This Privacy Policy describes how Consequential Flowers LLC (“Consequential Flowers,” “we,” “us,” or “our”) collects, uses, and discloses information about visitors to www.consequentialflowers.ai (the “Site”) and people who use our products, including PRIM™ and SeedVision™ (together with the Site, the “Services”). Section 12 explains how we handle the information of people who use PRIM through an organization (“members”). If your organization has a signed agreement with us, that agreement also applies to your organization.
1. Information We Collect
We collect four categories of information through the Services.
a. Information You Provide
When you submit our contact form, sign up for a waitlist, create an account, or otherwise communicate with us through the Services, we collect the information you choose to provide. This typically includes your name, email address, organization, and the content of your message. If you contact us by email, we collect your email address and the content of your communication.
b. Information Collected Automatically
When you visit the Site or use the Services, our hosting provider automatically collects technical information necessary to deliver them, including your IP address, browser type and version, operating system, the pages you view, the date and time of your visit, and the referring page. This information is used for security, error logging, and basic operational analytics.
c. Cookies
The Services do not currently set marketing or analytics cookies. Our hosting provider may set strictly necessary cookies for security and site delivery. If we add analytics or other tracking technologies in the future, we will update this Privacy Policy and, where required by law, obtain your consent.
d. Content You Upload and Product Use
If you use SeedVision, we collect the content you upload, the Seeds we make from it, your account details, and information about how you use the product. Subscription payments are handled by our payment processor; we do not receive your full card number. If you use PRIM, section 12 describes what we collect.
2. How We Use Your Information
We use information collected through the Services to:
Respond to your inquiries, requests, and waitlist sign-ups
Operate, maintain, improve, and secure the Services
Provide our products, including turning content you upload into Seeds and delivering PRIM
Communicate with you about Consequential Flowers products and services where you have requested such communications
Comply with legal obligations and protect our rights
We do not engage in fully automated decision-making that produces legal effects concerning you or similarly significantly affects you through the Services.
We do not train or fine-tune artificial intelligence models on PRIM conversations, or on content you upload without your written consent. We may use information about how the Services are used to run and improve them, and de-identified results about groups of 10 or more people, which cannot identify anyone.
3. How We Share Your Information
a. Service Providers
We use service providers to operate the Services. We describe them by type rather than by name, so that we can change providers without changing this policy: cloud hosting and storage (including services our cloud provider offers to search content by meaning and, if you use voice in PRIM, to turn speech into text and text into speech); AI model providers that generate PRIM’s replies and process content in SeedVision; email delivery; payment processing; form processing; and business email. We will provide a current list of our service providers on request.
These providers process information on our behalf under contractual confidentiality obligations.
b. Legal Requirements
We may share information when required by law, in response to a valid legal request (such as a subpoena or court order), to enforce our rights or agreements, or to protect the rights, property, or safety of Consequential Flowers, our users, or the public. For PRIM conversations, the narrower rules in section 12 apply instead.
c. Business Transfers
If Consequential Flowers is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction subject to standard confidentiality protections.
We do not sell your personal information, and we do not share your personal information for cross-context behavioral advertising, as those terms are defined under the California Privacy Rights Act.
4. How Long We Keep Your Information
Site contact form and waitlist submissions: up to 24 months from receipt, or until you ask us to delete them.
Email correspondence: under our email provider’s standard retention, until deleted.
Server logs (such as IP address and browser): up to 90 days, for security and operational analysis.
SeedVision content and Seeds: while your account is active. After a subscription is cancelled, you have 30 days to download your data, and we then delete it from our live systems within the following 30 days. For organizations with a signed agreement, that agreement sets these periods.
PRIM: see section 12.
Backup copies: kept only for disaster recovery, and deleted within 6 months.
We may retain information longer where required by law, to resolve disputes, or to enforce our agreements.
5. Children
The Services are intended for individuals 18 years of age or older, and PRIM is only for people 18 and over. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us at hello@consequentialflowers.com and we will promptly delete it.
6. Your California Privacy Rights (CCPA / CPRA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:
Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the sources, the purposes of collection, and the categories of third parties with whom we shared it.
Right to Correct: You may request that we correct inaccurate personal information.
Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions.
Right to Opt Out of Sale or Sharing: We do not sell your personal information or share it for cross-context behavioral advertising. If this changes, we will provide a “Do Not Sell or Share My Personal Information” link.
Right to Limit Use of Sensitive Personal Information: We do not use or disclose sensitive personal information for purposes that would trigger this right.
Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.
To exercise any of these rights, contact us at hello@consequentialflowers.com. We will verify your identity before responding. You may also designate an authorized agent to make a request on your behalf in accordance with applicable regulations.
7. Your Rights Under European and UK Data Protection Law (GDPR / UK GDPR)
If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights with respect to your personal data:
Right of Access to obtain a copy of the personal data we hold about you
Right to Rectification to correct inaccurate personal data
Right to Erasure to request deletion of your personal data
Right to Restrict Processing to request that we limit how we use your personal data
Right to Data Portability to receive your data in a portable format
Right to Object to certain processing activities, including direct marketing
Right to Withdraw Consent where processing is based on consent
We rely on the following legal bases for processing personal data: (i) your consent; (ii) the necessity of processing to perform a contract with you or take steps at your request prior to entering a contract; (iii) compliance with our legal obligations; and (iv) our legitimate interests in operating and securing the Site, where those interests are not overridden by your rights.
