1. Who We Are

FlowCoach is published by FlowInsight, operated by Maykel Gomez Consulting LLC, a Florida limited liability company.

Contact: privacy@flowinsight.ai

2. What FlowCoach Does

FlowCoach is an Azure DevOps Marketplace extension that reads aggregate flow metrics from your ADO Analytics OData endpoint, processes them through an AI coaching engine, and displays coaching insights to Scrum Masters. FlowCoach operates within the Azure DevOps environment and does not require a separate account or login.

3. Data We Access

FlowCoach accesses the following data from your Azure DevOps environment using read-only API scopes (vso.analytics and vso.work):

• Work item aggregate metrics: cycle time, throughput count, WIP count, aging item count
• Work item metadata: work item type (User Story, Bug), state, closed date, story points
• Sprint/iteration metadata: iteration path, sprint dates
• Work item IDs (used only for linking back to ADO — never sent to the AI)

4. Data We Do NOT Access

FlowCoach never accesses:

• Work item titles, descriptions, or acceptance criteria
• User names, email addresses, or assignee information
• Attachments, comments, or discussion threads
• Source code, repositories, or pipeline data
• Any personally identifiable information (PII)

This restriction is enforced at the TypeScript compiler level — the code physically cannot include these fields in the AI payload.

5. How Data Is Processed

When a Scrum Master runs an analysis:

1. FlowCoach queries ADO Analytics OData using the SM's existing ADO authentication token
2. Aggregate metrics are computed in the browser (cycle time percentiles, throughput, WIP)
3. A PII-free payload containing only numeric metrics and analysis context is sent to our backend
4. Our backend validates the payload and forwards it to Anthropic's Claude API for coaching generation
5. The coaching response is returned to the SM's browser and displayed
6. All data is discarded when the session ends — nothing is stored

6. Sub-Processors

FlowCoach uses the following third-party service:

Service	Purpose	Data Shared	Privacy Policy
Anthropic (Claude API)	AI coaching generation	Aggregate numeric metrics only (no PII, no work item titles, no user names)	anthropic.com/privacy

7. Data Storage and Retention

FlowCoach stores nothing. There is no database, no persistent cache, no data warehouse. Every analysis is computed on the fly and discarded when the browser session ends.

The only persistent record is an audit log entry per analysis, which contains:

• Timestamp
• ADO organization and project name
• Number of items analyzed
• Analysis mode (sprint or date range)
• Confirmation that no PII was sent to the AI (piiSentToAI: false)

The audit log does NOT contain analysis results, coaching output, metric values, or any user-identifiable information. Audit log entries are retained for 90 days.

8. Authentication and Tokens

FlowCoach uses the Azure DevOps SDK to obtain a short-lived access token from the SM's existing ADO session. This token is:

• Used once per OData request
• Never stored, cached, or logged
• Never sent to the AI service
• Scoped to read-only analytics and work item access

9. Your Rights

Since FlowCoach stores no personal data, there is nothing to access, correct, or delete. Your ADO data remains in your Azure DevOps environment at all times. If you uninstall the extension, all FlowCoach functionality ceases immediately — there is no residual data to clean up.

10. Children's Privacy

FlowCoach is a professional software development tool and is not directed at children under 13.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be noted on this page with an updated "Last updated" date.

12. Contact

For privacy questions or concerns:

• Email: privacy@flowinsight.ai
• Entity: Maykel Gomez Consulting LLC, Florida, USA