Privacy Policy

1. Scope

This policy applies to Firmory products and services that link to it. It does not govern third-party websites, AI tools, or services that have their own privacy notices.

If your employer or another organization provides your Firmory workspace, that organization may control the workspace content and your access to it. Contact the workspace administrator for its own privacy practices.

2. Information we collect

The information we collect depends on how you use Firmory.

• Account and profile information, such as your email address, display name, avatar, authentication records, and account preferences.
• Workspace information, such as company, project, role, membership, review, and permission settings.
• Content you choose to provide, including files, document text, prompts or instructions submitted through a connected workflow, comments, and related metadata.
• Relationship and activity metadata, such as source files, versions, connected outputs, timestamps, and actions taken in a workspace.
• Device, network, and diagnostic information, such as IP address, browser or app version, operating system, crash data, security events, and service logs.
• Communications you send to us, including support requests and feedback.

3. Information we do not intentionally collect

Firmory is not designed to scan your entire hard drive or import your complete AI chat history. We process content that you, your organization, or a connected tool intentionally makes available to Firmory.

Firmory is not intended for Social Security numbers, payment-card data, health records, biometric identifiers, or other highly sensitive personal information. Please do not submit such information unless a Firmory feature expressly requests it and provides an appropriate notice.

4. How we obtain information

We receive information directly from you, from a workspace administrator or teammate, automatically from your browser or application, and from third-party tools you choose to connect. A connected tool's processing remains subject to its own terms and privacy policy.

5. How we use information

We use personal information to provide and secure Firmory, authenticate users, manage workspaces and permissions, record file relationships and versions, operate review workflows, provide support, diagnose errors, prevent abuse, communicate service information, comply with law, and improve the product.

We do not use workspace content to train general-purpose AI models unless we first provide a separate notice and obtain any consent required by law or contract.

6. How we disclose information

We may disclose information to authorized members and administrators of your workspace; vendors that provide hosting, authentication, security, diagnostics, communications, and customer-support services; connected tools at your direction; professional advisers; and government authorities or other parties when required by law or necessary to protect rights, safety, and service integrity.

We may transfer information in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality protections.

We do not sell personal information for money or share personal information for cross-context behavioral advertising. If that practice changes, we will update this policy and provide legally required choices before the change applies.

7. Retention

We retain personal information for as long as reasonably necessary to provide the service, maintain security and audit records, comply with legal obligations, resolve disputes, and enforce agreements. The period depends on the information type, workspace settings, account status, contractual commitments, and legal requirements. We delete or de-identify information when it is no longer needed, unless retention is required or permitted by law.

8. Security

We use administrative, technical, and organizational safeguards designed to protect personal information. No storage or transmission method is completely secure, so we cannot guarantee absolute security. Please protect your email account and promptly report suspected unauthorized access.

9. Your choices and U.S. privacy rights

You may update certain account information in the product and may ask us to access, correct, delete, or provide a copy of personal information. Depending on your state and whether its law applies to Firmory, you may also have rights to know categories and sources of information, opt out of certain sale, sharing, targeted advertising, or profiling, limit certain uses of sensitive information, appeal a denied request, and receive equal service when exercising a privacy right.

Submit a request to contact@firmory.ai. We may verify your identity and authority before completing a request. An authorized agent may submit a request where permitted by law. We will not discriminate against you for exercising an applicable privacy right. Some information may be exempt from a request, including information we must retain for security, legal, or contractual reasons.

10. Children

Firmory is a workplace product and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

11. International use

Firmory and its service providers may process information in countries other than where you live. Where required, we use legally recognized safeguards for international transfers. Users in mainland China should review the mainland-China version of this policy at /zh/privacy.

12. Changes and contact

We may update this policy as our practices or legal obligations change. We will post the revised policy with a new effective date and provide additional notice when required. For privacy questions or requests, email contact@firmory.ai.