Keep it necessary.

Do not send passwords, payment-card details, banking credentials, payroll records, medical information or unrelated personal identification documents.

Public website

The public website is static and does not provide a customer-document upload form. It does not use advertising trackers or third-party analytics in the current release.

BidReady

For BidReady inquiries, email may be used to exchange bid documents after scope is understood. Share only material needed for the review.

DORA RoI Rescue

Do not send sensitive production Register of Information data until separate data-handling and security gates have been cleared and an appropriate handling model has been agreed.

During validation, DORA-related material should be limited to public regulator documentation, synthetic examples, or fully redacted/non-personal validation-error examples supplied voluntarily.

PPWR Exception Desk

During validation, do not send packaging files, supplier documents, confidential client information or other production data. Initial discussion should be limited to the exception pattern and non-sensitive context needed to determine whether the workflow is worth validating.

FlowIngress and Google user data

FlowIngress is a Google Workspace Studio add-on that lets a user create an incoming HTTPS webhook that can start the Workspace Studio trigger configured by that user.

Access and use. FlowIngress uses Google OAuth authorization only for the permissions needed to provide its user-facing functionality, including making required outbound HTTPS requests and invoking the user's configured Workspace Studio trigger. FlowIngress does not use these permissions to read Gmail, Google Drive, Google Calendar, Google Contacts, or other unrelated Google Workspace content.

FlowIngress processes Google OAuth authorization credentials and FlowIngress configuration information only as needed to authenticate requests, create and manage the webhook route, refresh authorization when required, and invoke the configured Workspace Studio trigger. Information received from Google APIs is not used for advertising, profiling, resale, data brokerage, or training generalized artificial-intelligence or machine-learning models.

Sharing and disclosure. FinnStack Group does not sell, rent, or disclose Google user data to advertisers, data brokers, information resellers, or unrelated third parties. Google authorization and configuration data is used with Google services only as necessary to operate FlowIngress. Information may also be disclosed when required by law or when reasonably necessary to protect users, the service, or legal rights.

Data protection. FlowIngress uses HTTPS for network communications and requests only the OAuth permissions required for its functionality. Each webhook route uses an opaque credential. A route can be rotated, which invalidates the previous route, and disconnecting a FlowIngress configuration invalidates its webhook route. FlowIngress does not request or store a user's Google password.

Retention and deletion. FlowIngress retains the Google authorization and configuration data needed to operate a connected FlowIngress configuration only while that configuration remains connected or as otherwise reasonably necessary to provide the service. When the user disconnects a FlowIngress configuration, its stored authorization is removed and its webhook route is invalidated. Additional privacy or deletion requests may be sent to hello@finnstackgroup.com.

FlowIngress's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Business contact and validation outreach

FinnStack Group may use publicly available professional contact information to contact businesses about narrowly relevant services or validation research. We use only information reasonably necessary for that purpose, such as a person's name, professional role, organisation and business contact details.

If we obtained your details from a public business source rather than directly from you, we will identify ourselves and why we contacted you. You can object to further outreach at any time by replying to the message or contactinghello@finnstackgroup.com. We maintain a minimal suppression record so that we can respect those requests.

Questions or privacy requests: hello@finnstackgroup.com