Privacy Policy

Last updated: 13 July 2026

At Floats.ai, accessible from https://floats.ai, the privacy of our visitors and customers is one of our main priorities. This Privacy Policy describes the types of information we collect and record at Floats.ai, and how we use it. It applies to both our website and the Floats.ai application.

If you have any questions or require more information about this Privacy Policy, please do not hesitate to contact us.

Consent

By using our website and application, you consent to this Privacy Policy and agree to its terms.

Information we collect

The personal information you are asked to provide, and the reasons you are asked to provide it, will be made clear to you at the point we ask for it.

If you contact us directly, we may receive additional information about you such as your name, email address, phone number, the contents of your message and any attachments, and any other information you choose to provide.

When you register for an account, we may ask for contact information including your name, company name, address, email address, and telephone number.

All data uploaded within your Floats.ai account is isolated to that account and is not shared with any other account or user. Floats.ai administration staff may access your account data only in order to provide support or troubleshoot issues.

How we use your information

We use the information we collect in various ways, including to:

Provide, operate, and maintain our website and application
Improve, personalise, and expand our website and application
Understand and analyse how you use our website and application
Develop new products, services, features, and functionality
Communicate with you, including for customer service, to provide updates and other information relating to the service, and where you have opted in, for marketing and promotional purposes
Send you emails
Detect and prevent fraud

We will not use your personal information for purposes other than those described above unless we have your consent, or we are otherwise permitted to do so — for example, for specified law enforcement or public health and safety reasons, as permitted under the Privacy Act.

The purposes listed above describe how we handle account and website information generally. Data obtained through the Gmail integration (Google user data) is not used for these general purposes. It is used only as described in the "Google API Services and Gmail Integration" section below — that is, solely to provide and improve that feature — and is never used for marketing or promotional purposes, to serve advertising, or to develop new or unrelated products.

Google API Services and Gmail Integration

Floats.ai offers an optional integration that lets you connect your Google (Gmail) account so you can send emails — such as candidate communications and recruitment outreach — directly from within the Floats.ai application. This section explains how we access, use, store, and protect the Google user data involved.

What we access. When you choose to connect your Gmail account, you grant Floats.ai permission to send email on your behalf using the Gmail gmail.send scope. This scope allows our application to send messages through your Gmail account. It does not allow us to read, search, download, or delete the messages in your mailbox, and we do not request access to your inbox, contacts, or any other Gmail data.

How we use it. We use this access solely to send the emails you compose or trigger within Floats.ai — for example, sending a candidate profile or an outreach message to a recipient you have selected.

Purpose limitation. We use Google user data only to provide and improve this email-sending feature. We do not use Google user data for any other purpose. In particular, we do not use it for marketing or promotional purposes, to serve or personalise advertising, to build advertising or user profiles, to train generalised or non-personalised artificial intelligence or machine learning models, or to develop, test, or improve products, features, or services unrelated to this feature.

Limited Use. Floats.ai's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we do not transfer or sell Google user data to third parties for advertising or other purposes; we do not use Google user data to serve advertisements; and we do not allow humans to read your Google user data except where you have given explicit consent for specific messages, where it is necessary for security purposes such as investigating abuse, where required to comply with applicable law, or where the data has been aggregated and anonymised.

Storage. To maintain the connection, we securely store the OAuth access and refresh tokens that Google issues when you authorise the integration. These tokens are encrypted and used only to send email on your behalf. We do not retain the content of sent messages beyond what is necessary to operate, support, and audit the feature.

Revoking access. You can disconnect the Gmail integration at any time from your Floats.ai account settings, or by visiting your Google Account permissions page at https://myaccount.google.com/permissions and removing Floats.ai. Revoking access immediately stops Floats.ai from sending further email through your account. You may also request deletion of any stored tokens by contacting us using the details in the Data Deletion section below.

Data security

We take the security of your data seriously and apply a range of measures designed to protect the personal information and other data in our care, including sensitive data such as the Google user data described above, against unauthorised access, disclosure, alteration, or destruction.

Encryption in transit. All data exchanged between you, the Floats.ai application, and the third-party services we integrate with (including Google) is encrypted in transit using industry-standard TLS/HTTPS.
Encryption at rest. Sensitive data we store, including the OAuth access and refresh tokens issued for the Gmail integration, is encrypted at rest.
Access controls. Access to sensitive data is restricted to authorised Floats.ai personnel who require it to operate, support, or troubleshoot the service, following the principle of least privilege. As noted above, each customer's account data is isolated to that account and is not shared with any other account or user.

While no method of transmission or storage is completely secure, we continually review our safeguards and work to protect your data using commercially reasonable measures. If you have questions about our security practices, please contact us at [email protected].

Log files

Floats.ai follows a standard procedure of using log files. These files log visitors when they visit websites, and doing so is a standard part of hosting services and their analytics. The information collected by log files includes internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring and exit pages, and possibly the number of clicks. This information is not linked to any personally identifiable information. Its purpose is to analyse trends, administer the site, track users' movement around the website, and gather demographic information.

Cookies and web beacons

Like most websites, Floats.ai uses cookies. These cookies store information including visitors' preferences and the pages on the website that the visitor accessed or visited. We use this information to optimise users' experience by customising our web page content based on visitors' browser type and other information. We do not use cookies to serve third-party advertising.

You can choose to disable cookies through your individual browser settings. To find more detailed information about cookie management with specific web browsers, please refer to the respective browser's website.

Third-party services

Floats.ai integrates with certain third-party services (such as Google) to provide features within our application, and relies on standard hosting and infrastructure providers to operate our service. This Privacy Policy does not apply to other websites or services. We encourage you to review the privacy policies of any third-party services you connect to or interact with for more detailed information about their practices.

CCPA privacy rights (Do Not Sell My Personal Information)

Under the CCPA, among other rights, California consumers have the right to:

Request that a business that collects a consumer's personal data disclose the categories and specific pieces of personal data it has collected about that consumer.
Request that a business delete any personal data about the consumer that it has collected.
Request that a business that sells a consumer's personal data not sell that consumer's personal data.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.

GDPR data protection rights

We want to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

The right to access — You have the right to request copies of your personal data. We may charge a small fee for this service.
The right to rectification — You have the right to request that we correct any information you believe is inaccurate, and to request that we complete information you believe is incomplete.
The right to erasure — You have the right to request that we erase your personal data, under certain conditions.
The right to restrict processing — You have the right to request that we restrict the processing of your personal data, under certain conditions.
The right to object to processing — You have the right to object to our processing of your personal data, under certain conditions.
The right to data portability — You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.

Data deletion

You can request that your personal data be deleted at any time. Please make this request by email to [email protected] and we will process your request within one month. This includes any OAuth tokens or other data associated with the Gmail integration.

Children's information

Protecting children online is another of our priorities. We encourage parents and guardians to observe, participate in, and monitor and guide their children's online activity.

Floats.ai does not knowingly collect any personally identifiable information from people under the age of 18. If you believe that your child provided this kind of information on our website or application, please contact us immediately and we will do our best to promptly remove such information from our records.