Quick Insights Data Solutions Private Limited, doing business as Yukosa ("we," "us," or "our"), is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our meta-flow Intelligent Process Automation (IPA) product and related services (collectively, the "Services").

meta-flow Hybrid Architecture :

meta-flow operates using a hybrid cloud and on-premises architecture:

• Web-Based UI (Cloud): You access meta-flow features through a web browser. This UI is hosted by Yukosa and used for designing workflows, managing automations, configuring Bots, and monitoring execution.
• meta-flow Agent (On-Premises): To execute automated workflows, you must download and install the meta-flow Agent (also called the Execution Engine) on your local machines. All process execution and business data processing occurs locally on your infrastructure via this Agent.
• Data Storage: Workflow configurations and metadata are stored in Yukosa's cloud infrastructure. Business data processed by your Workflows remains on your local machines and is not transmitted to or stored on Yukosa's servers.

This policy applies to information collected through the meta-flow website, web-based platform UI, meta- flow Agent, and any other services we provide.

Information You Provide Directly

Account Information: When you create an account, we collect:

• Email address
• Company name and business details
• Job title and department
• Username and password
• Billing and payment information

Customer Data: Information you upload, process, or transmit through the Services.

Stored in Yukosa Cloud:

• Workflow definitions and Bot configurations
• Automation schedules and orchestration rules
• User-defined variables and parameters (non-sensitive)
• Execution metadata (timestamps, status, duration)
• Dashboard configurations (encrypted) Integration credentials for third-party systems (encrypted and stored locally)

Processed Locally on Your Infrastructure:

• Documents and files processed by your Workflows (stays on your machines)
• Input data accessed (stays on your machines)
• Business process data and transaction information (stays on your machines)
• Screen captures and application data during Bot execution (stays on your machines)
• Detailed execution logs containing business data (stays on your machines)

Communications: Information from your interactions with us:

• Customer support inquiries and correspondence
• Feedback, surveys, and testimonials
• Event registrations and webinar participation

Information Collected Automatically

From Web-Based UI Usage:

• Log-in activity and session information
• Features accessed and UI navigation patterns
• Workflow creation and modification activities

From meta-flow Agent:

• Agent installation and version information
• Agent registration and activation data
• Bot execution statistics (count, duration, success/failure rates)
• Performance metrics (CPU, memory usage during execution)
• Error logs and diagnostic information (without business data content)
• Agent-to-platform heartbeat and connectivity status

Device and Browser Information:

• IP address (for web UI access and license validation)
• Browser type and version
• Operating system and version
• Device type (desktop, workstation)
• Application version (for meta-flow Agent)

Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to:

• Maintain your session and preferences
• Analyze usage patterns and improve Services
• Provide personalized content
• Measure marketing effectiveness

See Section 8 for detailed cookie information.

Information from Third Parties

We may receive information from:

• Business partners and resellers
• Third-party authentication services (SSO providers)
• Data enrichment services for business contact information
• Payment processors for transaction completion
• Marketing and analytics providers

Service Delivery and Operations

• Provide, maintain, and improve the Services (both web UI and meta-flow Agent)
• Process your transactions and manage subscriptions
• Authenticate users and maintain account security
• Enable communication between meta-flow Agent and the platform
• Provide customer support and respond to inquiries
• Monitor and analyze usage to improve performance
• Develop new features and functionality
• Troubleshoot technical issues and prevent fraud
• Manage workflow orchestration and scheduling 
• Generate execution reports and analytics dashboards

Communications

• Send service announcements and updates
• Provide technical notices and security alerts
• Respond to your requests and questions
• Send marketing communications (with your consent)
• Conduct surveys and request feedback
• Invite you to events and webinars

Business Operations

• Process payments and maintain financial records
• Comply with legal obligations and enforce our policies
• Protect against fraud, abuse, and security threats
• Conduct internal analytics and business intelligence
• Evaluate and improve our business operations

Legal Bases for Processing (DPDP Act)

We process personal data based on :

• Contract Performance : To provide Services you've requested
• Legitimate Interests : To improve Services, ensure security, and conduct business operations
• Legal Compliance : To meet regulatory and legal obligations
• Consent : For marketing communications and optional features (where required)

Service Providers and Partners

We share information with trusted third parties who assist in:

• Cloud hosting for our web-based UI and platform infrastructure
• Payment processing and billing
• Customer support and communication tools
• Analytics and performance monitoring (aggregate data only)
• Marketing and advertising platforms
• Email delivery services

Business Transfers

In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

Legal Requirements

We may disclose information when required to:

• Comply with applicable laws, regulations, or legal processes
• Respond to lawful requests from government authorities
• Enforce our Terms of Use and other agreements
• Protect our rights, property, safety, or that of users and the public
• Detect, prevent, or address fraud, security, or technical issues

With Your Consent

We may share information with third parties when you explicitly consent, such as:

• Integrating with third-party applications you authorize
• Sharing testimonials or case studies (with your approval) 
• Participating in partner programs or co-marketing activities

Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably identify you for research, analytics, benchmarking, or marketing purposes.

