Skip to main content
Flodesk logo

Flodesk

Based exclusively on public evidence • 20 criteria (Privacy + AI)
Last review: 26 Feb 2026

D-
AITS IA

AI Trust Summary

AI Training
YES, by default
Data Retention
Not specified in documentation
Opt-out
Not available
AIPrivacy
D-
BasePrivacy
A-
  • Regarding AI: it does not document an opt-out option for data use in AI training, which may generate insecurity for users.
  • Regarding Core Privacy: it clearly details the roles of data controller and processor, facilitating accountability for managed information.

Safer Alternatives

Higher-rated software in the same category

See Full Alternative Comparison

Attention Points in AI (3)

AI criteria that require attention. Buy the Premium Analysis to see all 3 criteria.

  • Flodesk
  • Does not offer an opt-out option for AI training, which may generate insecurity.
  • Does not explain how automated decisions are made, omitting the criteria used.
  • It is advisable to require contractual clauses that address these gaps to mitigate risks.

AI data retention (prompts and responses) is not disclosed

The policy does not specify how long email addresses and campaign interactions are retained, which may impact data management.

AI training opt-out option not available

There is no clear option for users to opt out of having their email addresses and campaign interactions used in AI training.

Ethical AI principles and anti-bias measures not documented

The policy does not mention ethical commitments related to the use of AI, which may raise concerns about bias and discrimination.

Source: vendor public documents

Compliances in AI (3)

AI criteria the company meets. Buy the Premium Analysis to see all 3 criteria.

  • Flodesk
  • Clearly defines the company as the data controller, ensuring accountability.
  • Lists data processing purposes by category, promoting transparency.
  • These practices strengthen due diligence in contracting, ensuring clarity on data use.

Policy on data use for AI training clearly stated

The policy makes it clear that email addresses and campaign interactions may be used to train AI models, providing transparency.

Use of artificial intelligence clearly disclosed in policies

The policy states that Flodesk uses artificial intelligence to process email addresses and campaign interactions, ensuring transparency.

AI features clearly identified with their purposes

The policy mentions the use of AI to improve services, but does not detail which specific functionalities use AI.

Source: vendor public documents

Highlights in Privacy (3)

Most relevant criteria for this category. Buy the Premium Analysis to see all 3 criteria.

Data controller and processor roles clearly defined

The policy clearly defines Flodesk as the data controller, which is essential for accountability over email addresses and campaign interactions.

Data controller identity and contact clearly disclosed

The policy provides clear information about Flodesk's identity and contact, facilitating communication about data.

Privacy contact channel available

The policy provides specific contact channels for privacy issues, which is fundamental for transparency.

Source: vendor public documents

Critical Alerts

  • Decisões automatizadas por IA não têm explicação disponível: A transparência nas decisões automatizadas é fundamental para a confiança do usuário..
  • Retenção de prompts e respostas de IA sem prazo definido: É crucial para garantir a transparência e a conformidade com a legislação de proteção de dados.

Conformance analysis (20)

Premium Feature
AITS Criterion 1
Non-compliant

Retention of AI prompts and responses without defined period

Reference: ISO/IEC 42001 (8.2) + ISO/IEC 27701 (7.4.6)

AITS Criterion 2
Compliant

Policy on the use of email addresses for AI training declared

Reference: ISO/IEC 42001 (8.2) + ISO/IEC 23894 + EU AI Act

AITS Criterion 3
Non-compliant

AI training opt-out option not available

Reference: ISO/IEC 42001 (8.3) + ISO/IEC 29100 + EU AI Act

Source: vendor public documents

Follow this company and access all 20 criteria

Track score changes, get alerts on policy updates, and view the full conformance analysis

Sign up free

Don't miss any update

Sign up to follow this company and track changes in privacy and AI scores

Sign up free

Why trust the AITS Index: Open Community Audit

Public transparency, peer review and open evidence trails — all verifiable by the community

Trust guarantees

Peer review

users, professionals and experts confirm or contest items online.

Public history

vendor and index changes are versioned and accessible.

Participate

Evidence, confirmations and contestations

participate in the collaborative validation of AITS criteria

Contact us

Flodesk Email Marketing: Privacy and Security Insights

Clear Data Roles Enhance Accountability

Flodesk excels in defining the roles of data controller and data processor within its privacy policy. This clarity ensures that users understand who is responsible for their data, which is crucial for compliance with regulations like GDPR and LGPD. With an OPTI Base (Privacy) Score of 83%, Flodesk demonstrates a commitment to transparency, allowing users to feel more secure about how their personal information is handled. By clearly identifying these roles, Flodesk helps users know whom to contact regarding data inquiries, enhancing trust in the platform.

Transparent Data Processing Purposes

Another strength of Flodesk is its detailed listing of data processing purposes categorized by data type. This practice not only aligns with GDPR requirements but also empowers users to make informed decisions about their data. Knowing exactly how their information will be used allows users to assess whether they are comfortable with the data practices of Flodesk. This transparency is a significant advantage for users who prioritize privacy and want to ensure their data is handled responsibly.

Lack of Opt-Out for AI Training

Despite its strengths, Flodesk has notable weaknesses, particularly concerning its AI practices. The absence of an opt-out option for users regarding data used in AI training raises concerns about user consent and control over personal information. With an OPTI IA Score of 29%, this shortcoming indicates that users may not have a say in how their data contributes to AI model training, which could lead to privacy risks. Users should be aware that their data may be utilized in ways they do not fully understand or agree with, which could affect their trust in the platform.

Unexplained Automated Decisions

Additionally, Flodesk does not provide explanations for automated decisions made by its AI systems. This lack of transparency can be problematic, especially for users who want to understand how their data influences outcomes. Without clear communication on how these decisions are made, users may feel uneasy about the reliability and fairness of the AI processes. It is advisable for users to reach out to Flodesk’s support for clarification on these automated processes to better understand how their data is being utilized.

Undefined Retention Periods for AI Data

Another significant weakness is the undefined retention period for prompts and responses generated by AI. This lack of information can lead to uncertainty about how long user data is stored and used, which is a critical factor for privacy-conscious users. To mitigate this risk, users should regularly review their data settings within Flodesk and inquire about data retention policies. It’s essential to stay informed about how long personal data may be retained and to request deletion if necessary.

Practical Steps for Enhanced Privacy

To enhance privacy while using Flodesk, users should take proactive measures. First, review and adjust privacy settings to limit data sharing where possible. Users should also familiarize themselves with the privacy policy to understand their rights under GDPR and LGPD. If users are concerned about AI-related data usage, they should consider reaching out to Flodesk for more information on their data practices and express their preferences regarding data usage. Additionally, exploring alternative email marketing platforms that offer clearer opt-out options for AI training may be beneficial for those prioritizing data privacy. By taking these steps, users can better protect their personal information while leveraging Flodesk’s email marketing capabilities.

Other Email Marketing software

Dive into in-depth research and analysis of each player

Source: vendor public documents

Evidence, confirmations and contestations

participate in the collaborative validation of AITS criteria

Contact us

Scope & Limitations

TrustThis/AITS assessments are based exclusively on publicly available information, duly cited with date and URL, following the AITS methodology (privacy & AI transparency).

The content is indicative in nature, intended for screening and comparison, not replacing internal audits.

TrustThis/AITS does not perform invasive tests, does not access vendor technology environments and does not process customer personal data. Conclusions reflect only the vendor's public communication at the date of collection.

Source: vendor public documents