Privacy Policy

NgageFlow is a product of EX10 ("we", "us") — ex10global.com — and part of the Ngage Suite. This policy covers two things: the ngageflow.com website, and the NgageFlow platform itself. It explains what information each involves, how it is used, and the choices you have.

The website: what we collect

We collect information you provide directly — your name, work email, company and message when you book a demo or contact us. When analytics is enabled on this site, we also collect limited, aggregated technical data (such as pages visited and approximate region, with IP anonymization) to understand which content helps visitors. We do not use advertising trackers, we do not run third-party ad cookies, and we do not sell personal information.

The website: how we use information

• To respond to your inquiries and arrange the demos or pilots you request.
• To communicate with you about NgageFlow and the Ngage Suite.
• To operate, secure and improve this website.
• To meet legal obligations.

The platform: what it processes

When a customer builds and runs flows, the platform processes: flow definitions and configurations; connection credentials for the apps the customer connects, which are encrypted at rest; run history and logs; and the business data those flows move between systems, including IFS Cloud records. This data belongs to the customer — see the Terms of Service for data ownership, and the security and hosting page for how the platform protects it.

Self-hosted deployments

In a self-hosted deployment, the platform runs entirely within the customer's own infrastructure. Flow data, connection credentials and run history never leave that infrastructure, and EX10 has no access to them unless the customer explicitly grants it for support.

Managed deployments

In a managed deployment, EX10 operates the platform on the customer's behalf and acts as a processor: we process platform data only on the customer's instructions and only to provide the service, under the terms agreed with the customer. Data processing terms are available on request.

Subprocessors and connected services

The platform sends data only to the services a customer configures. The connectors and AI model providers a customer chooses — for example the apps wired into a flow on the integrations page — receive the data those flows send them, under their own terms. The customer controls which services are connected. EX10 does not add subprocessors to customer workloads beyond the hosting infrastructure agreed for managed deployments.

Your rights

Depending on where you are, you may have rights under the GDPR or similar laws to access, correct, delete or restrict the processing of your personal information, to object to processing, and to data portability. For information collected through this website, contact us using the details below. For personal data processed inside the platform, the customer is the controller — please direct requests to them; we assist customers in meeting these obligations for managed deployments.

Retention

We keep website inquiries only as long as needed to handle the conversation or as required by law. For managed deployments, platform data is retained per the customer agreement and returned or deleted when the agreement ends. For self-hosted deployments, retention is entirely under the customer's control.

International transfers

EX10 serves customers globally. Where information crosses borders, we take steps to keep it protected in line with applicable law. Self-hosted customers choose where their platform data lives.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected in the "last updated" date above.

Contact

For privacy questions or data requests, email hello@ngagesuite.com or contact us.