Security Measures

We implement comprehensive security measures to protect your information

Cloud Infrastructure Security (Web UI):

• Encryption of data in transit (TLS 1.3/1.2+) for all web communications
• Encryption of data at rest (AES-256) for stored workflow configurations
• Multi-factor authentication options for account access
• Regular security assessments and penetration testing
• Secure API authentication and authorization
• Access controls and role-based permissions
• Intrusion detection and prevention systems
• Regular security patches and updates

Agent-to-Platform Communication :

• Encrypted communication channels between meta-flow Agent and cloud platform
• Secure authentication tokens for Agent registration
• Certificate-based validation
• Minimal data transmission (only metadata, no business data)

Local Execution Security (Your Responsibility)

Since meta-flow Agent executes on your infrastructure, you maintain control over:

• Encryption of business data and Bot configurations on your machines
• Access controls to workstations running meta-flow Agent
• Network security and firewall configurations
• Local backup and disaster recovery procedures
• Physical security of machines running the Agent
• Operating system and application security patches
• Antivirus and endpoint protection

Organizational Safeguards:

• Employee training on data protection
• Access controls based on least privilege principle
• Background checks for personnel with access to customer information
• Incident response and breach notification procedures
• Regular security audits and compliance reviews

Security Certifications

meta-flow maintains industry-standard certifications including[list relevant certifications such as ISO 27001, ISO 9001, SOC2 Type 2, etc.].

Your Responsibility

You are responsible for:

• Maintaining the confidentiality of account credentials
• Using strong passwords and enabling MFA
• Promptly reporting security concerns
• Securing machines where meta-flow Agent is installed
• Implementing appropriate data protection measures on your infrastructure
• Controlling access to systems and data processed by your Bots
• Maintaining backups of your Bot configurations and workflows
• Keeping the meta-flow Agent software updated
• Monitoring Agent activity and logs on your machines
• Ensuring proper network security for Agent-to-platform communication

Retention Periods

We retain personal information for as long as necessary to:

• Provide the Services and maintain your account
• Comply with legal, accounting, or regulatory requirements
• Resolve disputes and enforce our agreements
• Achieve legitimate business purposes

Specific Retention Periods:

• Account information : Duration of account plus 7 years
• Workflow configurations and Bot definitions : Duration of account plus 90 days
• License and activation data :Duration of license plus 3 years
• Execution metadata (anonymized) : 13 months
• Usage telemetry and analytics : 13 months
• Support communications : 3 years
• Financial records : 7 years

Business Data and Execution Logs :Since business data and detailed execution logs containing your process information are stored on your local infrastructure by the meta-flow Agent, you control their retention and deletion. Yukosa does not retain this data on our servers.

Workflow Designs :Workflow configurations created in the web UI are stored in our cloud infrastructure and retained as specified above.

Deletion

Upon account termination or upon request :

• You may export your workflow configurations and Bot definitions within 30 days
• We will delete or anonymize your account information and stored workflow data within 90 days
• Some information may be retained as required by law or for legitimate business purposes
• Cloud backups may retain data for up to 90 days

Your Local Data : Bot execution logs, business data, and process information stored on your machines by the meta-flow Agent must be deleted by you, as Yukosa does not have access to or control over this information. You should uninstall the meta-flow Agent and clean up local data according to your data retention policies.

Access and Portability

You have the right to :

• Access your personal information
• Request a copy of your data in a portable format
• Review and update your account information

Correction and Deletion

You may :

• Correct inaccurate or incomplete information
• Request deletion of your personal information (subject to legal retention requirements)
• Deactivate or delete your account

Objection and Restriction

You may :

• Object to processing based on legitimate interests
• Restrict processing in certain circumstances
• Opt out of marketing communications at any time

Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time without affecting prior processing.

How to Exercise Rights

To exercise these rights

• Access your account settings to update information
• Email meta-flow.support@yukosa.com with specific requests
• Contact our Data Protection Officer (details in Section 13). We will respond to requests within 30 days (or as required by applicable law).

Regional-Specific Rights

European Economic Area (EEA) and UK:

• Lodge complaints with supervisory authorities
• Request human review of automated decisions
• Data portability to another service provider

California (CCPA/CPRA) :

• Know what personal information is collected and sold
• Opt out of sale or sharing of personal information
• Correct inaccurate information
• Limit use of sensitive personal information

Types of Cookies We Use 

Essential Cookies: Required for Services to function

• Session management and authentication
• Security and fraud prevention
• Load balancing

Performance Cookies : Help us improve Services

• Analytics and usage statistics
• Error tracking and debugging
• Performance monitoring

Functionality Cookies : Enhance your experience

• Preferences and settings
• Language and region selection
• Personalized features

Marketing Cookies : Used for advertising (with consent)

• Ad targeting and retargeting
• Campaign effectiveness measurement
• Social media integration

Managing Cookies

You can control cookies through :

• Browser settings (most browsers allow you to refuse cookies)
• Our cookie preference Center
• Third-party opt-out tools (NAI, DAA)

meta-flow operates globally and may transfer information to countries outside your residence. We ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions for certain countries
• Binding Corporate Rules where applicable
• Your explicit consent when required

Data may be stored and processed in [list primary data center locations].

The Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected information from a child, we will delete it promptly. If you believe we have information about a child, please contact us at meta-flow.support@yukosa.com.

The Services may contain links to third-party websites, applications, or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information. When you integrate third-party services with meta-flow, those services' privacy policies and terms apply to data they collect and process.

We may update this Privacy Policy periodically to reflect changes in our practices, Services, or legal requirements. We will notify you of material changes by:

• Posting the updated policy with a new effective date
• Sending email notification to registered users
• Displaying a prominent notice in the Services

Your continued use after changes become effective constitutes acceptance of the updated policy.

General Privacy Inquiries

Data Protection Officer

• meta-flow.ai Auto Extension
• meta-flow.ai Manual Extension
• Gmail-Connector Terms of Services
• Gmail-Connector Privacy Policy