To exercise these rights, contact us at hello@consequentialflowers.com. You also have the right to lodge a complaint with your local data protection authority.
8. International Data Transfers
Consequential Flowers is based in the United States, and information collected through the Services is stored in the United States. Some people who support the Services work outside the United States and may access information from there. If you are accessing the Services from outside the U.S., your information will be transferred to and processed in the U.S., where data protection laws may differ from those of your country. By using the Services, you consent to such transfers.
9. Security
We implement reasonable administrative, technical, and physical safeguards designed to protect information collected through the Services. However, no method of transmission over the Internet or electronic storage is completely secure.
10. Do Not Track
Some browsers offer a “Do Not Track” signal. Because there is no industry consensus on how to interpret these signals, we currently do not respond to them.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date above. Material changes will be communicated by posting a prominent notice on the Site. For PRIM members, we will tell you before a material change to how we handle your information takes effect.
12. PRIM Members
PRIM is an AI mentor that organizations (such as colleges, employers and membership organizations) offer to their members. You use PRIM under the PRIM Member Terms, which you accept with us directly. This section applies to you as a PRIM member, in addition to the rest of this policy.
a. What We Collect
Registration details (name, email address, city, state, birth year, industry and your community code); the time and version of the terms you accepted, the internet (IP) address you used, and your confirmation that you are 18 or older; sign-in codes and IP addresses; the full text of your conversations with PRIM; ratings you give yourself; and information PRIM and our systems create from your conversations and use of PRIM, such as summaries, profile notes, classifications of each message (including its safety level and the reason for it), topic tags, and measures of topics, engagement and progress over time. Conversations are free text, so they may contain anything you write, including sensitive information we do not ask for. We use your email address to send sign-in codes and messages about PRIM.
b. How PRIM Uses AI
PRIM is AI, not a person. Your messages are processed by AI service providers to write PRIM’s replies, to check each message for possible signs of crisis, and to search our content. If you use the microphone, your speech is sent to our cloud provider to be turned into text. If you turn on spoken replies, PRIM’s reply is sent to our cloud provider to be turned into speech. We do not keep the audio. There is no way to use PRIM without this AI processing. We do not use PRIM conversations to train or fine-tune AI models.
c. Safety Levels and Health Information
To keep members safe, PRIM checks each message for possible signs of crisis and records a safety level, with the reason for it. We treat this safety level as consumer health data, as described in our Consumer Health Data Privacy Policy. We use it only to provide PRIM’s safety features, such as showing crisis resources, and to count, without names, how often the crisis safeguard is triggered. Apart from this safety level, our classifications are about leadership and career development topics. We do not otherwise classify members by physical or mental health or financial situation.
Conversations are free text, and you may choose to share health information in them. We do not ask for it, and we do not identify, classify or track it. It is protected like the rest of your conversation and deleted when you ask. When you ask us to delete your data, we delete it from our live systems within 45 days, and from our backup systems within 6 months.
d. What Your Organization Sees
Your organization sees only combined results for groups of 10 or more members, designed so that no individual member can be identified. It is told how often the crisis safeguard was triggered only as a range. Your organization never sees your conversations, profile notes or anything that identifies you, even if it asks, unless the law requires it.
e. When We Share a PRIM Conversation
We do not sell your information or share it for advertising, and we do not share your PRIM conversations with your organization. We share a conversation outside Consequential Flowers only: with you, if you ask for a copy; with the service providers that run PRIM, only to provide it; when the law requires it, such as a valid court order or subpoena (where the law allows and it is reasonable, we will tell you); to establish, exercise or defend legal claims, including with our lawyers and insurers, who must keep it confidential; if we decide in good faith, case by case and never through an automated PRIM feature, that it is necessary to prevent serious and imminent harm to someone’s life or safety (we do not monitor conversations and have no obligation to do this), as also described in our Consumer Health Data Privacy Policy; with a person legally authorized to act for you, where the law requires it; and as part of a sale or merger of our business, under the same protections.
f. How Long We Keep PRIM Information
We keep your conversations for as long as you have an account, because PRIM remembers what you have discussed. You can ask us by email to delete your data, and we will delete it from our live systems within 45 days; backup copies are used only for disaster recovery and are deleted within 6 months. When we delete your data, we keep one small record: your email address, your account ID, the versions of the PRIM Member Terms and Privacy Policy you accepted and when, the internet (IP) address you used when you accepted, your confirmation that you are 18 or older, and the date your data was deleted. It contains none of your conversations. We keep it for 6 years after your data is deleted, so that we can show what you agreed to if there is ever a dispute or legal claim, and we use it for nothing else. We may also keep information longer when the law requires it, or while a legal claim is open. When your organization’s agreement with us ends, your access to PRIM ends and your personal information is deleted from our live systems within 60 days, except the record described above; you can ask us for a copy before then.
g. Your Choices
You can ask us for a copy of your data, which we will provide within 45 days, or ask us to delete it, by emailing hello@consequentialflowers.com. We will verify your identity before responding.
h. Where PRIM Information Is Stored
PRIM information is stored in the United States.
13. Contact
For questions about this Privacy Policy or to exercise any of your rights:
Consequential Flowers LLC
650 Clark Avenue
King of Prussia, PA 19406, United States
Email: hello@consequentialflowers.com