Compliance

FluxLink is built with privacy, security, and regulatory alignment as first-class requirements. This page summarizes the controls and policies we maintain to support enterprise partnerships.

Privacy & Data Protection

GDPR

We support privacy-by-design practices, maintain clear data handling processes, and provide mechanisms to request access, correction, or deletion where applicable.

CCPA / CPRA

We respect applicable consumer privacy rights. We aim to minimize data collection to what is necessary and provide appropriate opt-out pathways as required.

Data Minimization

We focus on using high-quality intent signals and avoid collecting unnecessary sensitive information for marketing operations.

Security Controls

Access Control

Principle of least privilege, role-based access, and operational logging.

Data Security

Encryption in transit and at rest where appropriate, plus routine secure configuration reviews.

Vulnerability Management

Regular updates, dependency monitoring, and remediation workflows.

Incident Response

Defined response process with escalation, containment, and post-incident review.

Marketing & Communications

CAN-SPAM

We aim to ensure marketing emails are appropriately identified and include a practical unsubscribe mechanism where required.

Advertising Policies

We work to maintain transparent ad delivery and measurement practices aligned with applicable platform and regulatory requirements.