Privacy Notice

  1. Notice and Updates

This Privacy Notice describes how EDISCOVERIST, Inc., doing business as ESI Flow, collects, uses, discloses, retains, and protects personal information when you use esiflow.com, its subdomains, the ESI Flow Microsoft Word add-in, and our related services and private-beta programs.

  1. Privacy Contact

Questions about this Privacy Notice may be sent through our Contact page or to info@esiflow.com.

  1. Data we collect 

We collect your personal data when you provide us with information via our contact form on the website, by email, by communications through third party sites such as social media sites, or otherwise interact with us.

When you participate in the ESI Flow private beta, we may collect account and application information, login and usage information, feature interactions, feedback, survey responses, bug reports, support communications, and technical or diagnostic information.

When you use the Microsoft Word add-in to analyze a document, ESI Flow may access and process the entire document, together with related instructions, selections, metadata, and generated outputs.

AI Processing

ESI Flow uses artificial intelligence to support document analysis, workflow guidance, procedural review, and drafting assistance. Information submitted through the Services may be processed by ESI Flow and its contracted artificial-intelligence service providers to provide the requested functionality and evaluate and improve product performance.

Customer content is not used to train public or shared AI models. Our service providers may process information as necessary to provide their services to ESI Flow and subject to applicable contractual protections.

Microsoft Word Add-in

ESI Flow operates primarily through a Microsoft Word add-in.

Information necessary to provide analysis, workflow guidance, and product functionality may be processed when users choose to analyze documents through the add-in.

ESI Flow only processes information required to deliver the requested Services.

During the private beta, participants should use only sample, public, synthetic, or appropriately anonymized documents. Participants should not submit real client documents or materials containing privileged, confidential, personal, restricted, or otherwise protected information.

  1. Purposes and legal basis for data processing and categories of recipients

We process your personal data for various purposes and pursuant to various legal bases. We process your personal data primarily to 

  • provide and improve our Services; 
  • contact you about our Services; 
  • provide customer service; 
  • detect, prevent, mitigate and investigate fraudulent or illegal activity. 
  • administer and secure private-beta access;
  • provide document analysis and other requested functionality;
  • investigate bugs and provide support;
  • evaluate and improve ESI Flow; and
  • create aggregated or de-identified product and performance analyses.

We may use and disclose aggregated or de-identified beta information for product research, analysis, and performance reporting. We may separately request permission to feature identifiable feedback, testimonials, or case studies.

We also share your information with third parties for these purposes. We do not sell your personal data, and do not provide your personal data to any third party for any purpose other than the ones set out here.

  1.  Storage duration and erasure  

Your personal data will be stored by us and our service providers in accordance with applicable data protection laws to the extent necessary for the processing purposes set out in this notice. We will delete your personal data upon your request or in accordance with our data retention and deletion policy or take steps to anonymize the data, unless we are legally obliged to keep your personal data longer (e.g. for tax, accounting or auditing purposes). As far as legally permissible or required, we restrict the processing of your data instead of deleting it (e.g. by restricting access to it). This applies in particular to cases where we may still need the data for the execution of the contract or for the assertion of or defense against legal claims. In these cases, the duration of the restriction of processing depends on the respective statutory limitation or retention periods. The data will be deleted after the relevant limitation or retention periods have expired.

  1. Cookies

Most web browsers are set to accept cookies by default.  If you prefer, you can usually choose to set your browser to remove or reject browser cookies. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of our Services.

We may use:
• Essential cookies required for website functionality.
• Analytics cookies to understand website usage and improve our Services.
• Functional cookies that remember user preferences.

  1. Promotional Communications

You may opt out of receiving promotional emails from us by following the instructions in those emails or by contacting us at info@esiflow.com. 

  1. Rights as a data subject

Subject to possible restrictions under national law, as a data subject, you have the right to access, rectification, erasure, restriction of processing and data portability with regard to your personal data. In addition, you can withdraw your consent and object to our processing of your personal data on the basis of legitimate interests. You can also lodge a complaint with a supervisory authority. 

  1. Service Providers

We work with trusted third-party service providers that help us operate our Services, including providers of:

  • cloud hosting
  • email communications
  • analytics
  • customer support
  • artificial intelligence services
  • authentication, product monitoring, error reporting, and document processing

These providers may process personal information only as necessary to perform services on our behalf.

  1. Data security  

We protect your personal data through storage with third parties who have technical and organizational security measures in place to minimize risks associated with data loss, misuse, unauthorized access and unauthorized disclosure and alteration.  

  1. Testimonials and Publicity

We may invite private-beta participants to provide testimonials, participate in case studies, or permit the use of their name, organization, logo, quotation, image, voice, or recording. Any related permissions may be addressed separately in connection with that activity.

  1. Additional Disclosures for Residents of California.  Categories of personal information that we may collect about California consumers include
  • Identifiers, including information that identifies you, such as your name, address, telephone numbers, email addresses, profession, bar number, and social media profile. 
  • Characteristics of protected classifications under California or federal law, including, under certain circumstances, we may collect your age, gender, country of birth, nationality, employment status, family status, or other demographic information.
  • Commercial information, including: financial information such as credit card and banking numbers, transaction details, and form of payment;
  • Information that is generated through your other actions when you use our Services. 
  • Professional or Employment-Related Data including Position, role, occupation, previous work experience, or current or former employer, business contact information
  • Sensory information, including Recordings.
  • Education Information.

As provided above, we may process personal information that may be considered “sensitive” under California law when users voluntarily provide such information.  We only collect this information when you choose to provide it to us directly, and we use it only to provide our Services and in compliance with California law.

LAST UPDATED: September 2026

Scroll to Top