Privacy Notice

Controller and contact

TriageFlow AI is operated under the name TriageFlow-ai, based in Ireland. TriageFlow-ai is the controller for personal data described in this notice. Privacy questions and requests can be sent to triage.flow.aicontact@gmail.com.

Informational public mode

The public informational website provides:

• no public registration or login;
• no contact form or customer-message submission;
• no public AI interaction;
• no first-party analytics; and
• no non-essential cookies.

The contact link opens your own email service. Correspondence is processed only if you choose to email the published address, in which case the message, your email address and any other information you provide will be processed to respond to you.

A future hosting platform may process limited technical and security logs, such as request time, requested page, browser details and network address. The hosting provider, log retention and any international-transfer details must be confirmed before deployment.

Interactive local or private mode

Interactive mode is separately enabled for local or private evaluation. It processes conversation messages and related context using locally running AI models. Active-chat credentials are held in browser session storage and are not placed in public URLs. Model credentials and model endpoints are also not placed in public URLs.

Raw conversations are retained for 90 days after the latest message. Non-identifying processed analytics may be retained after raw conversation deletion. Viewer registration and contact data is deleted 90 days after account creation, with earlier deletion supported.

The application does not store raw IP addresses. Registration limiting uses a keyed pseudonymous digest instead. The system does not autonomously send customer messages.

Personal data and purposes

Depending on how the prototype is used, the categories may include:

• email correspondence and contact details you choose to provide;
• interactive account and registration details;
• conversation messages, selected issue and generated responses;
• active-chat and session credentials;
• pseudonymous registration-limiting data; and
• limited technical and security logs when hosting is introduced.

These data are used to answer correspondence, operate and secure an explicitly enabled prototype, generate and retrieve relevant information, support human review, enforce limits, delete data when requested and understand non-identifying aggregate operation.

Proposed lawful bases — subject to legal review

The proposed bases are steps requested before providing an interactive service or performance of that service where applicable; legitimate interests in responding to enquiries, securing and evaluating the prototype; consent where a specific optional use requires it; and compliance with legal obligations where necessary. These proposed bases must receive professional legal review before a paid or unrestricted service launch.

Recipients and processing locations

Data may be handled by the people operating TriageFlow-ai, the provider of the published email mailbox when you make contact, and infrastructure providers needed for a future deployment. Interactive AI processing is currently locally operated.

No hosting provider has been selected. Provider-specific processing locations, subprocessors and international-transfer safeguards will be documented before deployment. The email provider may process correspondence in other countries under its own published terms and safeguards.

Retention

Email correspondence is kept only as long as reasonably needed to respond, manage the relationship and meet applicable legal obligations. Interactive-mode retention is described above. Future technical-log retention will be specified when hosting is selected.

Security

The prototype uses measures including scoped access, non-public model endpoints, session-bound active-chat credentials and limited raw-data retention. No system can guarantee absolute security, and controls will require review before wider operation.

Your rights

Where applicable, you may request access to, correction or deletion of your personal data, restriction of processing, object to processing, or request data portability. You may also withdraw consent where processing relies on consent. Rights can depend on the circumstances and applicable law.

Send a request to triage.flow.aicontact@gmail.com. You also have the right to complain to the Irish Data Protection Commission at dataprotection.ie.

Children

This prototype is not intended for children.

Changes to this notice

This is version 1.0, dated 26 July 2026. Material changes will be reflected by updating the version and date on this page.