Privacy Policy

This policy explains what agent.ferndock.io (the "Service"), run by [Ferndock legal entity name] ("Ferndock", "we"), collects, why, who processes it, how long it's kept and your rights.

1. What we collect

• Account details. Your name and email address from the sign-in you choose (Google, Microsoft, Apple or Facebook) or the email you give for a sign-in link. Sign-in never gives us access to your inbox, calendar, contacts or files.
• Your answers. Your questionnaire answers, including anything you type in an "Other" box, and the profile we build from them.
• Results. The recommendations, workflows, skills and other files generated for you.
• Chat. Messages you send to the chat agent and its replies, plus message and token counts used to apply chat caps.
• Payments. Your purchase status and Stripe customer, session and subscription IDs. Stripe holds your card details; we never see or store them.
• Policy acceptances. Which version of these documents you accepted and when.
• Technical logs. Basic server logs (such as IP address, browser type, time and pages requested) for security and troubleshooting.

We don't ask for, and you shouldn't enter, passwords, API keys, account numbers or other people's sensitive information.

2. Why we use it

• To provide what you asked for: results, your workflow and chat.
• To apply plan limits, prevent abuse and keep the Service secure.
• To handle payments, refunds and receipts.
• To improve the questionnaire. "Other" answers are reviewed to add new options.
• To send marketing email, only if you opt in. You can opt out at any time.

[Lawyer review: legal bases for EU and UK users (contract, legitimate interests, consent for marketing).]

3. AI processing

Your profile and generated workflow are sent to Anthropic's Claude API to write your workflow and run the chat agent. We send your profile (your answers in structured form), never your name, email or account IDs, in those requests. Anthropic processes API data under its commercial terms, which don't allow training models on it.

4. Who processes your data

[Lawyer review: data locations for each processor and the transfer mechanism for EU and UK data, such as Standard Contractual Clauses or the Data Privacy Framework.]

We don't sell your personal information or share it for cross-context behavioral advertising.

5. How long we keep it

• Answers, results and workflows: for the life of your account.
• Chat threads: until you delete the thread or your account.
• Email from people who never bought: [set period, for example 24 months] after last activity.
• Payment records: as long as tax and accounting law requires.
• Server logs: [set period, for example 30 days].

6. Your rights

You can see, export, correct and delete your data, and opt out of marketing.

• Delete: the delete-account button in your dashboard removes your answers, results, chat history and account, and removes the link to your Stripe customer record. Payment records we must keep by law are retained.
• EU and UK users: you also have the rights to object, to restrict processing, to data portability and to complain to your data protection authority.
• California users: you have the rights to know, delete, correct and opt out of sale or sharing under the CCPA/CPRA. We don't sell or share personal information, and we won't discriminate against you for using your rights.

Send requests to [privacy contact email]. We'll respond within the time the law requires.

7. Cookies

At launch we use only the essential cookie that keeps you signed in. If we ever add analytics or advertising cookies, we'll ask for consent first.

8. Age

The Service is for adults 18 and over. We don't knowingly collect data from anyone younger.

9. Security

Your data is protected in transit (HTTPS) and at rest by our providers. Each user's data is isolated with database row-level security. Server keys are kept out of the browser and out of our code repository. No system is perfectly secure; tell us at [contact email] if you find a problem.

Integrations you install in your own AI tools are outside the Service and under your control; see section 4 of the Terms.

10. Changes

We update this policy whenever a feature changes what we collect or who processes it. For a material change we'll email you and show a notice in your dashboard before it takes effect, and ask you to accept the new version at your next sign-in. Every version is listed below.

11. Contact

[Ferndock legal entity name], [postal address], [privacy contact email].

Changelog