Privacy Policy

1. Information We Collect

Information You Provide

• Account Data: Name, email address, company name, phone number, and billing information when you create an account or subscribe to a plan.
• Contact Form Submissions: Name, email, company, phone number, and message content when you contact us through our website.
• CRM Data: Contact records, interaction logs, and business data you store within the platform.
• Brand Assets: Logos, guidelines, documentation, and other files you upload for agent configuration.

Information Collected Automatically

• Usage Data: Pages visited, features used, API calls made, agent interactions, and usage metrics.
• Device Information: Browser type, operating system, device identifiers, and IP address.
• Cookies: We use essential cookies for authentication and session management. We use analytics cookies to understand how the Service is used. You can manage cookie preferences in your browser settings.

Information from Third Parties

• Authentication Provider: When you sign in through Clerk, we receive your name, email, and profile image.
• Payment Processor: Stripe provides us with transaction confirmations and billing details. We do not store full credit card numbers.

2. How We Use Your Information

• To provide, operate, and improve the Service.
• To process subscriptions, billing, and usage-based charges.
• To communicate with you about your account, support requests, and product updates.
• To personalize agent behavior based on your brand context and preferences.
• To monitor platform security and prevent fraud or abuse.
• To comply with legal obligations.

We do not sell your personal information to third parties. We do not use your data to train AI models.

3. How We Share Your Information

We share your information only in the following circumstances:

• Service Providers: With third-party vendors who help us operate the Service, including Neon (database hosting), Vercel (application hosting), Clerk (authentication), Stripe (payments), OpenRouter (AI processing), ElevenLabs (voice), and Fal.ai (media generation). Each provider processes data only as necessary to perform their service and is bound by data processing agreements.
• Legal Requirements: When required by law, subpoena, court order, or to protect the rights, safety, or property of our users or the public.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.

4. Data Retention

We retain your account data and usage records for the duration of your subscription plus 30 days. After account termination, you may request an immediate data export. After the 30-day retention window, data is permanently deleted from our systems and backups.

Call recordings and transcripts are retained for 90 days by default. You can configure shorter retention periods from your dashboard.

5. Data Security

• All data is encrypted at rest using AES-256 encryption.
• All data in transit is protected by TLS 1.3.
• Database access is restricted by role-based access controls and VPC isolation.
• We perform regular security audits and penetration testing.
• Our infrastructure providers maintain SOC 2 Type II certifications.

6. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data.
• Portability: Request an export of your data in a machine-readable format.
• Opt-Out: Opt out of marketing communications at any time.

To exercise any of these rights, contact us at privacy@fusionagents.ai. We will respond within 30 days.

7. California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect and how it is used, the right to request deletion, and the right not to be discriminated against for exercising your privacy rights. We do not sell personal information as defined by the CCPA.

8. International Users (GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, our legal basis for processing your data is contractual necessity (to provide the Service you subscribed to), legitimate interest (to improve and secure the Service), and consent (for optional analytics). You may withdraw consent at any time.

9. Children

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided personal information, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notification at least 30 days before they take effect.