who is responsible for your data?
dFlowIQ Labs is the controller for personal data collected through this website and for optional diagnostic data submitted by the dFlow~IQ desktop application. Contact: dflowiq.labs@cognizance-io.com. The full controller address will be published before this site goes live.
2. Website data
This website does not set analytics or advertising cookies and does not use non-essential tracking. The hosting provider may process limited request data, such as IP address, user agent, requested URL and timestamp, to deliver and secure the service.
| Purpose | Data | UK/EU GDPR basis | Retention |
|---|---|---|---|
| Deliver and secure the website | IP address, request and security logs | Legitimate interests in reliable, secure service delivery | Set by the future hosting provider and documented before launch |
| Respond to enquiries | Your email address and message | Legitimate interests or steps requested before entering a contract | Only as long as needed to resolve the enquiry and meet legal obligations |
3. Desktop application data
Your Kafka messages, topic names, connection endpoints, credentials, workspace details, AI prompts, screenshots and local files are not collected by the dFlowIQ website. The desktop app connects directly from your computer to services that you configure.
Optional product analytics
If you actively opt in, the app may submit app version, build channel, coarse operating system and CPU family, plus bounded app-start, connection outcome and feature-use events. A random session identifier exists only in memory for that launch. The intended retention period is 12 months.
Optional crash and error reporting
If you actively opt in, the app may submit unexpected application defect categories and sanitised dFlowIQ stack frames. Raw messages, local paths, screenshots, attachments, requests and breadcrumbs are excluded. The intended retention period is 30 days.
Each option is independent, disabled until you choose it, and can be withdrawn at any time in Settings → Privacy & telemetry without limiting application access. Consent is the lawful basis for these optional submissions.
4. AI providers
dFlow~IQ lets you configure third-party or local AI providers. If you choose a hosted provider and approve sending contextual content, that provider processes the submitted content under its own terms and privacy notice. Review the destination before submitting Kafka or schema context. Conversation history remains in memory for the current app session, but the selected provider may retain submitted content according to its policy.
5. International transfers
The production hosting and diagnostic providers have not yet been finalised. Before launch, this notice will identify relevant providers, processing locations and safeguards such as adequacy regulations or approved standard contractual clauses where required.
6. Your rights
Depending on the circumstances, UK and EU data protection law may give you rights to access, rectify, erase or restrict your personal data, object to processing, receive portable data, and withdraw consent without affecting earlier lawful processing.
You may also complain to your local supervisory authority. In the UK this is the Information Commissioner’s Office. EU residents can find their authority through the European Data Protection Board.
7. Children
The website and desktop application are professional developer tools and are not directed at children.
8. Changes
Material changes will be reflected by updating this notice and its date. Where consent is required for a new purpose, it will be requested before that processing begins.