Privacy Policy

1. Information We Collect

We collect the following categories of information:

• Account information. When you create an account, we collect your name, email address, company name, role, and authentication credentials.
• Customer Data. Contracts, documents, comments, redlines, version history, assignments, and other materials that you or your Authorized Users upload to the Service.
• Usage data. Information about how you interact with the Service, including pages viewed, features used, IP address, browser type, device identifiers, referrer URLs, and timestamps.
• Communications. Messages you send to our support team, feedback, and survey responses.
• Billing information. Payment method details, billing address, and transaction history. Card numbers are processed by our payment processor and are not stored on our systems.
• Cookies and similar technologies. We use cookies and similar technologies to keep you signed in, remember preferences, and measure how the Service is used.

2. How We Use Information

We use the information we collect to:

• provide, operate, and maintain the Service;
• authenticate users and protect against fraud, abuse, and unauthorized access;
• process payments, manage subscriptions, and send billing-related communications;
• respond to support requests and communicate with you about the Service;
• analyze and improve the Service, including diagnosing technical problems and developing new features;
• send service notifications, security alerts, and product updates; and
• comply with legal obligations and enforce our agreements.

3. AI Models and Customer Data

We do not train our AI models on your Customer Data, and we do not allow our third-party model providers to train their models on it. Customer Data is used solely to provide the Service to you, including to generate AI Output for your workspace.

We may use anonymized and aggregated metadata about Service usage (for example, error rates, latency, and feature adoption) to operate, secure, and improve the Service. We do not use the substance of your contracts for these purposes.

4. How We Share Information

We share information only as described in this Policy. We do not sell or rent personal information to third parties. We may share information with:

• Subprocessors. Vendors and service providers who perform services on our behalf, including hosting, infrastructure, analytics, payment processing, and AI model inference. Subprocessors are bound by contractual obligations to protect your information and use it only to provide services to us.
• Affiliates. Companies that control, are controlled by, or are under common control with Fusial, subject to this Policy.
• Legal and safety. Government authorities, regulators, or other parties when we have a good-faith belief that disclosure is required or permitted by law, necessary to protect rights and safety, or required to enforce our agreements.
• Business transfers. A successor entity in connection with a merger, acquisition, financing, or sale of assets, provided that the successor agrees to honor this Policy.
• With your direction. Any third party at your direction or with your consent, including via integrations you connect to your workspace.

Our current subprocessors are listed in Section 5 below. We will provide notice of material changes to that list.

6. Data Retention

We retain Customer Data for as long as your account is active and as needed to provide the Service. After termination, Customer Data is available for export for 30 days, after which we may delete it in accordance with our standard retention practices, subject to backups and legal hold requirements.

We retain account, usage, and billing records for as long as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

7. Security

We implement administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and at rest, role-based access controls, admin-enforced two-factor authentication, audit logging, and regular security reviews. No security program is perfect, and we cannot guarantee absolute security.

You are responsible for keeping your account credentials confidential and for configuring access controls within your workspace. Notify us immediately if you suspect unauthorized access to your account.

8. Your Rights and Choices

Depending on where you live, you may have the right to access, correct, port, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at privacy@fusial.com.

If you are an Authorized User of a workspace, your employer or the workspace administrator controls your account. We will refer your privacy requests to the relevant administrator.

You can opt out of non-essential marketing communications by clicking the unsubscribe link in our emails. Service notifications, billing communications, and security alerts are required to operate the Service and cannot be opted out of.

9. International Data Transfers

Fusial is based in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those of your jurisdiction. Where required by law, we rely on appropriate safeguards such as Standard Contractual Clauses for cross-border transfers.

10. Children's Privacy

The Service is not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

11. California Residents

If you are a California resident, the California Consumer Privacy Act ("CCPA") provides additional rights regarding your personal information, including the right to know what information we collect, the right to delete it, the right to correct inaccuracies, and the right to opt out of certain sharing. We do not "sell" personal information as defined under the CCPA. To exercise your CCPA rights, contact us at privacy@fusial.com.

12. EEA, UK, and Swiss Residents

If you are located in the European Economic Area, United Kingdom, or Switzerland, our processing of your personal information is subject to applicable data protection laws, including the GDPR and UK GDPR. Where we process Customer Data on your behalf, we act as a processor and you act as the controller. A Data Processing Addendum is available on request and incorporates Standard Contractual Clauses where required.

13. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will provide reasonable notice by posting the updated Policy on our website and updating the "Last updated" date. Your continued use of the Service after the effective date of the updated Policy constitutes your acceptance of it.

14. Contact Us

For questions about this Policy or our privacy practices, contact us at privacy@fusial.com.

Fusial LLC
Austin, Texas