

Flodesk
Based exclusively on public evidence • 20 criteria (Privacy + AI)
Last review: 26 Feb 2026
AI Trust Summary
- •Regarding AI: it does not document an opt-out option for data use in AI training, which may generate insecurity for users.
- •Regarding Core Privacy: it clearly details the roles of data controller and processor, facilitating accountability for managed information.
Safer Alternatives
Higher-rated software in the same category
Attention Points in AI (3)
AI criteria that require attention. Buy the Premium Analysis to see all 3 criteria.
- •Flodesk
- •Does not offer an opt-out option for AI training, which may generate insecurity.
- •Does not explain how automated decisions are made, omitting the criteria used.
- •It is advisable to require contractual clauses that address these gaps to mitigate risks.
AI data retention (prompts and responses) is not disclosed
The policy does not specify how long email addresses and campaign interactions are retained, which may impact data management.
AI training opt-out option not available
There is no clear option for users to opt out of having their email addresses and campaign interactions used in AI training.
Ethical AI principles and anti-bias measures not documented
The policy does not mention ethical commitments related to the use of AI, which may raise concerns about bias and discrimination.
Source: vendor public documents
Compliances in AI (3)
AI criteria the company meets. Buy the Premium Analysis to see all 3 criteria.
- •Flodesk
- •Clearly defines the company as the data controller, ensuring accountability.
- •Lists data processing purposes by category, promoting transparency.
- •These practices strengthen due diligence in contracting, ensuring clarity on data use.
Policy on data use for AI training clearly stated
The policy makes it clear that email addresses and campaign interactions may be used to train AI models, providing transparency.
Use of artificial intelligence clearly disclosed in policies
The policy states that Flodesk uses artificial intelligence to process email addresses and campaign interactions, ensuring transparency.
AI features clearly identified with their purposes
The policy mentions the use of AI to improve services, but does not detail which specific functionalities use AI.
Source: vendor public documents
Highlights in Privacy (3)
Most relevant criteria for this category. Buy the Premium Analysis to see all 3 criteria.
Data controller and processor roles clearly defined
The policy clearly defines Flodesk as the data controller, which is essential for accountability over email addresses and campaign interactions.
Data controller identity and contact clearly disclosed
The policy provides clear information about Flodesk's identity and contact, facilitating communication about data.
Privacy contact channel available
The policy provides specific contact channels for privacy issues, which is fundamental for transparency.
Source: vendor public documents
Critical Alerts
- •Decisões automatizadas por IA não têm explicação disponível: A transparência nas decisões automatizadas é fundamental para a confiança do usuário..
- •Retenção de prompts e respostas de IA sem prazo definido: É crucial para garantir a transparência e a conformidade com a legislação de proteção de dados.
Conformance analysis (20)
Retention of AI prompts and responses without defined period
Reference: ISO/IEC 42001 (8.2) + ISO/IEC 27701 (7.4.6)
Policy on the use of email addresses for AI training declared
Reference: ISO/IEC 42001 (8.2) + ISO/IEC 23894 + EU AI Act
AI training opt-out option not available
Reference: ISO/IEC 42001 (8.3) + ISO/IEC 29100 + EU AI Act
Source: vendor public documents
Follow this company and access all 20 criteria
Track score changes, get alerts on policy updates, and view the full conformance analysis
Don't miss any update
Sign up to follow this company and track changes in privacy and AI scores
Why trust the AITS Index: Open Community Audit
Public transparency, peer review and open evidence trails — all verifiable by the community
Trust guarantees
Peer review
users, professionals and experts confirm or contest items online.
Public history
vendor and index changes are versioned and accessible.
Participate
Evidence, confirmations and contestations
participate in the collaborative validation of AITS criteria
Flodesk Email Marketing: Privacy and Security Insights
Clear Data Roles Enhance Accountability
Flodesk excels in defining the roles of data controller and data processor within its privacy policy. This clarity ensures that users understand who is responsible for their data, which is crucial for compliance with regulations like GDPR and LGPD. With an OPTI Base (Privacy) Score of 83%, Flodesk demonstrates a commitment to transparency, allowing users to feel more secure about how their personal information is handled. By clearly identifying these roles, Flodesk helps users know whom to contact regarding data inquiries, enhancing trust in the platform.
Transparent Data Processing Purposes
Another strength of Flodesk is its detailed listing of data processing purposes categorized by data type. This practice not only aligns with GDPR requirements but also empowers users to make informed decisions about their data. Knowing exactly how their information will be used allows users to assess whether they are comfortable with the data practices of Flodesk. This transparency is a significant advantage for users who prioritize privacy and want to ensure their data is handled responsibly.
Lack of Opt-Out for AI Training
Despite its strengths, Flodesk has notable weaknesses, particularly concerning its AI practices. The absence of an opt-out option for users regarding data used in AI training raises concerns about user consent and control over personal information. With an OPTI IA Score of 29%, this shortcoming indicates that users may not have a say in how their data contributes to AI model training, which could lead to privacy risks. Users should be aware that their data may be utilized in ways they do not fully understand or agree with, which could affect their trust in the platform.
Unexplained Automated Decisions
Additionally, Flodesk does not provide explanations for automated decisions made by its AI systems. This lack of transparency can be problematic, especially for users who want to understand how their data influences outcomes. Without clear communication on how these decisions are made, users may feel uneasy about the reliability and fairness of the AI processes. It is advisable for users to reach out to Flodesk’s support for clarification on these automated processes to better understand how their data is being utilized.
Undefined Retention Periods for AI Data
Another significant weakness is the undefined retention period for prompts and responses generated by AI. This lack of information can lead to uncertainty about how long user data is stored and used, which is a critical factor for privacy-conscious users. To mitigate this risk, users should regularly review their data settings within Flodesk and inquire about data retention policies. It’s essential to stay informed about how long personal data may be retained and to request deletion if necessary.
Practical Steps for Enhanced Privacy
To enhance privacy while using Flodesk, users should take proactive measures. First, review and adjust privacy settings to limit data sharing where possible. Users should also familiarize themselves with the privacy policy to understand their rights under GDPR and LGPD. If users are concerned about AI-related data usage, they should consider reaching out to Flodesk for more information on their data practices and express their preferences regarding data usage. Additionally, exploring alternative email marketing platforms that offer clearer opt-out options for AI training may be beneficial for those prioritizing data privacy. By taking these steps, users can better protect their personal information while leveraging Flodesk’s email marketing capabilities.
Other Email Marketing software
Dive into in-depth research and analysis of each player

Adobe Marketo Engage
Oracle Eloqua

Brevo

Customer.io

Drip

EngageBay

Zoho Marketing Automation

Constant Contact
Source: vendor public documents
Analyzed Sources
Public documents used in the audit of Flodesk:
Evidence, confirmations and contestations
participate in the collaborative validation of AITS criteria
Scope & Limitations
TrustThis/AITS assessments are based exclusively on publicly available information, duly cited with date and URL, following the AITS methodology (privacy & AI transparency).
The content is indicative in nature, intended for screening and comparison, not replacing internal audits.
TrustThis/AITS does not perform invasive tests, does not access vendor technology environments and does not process customer personal data. Conclusions reflect only the vendor's public communication at the date of collection.
Source: vendor public documents