Privacy notice

This is a draft. A lawyer reviews it before anyone outside our own sites can sign up, and the roles, legal bases and retention periods below may change in that review. Notes for the review are marked "For the review".

This notice explains what Flash staging does with personal data: the data of people who write to a profile, of the people behind profiles, of the staff of the companies that use Flash staging, and of anyone who reads this site.

Who we are

Flash staging is a chat service that companies (we call them partners) add to their own sites. It runs on servers of its own, apart from any other service, and shares no data or accounts with one.

For the review: the operator's legal name, address and contact for data protection questions go here.

You can write to us at contact@message.ai.

Our role

When you write to a profile on a partner's site, or when a partner sends us its profiles, the partner decides why your data is used. We process it for the partner, under a data processing agreement. The partner's own privacy notice applies, and requests about that data go first to the partner.

We decide ourselves only about the accounts of partners' staff, about the records we keep to protect the service, and about this site.

For the review: confirm these roles.

This site

This site sets no cookies and stores nothing in your browser. It loads nothing from other hosts: no fonts, scripts, trackers or analytics. Our servers log each request with its time, address, path and status. They do not keep your full network address: the last part is set to zero before the log is written.

If you write to a profile

What we keep:

the messages you send and the replies, with their times, and whether each was read;
which profile and which site you wrote to;
if you are signed in on the site, a fingerprint of the id the site gives you (never the id itself) and, if the site sends it, the name it shows the profile's owner;
the profiles you block.

If you are not signed in, your browser can open your chats on that site only until its session ends, but the messages stay stored as above. We do not ask for your name, email address or phone number.

To stop abuse, we limit how often anyone can write. The limits count requests by network address. Each of our servers holds the addresses it counts in memory only until the limit refills, and the count our servers share keeps only a keyed hash of each address.

The AI assistant

A profile's owner may let an AI assistant reply for them. Its messages are always labelled as the AI assistant's, and you are told before its first reply.

To write a reply, the AI assistant reads your conversation with that profile and the profile's public information and AI-only notes. It never reads the profile's private fields: we do not keep their values at all. The conversation and the profile's information are sent to the AI model Flash staging uses, which runs on servers Flash staging's operator controls or contracts.

We keep a record of each AI reply with what the AI assistant read to write it, so that a reply can be explained later. These records are deleted after 90 days, or after the period the operator sets for Flash staging.

For the review: name the model provider Flash staging uses. Before go-live the model is to run on the operator's own servers.

If you own a profile

The partner sends us your profile. We keep the fields the partner marks public or AI-only. A field marked private, or sent without a mark, keeps only its name: we drop its value as it arrives.

The partner identifies you by its own user id. We keep only a fingerprint of that id, combined with the site, so the same id on another site does not point to you.

We also keep what you set in the inbox: your availability, your working hours and time zone, and your instructions for the AI assistant.

If you work for a partner

We keep your work email address, your role and the partner you work for. You sign in with a password and a security key at our sign-in service, which stores only what checks them, never the password itself. It also keeps the network address and browser of each sign-in with its session, until an hour after the session ends; a session lasts 12 hours at most. We record the actions you take in the partner console, with their time, in an audit log.

For the review: the sign-in service's own logs also keep the full network address and browser of each request, for as long as the operator keeps logs.

Who can see your data

The people in the conversation: you, and the profile's owner, or the AI assistant replying for them.
The partner whose site it is, through its own systems and the data we send it.
Our staff, only for support, abuse and legal reasons. Each time staff read a conversation, we record it in an audit log.

We do not sell personal data or use it for advertising. No other site and no other service run on separate servers can see it.

How long we keep it

Messages and conversations: for the review. Flash staging does not yet delete them on its own.
Records of AI replies: 90 days, unless the operator sets another period.
Backups: about four to five weeks, then each is replaced. The backup store keeps a replaced copy for at least as long again. For the review: that period.
Server logs: as long as the operator sets for its logs.

For the review: confirm each period, and the deletion of messages before go-live.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to how it is used, or complain to a data protection authority. For data we process for a partner, ask the partner first; we help the partner answer. For anything else, write to contact@message.ai.

Security

Connections to Flash staging are encrypted. Each partner's data is kept apart by the database itself, not only by our code. Partners' secret keys are stored as hashes. Our logs and traces never contain message text, names, email addresses or phone numbers.

Changes

If this notice changes, we publish the new version here with its date.

Draft of 24 October 2026.