Plans, Security, and Data Handling

Flash Analytics provides flexible analytics services through Trial, Monthly, and Enterprise plans. This page explains our general approach to customer data, security, personal data, service closure, and plan-specific options.

The exact features and commitments for a project depend on its plan, deployment model, geography, technical requirements, and written commercial agreement.

How we handle customer data

Customer trust is important to us. Flash Analytics does not sell Customer Analytics Data or disclose it to other customers.

We process Customer Analytics Data only as needed to provide, operate, support, and secure the contracted service. Data may be accessible to:

• A limited number of authorised Flash Analytics personnel who require access for their work.
• Approved service providers or subprocessors used to operate the service.
• A recipient authorised or instructed by the customer.
• A government authority or other recipient when disclosure is required by applicable law or binding legal process.

Our contractual and privacy documentation provides further information about applicable data-processing arrangements.

Security practices

Flash Analytics maintains technical and organisational safeguards designed to protect Customer Analytics Data.

Production-system access is restricted to a limited number of authorised engineers and other personnel based on their responsibilities. Our cloud systems are subject to periodic security reviews and testing, which may include independent penetration testing.

Detailed security reports, vulnerabilities, system configurations, and complete penetration-test materials are confidential and are not generally shared with customers. Where appropriate, limited assurance information or a summary may be provided under agreed confidentiality and security restrictions.

Although we work to protect our systems and customer data, no service, system, or method of transmission can be guaranteed to be completely secure.

Personal data guidance

Customers using Trial and Monthly plans should avoid sending information that directly identifies a person. Customers must not send sensitive personal data, payment-card information, passwords, authentication credentials, or unrestricted free-text content unless Flash Analytics has expressly approved the use case in writing.

We recommend that customers:

• Use an opaque user identifier instead of a name, email address, telephone number, government identifier, or customer-account number.
• Collect only the events and properties required for the intended analytics purpose.
• Review tracking implementations before enabling them in production.
• Avoid placing personal data in URLs, event names, or unrestricted text fields.
• Remove information that is no longer needed.

If prohibited or unnecessary personal data is sent to Flash Analytics, the customer should promptly delete the affected events or users and block the relevant users or properties from future collection.

Deletion, user suppression, property blocking, hashing, and related privacy controls may depend on the project's plan and configuration. Some controls may be disabled by default or require assistance from Flash Analytics or an authorised seller partner.

Support for approved personal-data use cases may be available for certain Enterprise projects and geographies following a case-by-case privacy, security, technical, and contractual review. Support should not be assumed until it is confirmed in writing.

Data-protection responsibilities

For Customer Analytics Data processed through the service, the customer generally decides why and how the data is collected and acts as the data controller. Flash Analytics generally acts as a data processor or subprocessor and processes the data on the customer's documented instructions.

The parties' actual legal roles depend on the circumstances and applicable law. Customers remain responsible for:

• Determining what information they may lawfully collect and send.
• Establishing an appropriate lawful basis for processing.
• Providing any required privacy notices.
• Collecting and managing consent where required.
• Configuring their implementation and data collection appropriately.
• Responding to requests from their end users, with assistance from Flash Analytics where contractually required.

Depending on the plan and configuration, Flash Analytics provides dashboard or support-assisted controls for data retention, export, deletion, user suppression, and property restrictions.

Data deletion after service closure

After a project is terminated or expires, Flash Analytics aims to delete Customer Analytics Data from active systems within 45 days, unless:

• A different period is specified in the applicable agreement.
• The customer renews or reactivates the service.
• Retention is required by applicable law or binding legal process.
• A limited period is reasonably required to complete an agreed export or resolve an account matter.

Residual copies may remain in protected backups until those backups expire or are overwritten through the normal backup-retention process. Data retained in backups is not returned to active use except when required for service restoration, security, or legal purposes.

Plan information

Trial plan

The Trial plan is intended to help customers evaluate Flash Analytics. Trial features, usage limits, retention, support, and availability may be limited.

Customers should use test, synthetic, or appropriately pseudonymised data wherever possible and should not use the Trial plan for sensitive personal data or regulated production workloads.

Monthly plans

Monthly plans support ongoing use of Flash Analytics within the capacity, features, and service levels included in the selected plan.

Higher-capacity Monthly projects may be eligible for a separate cluster. Separate clusters are subject to technical review, availability, project requirements, and additional pricing.

Customer-specific audits, penetration tests, certifications, and disclosure of detailed security-testing materials are not included unless expressly stated in an applicable Statement of Work (SOW), order form, or other written agreement.

Enterprise plan

Enterprise plans are designed for customers with advanced capacity, deployment, security, privacy, integration, or support requirements. Pricing and included services are determined based on the project scope.

Deployment in customer-managed infrastructure

Flash Analytics may support deployment in infrastructure managed by the customer. Depending on the agreed scope, the project may include customer-specific security controls, audit assistance, privacy assessments, or certification support.

The responsibilities of each party, permitted access, evidence, timelines, fees, and deliverables must be defined in the SOW. Deployment in customer-managed infrastructure does not automatically make either party compliant with any law, regulation, or security standard.

Deployment in the Flash Analytics cloud

Eligible annual Enterprise projects hosted in the Flash Analytics cloud may include an agreed independent penetration test or enhanced security-assurance activity when included in the commercial proposal.

To protect our systems and other customers, Flash Analytics does not provide unrestricted system access or disclose detailed security information or complete penetration-test materials. Any assurance information made available will be limited to the agreed scope and may be subject to confidentiality requirements.

Commercial and contractual terms

Plan pricing, capacity, service levels, support, deployment responsibilities, security commitments, data retention, and included features are defined in the applicable SOW, order form, invoice, or other written agreement with Flash Analytics or an authorised seller partner.

Enterprise and higher-capacity Monthly pricing is determined according to project requirements. Features or commitments described as optional, eligible, or available on request are not included unless confirmed in writing.

Company and contracting model

Flash Analytics operates with a lean team of experienced engineers and works with authorised seller partners in multiple markets. Depending on the customer, plan, and seller partner, the contracting entity may be located in India, the United Arab Emirates (including Dubai), or Singapore.

The governing law, legal jurisdiction, invoicing entity, and applicable commercial terms are determined by the agreement issued by Flash Analytics or the relevant seller partner. A seller partner's location does not, by itself, determine the governing law or jurisdiction unless the applicable agreement says so.

Flash Analytics was previously owned by another company and has recently undergone a business restructuring. As part of the current operating and contracting model, some customers that previously contracted with Flash Analytics directly may be asked to enter into, renew, or migrate their commercial arrangement through an authorised seller partner.

Any such change will be communicated to the affected customer. The applicable contracting entity, seller partner, service responsibilities, pricing, governing law, jurisdiction, and data-protection terms will be identified in the relevant written agreement. Customers should review and accept any replacement or updated agreement before the new arrangement takes effect.

Contact us

Contact Flash Analytics or your authorised seller partner if you need:

• Help selecting a plan or deployment model.
• Privacy controls enabled for your project.
• Support deleting or restricting data.
• An assessment for an Enterprise personal-data use case.
• Information about the commercial or contractual terms applicable to your project.

Important notice

Service availability, features, limits, support, security commitments, retention, and pricing depend on the applicable plan, configuration, geography, and written agreement. If this page conflicts with an executed SOW, Data Processing Agreement, order form, invoice terms, or other applicable agreement, the executed agreement controls.