No, they don’t as far as I have seen sell data for commercial purposes.
I am struggling to find a reference, but at least one insurer has talked of using Flock for validating claimed damage to vehicles and tracking whether the owner just kept the check or actually had damage repaired. And for full disclosure, I cannot be completely certain whether this was something they were doing, or something they wanted to do.
It seems they can't do so without possible consequence in California, at least. It'd be interesting to know about other jurisdictions, and whether or not ALPR data is used as a possible lever to offer municipalities a "discount" by these companies' sales teams in jurisdictions where such things are allowed.
Yet?
You have to admit, the precedent for them being a company that understands the sensitivity of this data has not been set.