Your data, handled with care.
This policy explains what we collect, how we use it, who we share it with, and the controls you have. Written in plain language — no dark patterns.
1. Overview
Fxnd ("Fxnd," "we," "us," or "our") is an AI-powered sales operating system that helps revenue teams build their brand, generate and score leads, and run multi-step outreach sequences. This Privacy Policy explains what information we collect when you use Fxnd, how we use it, who we share it with, and what rights you have over it.
By creating an account, connecting an email provider, importing a brand URL, or otherwise using the Fxnd platform (the "Service"), you agree to the practices described here.
If you do not agree with this policy, please do not use the Service.
2. Information We Collect
We collect three categories of data: (a) information you give us directly, (b) information generated by your use of the platform, and (c) information from connected third-party services you authorize.
a) Information you provide
- Account data: full name, email address, role, and authentication identifiers.
- Brand data: company name, website URL, logo, color palette, typography choices, brand voice, value propositions, ICP, buyer personas, and product catalogs you create inside Brand Studio.
- Lead data: prospect company names, contact names, business emails, phone numbers, titles, industries, locations, notes, tags, and source URLs you import, paste, or generate.
- Payment data: billing details are collected and processed directly by Stripe. We never see or store your full card number.
- Support data: anything you send us via email, in-app messages, or AI Assistant conversations.
3. Information Generated Automatically
We also collect data your use of the Service produces:
- Usage telemetry: page views, feature interactions, AI credits consumed, timestamps, and approximate location derived from your IP address.
- Outreach engagement events: send timestamps, opens, replies, bounces, unsubscribes, demos booked, and conversions on emails sent through Fxnd.
- Lead scoring snapshots: factor breakdowns, score bands, and model versions generated by our scoring engine.
- Device & browser metadata: user-agent string, OS, browser, screen size, and language preference.
- Audit logs: changes you make to entities (leads, brand profiles, sequences, etc.) and approvals you grant or reject.
4. Information From Connected Services
When you connect a third-party account (e.g., Gmail via OAuth, SMTP/IMAP credentials, or other supported integrations), we receive only the data you authorize.
Specifically, we may access:
- Gmail (OAuth scopes: gmail.send, userinfo.email, openid): your email address and the ability to send outbound emails on your behalf. We do not read your personal inbox unless you explicitly enable IMAP reply tracking.
- SMTP / IMAP credentials: encrypted-at-rest credentials needed to deliver outreach and detect replies on configured mailboxes.
- Website discovery: when you paste a URL into Brand Studio, we fetch publicly available HTML, images, fonts, and metadata from that URL to extract brand identity.
- External LLM providers (OpenAI, Anthropic, Google): we may transmit prompts containing brand context and lead data to generate outputs. These providers process data as our sub-processors under signed DPAs.
5. How We Use Your Information
We use the data we collect to:
- Operate, maintain, and secure the Service.
- Generate brand assets, lead candidates, scoring models, outreach recommendations, and content drafts.
- Send outreach emails through your connected email account on your behalf, only when explicitly approved by you or your sequence configuration.
- Track engagement (opens, replies, conversions) so you can analyze pipeline performance.
- Provide support, respond to inquiries, and improve the product.
- Process payments and manage subscriptions via Stripe.
- Detect, investigate, and prevent fraud, abuse, and security incidents.
- Comply with legal obligations and enforce our Terms of Service.
6. AI & Automated Processing
Fxnd is an AI-first product. Many core features (brand discovery, lead generation, scoring, recommendations, content creation, and the AI Assistant) involve sending data to large language model providers as sub-processors.
Prompts may include your brand profile, lead records, sequence content, and contextual instructions. We do NOT use your private data to train foundation models. Our LLM providers operate under enterprise agreements that prohibit using your data for model training.
Automated decisions (such as lead scoring) are advisory only — they never trigger irreversible actions. A human approval is required before any outreach is sent through your connected email account.
8. Security
We implement industry-standard administrative, technical, and physical safeguards to protect your data, including: TLS 1.2+ encryption in transit, encryption at rest, hashed authentication tokens, scoped OAuth permissions, audit logging, and least-privilege access controls for our team.
Despite these efforts, no method of transmission or storage is 100% secure. If we ever discover a security incident affecting your data, we will notify affected users without undue delay, as required by applicable law.
9. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service.
Specific retention rules:
- Account & brand data: retained until you delete it or close your account.
- Lead & outreach data: retained until you delete it. You can bulk-delete leads at any time from the Leads module.
- Outreach engagement events: retained for 24 months for analytics, then anonymized.
- AI conversation history: retained for 90 days unless you delete it sooner from your Assistant view.
- Billing records: retained for 7 years to comply with tax and financial regulations.
- Backups: encrypted backups are retained for up to 30 days before being purged.
10. Your Rights
Depending on where you live, you have rights under data-protection laws including GDPR (EU/UK), CCPA/CPRA (California), and similar frameworks.
These rights may include:
- Access: request a copy of the personal data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request deletion of your data ("right to be forgotten").
- Restriction: ask us to limit how we use your data.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on our legitimate interests.
- Withdraw consent: revoke OAuth permissions or disconnect integrations at any time.
- Non-discrimination: we will not penalize you for exercising any of these rights.
11. How to Exercise Your Rights
To exercise any of the rights above, email privacy@fxnd.app from the address associated with your account, or use the in-app data controls available under Settings → Data & Privacy.
We will respond within 30 days. We may need to verify your identity before processing certain requests.
You also have the right to lodge a complaint with your local data-protection authority.
12. Outreach Recipients (Important)
Fxnd is used to send outreach to business contacts. If you are receiving an email sent through Fxnd and want to opt out, click the unsubscribe link in the email, reply with the word "UNSUBSCRIBE," or email privacy@fxnd.app with the address you'd like removed. We will honor the request and propagate it to the sender's lead list.
Fxnd customers are contractually required to comply with anti-spam laws (CAN-SPAM, CASL, GDPR, ePrivacy). We are not the data controller for the lead records our customers manage — they are.
13. International Transfers
Fxnd is operated from the United States. If you access the Service from outside the US, your data will be transferred to, stored, and processed in the US and other countries where our sub-processors operate.
For transfers out of the EU/UK, we rely on Standard Contractual Clauses (SCCs) and equivalent safeguards approved by the European Commission.
14. Children
Fxnd is not intended for individuals under the age of 16. We do not knowingly collect data from children. If you believe a child has provided us with personal information, please email privacy@fxnd.app and we will delete it.
16. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by email at least 14 days before the changes take effect. The "Last Updated" date at the top of this page indicates when it was most recently revised.
17. Contact Us
Questions about this Privacy Policy? Reach us at:
Email: privacy@fxnd.app
Support: support@fxnd.app
Mailing address: Fxnd, Inc., 1209 Orange Street, Wilmington, DE 19801, United States