Privacy Policy

This Privacy Policy applies to personal data we collect directly from you, automatically through the Service, from your Workspace or organization, and from service providers that support billing, hosting, communications, and similar operations.

If you use the Service on behalf of an organization, that organization may control certain data in the Service, especially Team Workspace content and Workspace administration records.

We may collect the following categories of personal data.

Account and profile data

• Name.
• Email address.
• Password or authentication credentials.
• Account ID.
• Organization or Workspace affiliation.
• Role and permissions.

Billing and transaction data

• Plan type.
• Subscription status.
• Billing owner details.
• Billing address.
• Invoice and transaction records.
• Tax-related information you provide.
• Limited payment method details made available by our processor, such as card brand, last four digits, and expiration date.

We do not store full payment card numbers ourselves. Payment card information is generally handled by our payment processor.

Usage and device data

• IP address.
• Browser and device information.
• Operating system.
• Referral URLs.
• Pages, screens, and features used.
• Timestamps.
• Logs, performance data, and diagnostic information.

Work product and service data

• Prompts, instructions, drafts, edits, annotations, comments, uploads, exports, and other Inputs.
• Outputs generated or returned by the Service.
• Metadata associated with the above, including Workspace, timestamps, user actions, and version history.

Communications and support data

• Support requests.
• Emails and messages sent to us.
• Product feedback.
• Survey responses.

Workspace and admin data

• Workspace membership.
• Roles and permissions.
• Admin actions.
• Billing changes.
• Team Workspace export activity.
• Workspace-level usage and settings records.

Cookies and similar technologies

• Cookies.
• Local storage.
• Similar technologies used for login, security, preferences, and limited analytics actually in use.

We use personal data to:

• Provide, operate, maintain, and support the Service.
• Create and manage accounts and Workspaces.
• Process the Activation Program, subscriptions, billing, renewals, refunds, and taxes.
• Authenticate users and protect account security.
• Monitor performance, diagnose issues, and prevent abuse or fraud.
• Provide logs, evidence-related records, version history, and export records within the Service.
• Respond to support requests and communicate with you about your account or the Service.
• Enforce our Terms and other policies.
• Comply with legal obligations.
• Generate deidentified and aggregated analytics and product-improvement insights.

We may disclose personal data:

• To service providers and subprocessors that help us operate the Service.
• Within a Workspace or organization where admins or authorized users have access based on plan features, roles, and settings.
• To comply with law, regulation, legal process, or government request.
• To protect rights, safety, security, and the integrity of the Service.
• In connection with a merger, financing, acquisition, reorganization, or sale of assets.
• With your direction or consent.

We do not sell personal data for money.

We use third-party service providers to run the Service.

At launch, key service providers may include:

• Stripe for billing and payments.
• Vercel for hosting and delivery.
• Neon for database infrastructure.
• Resend for transactional email.

Our current service provider and subprocessor list is included in the Terms of Service at /terms#third-party-services-and-subprocessors. We may update that section from time to time.

We use cookies and similar technologies for:

• Account login and session management.
• Security and fraud prevention.
• Saving preferences.
• Service performance and reliability.
• Limited analytics actually in use.

If we later add broader analytics, advertising, or retargeting tools, we may update this Privacy Policy and any required notice or consent flows.

We retain personal data for as long as reasonably necessary to:

• Provide the Service.
• Maintain accounts and Workspaces.
• Complete transactions.
• Preserve logs, billing records, and evidence-related records.
• Comply with legal obligations.
• Detect and prevent fraud or security incidents.
• Resolve disputes.
• Enforce agreements.

Deleted or canceled accounts may remain in backups or archived systems for a limited period.

We may retain data longer where necessary for legal obligations, tax or billing records, security logging, fraud prevention, backup integrity, or defense of claims.

We use commercially reasonable administrative, technical, and organizational safeguards designed to protect personal data.

No system is perfectly secure, and we cannot guarantee absolute security.

Depending on where you live, you may have rights to access, correct, delete, or request information about your personal data, and to opt out of certain data uses where required by law.

You may request deletion of your account or personal data by contacting admin@foryn.ai, subject to our legal, security, fraud-prevention, and record-retention obligations.

We may need to verify your identity before processing a request.

The Service is not directed to children under 18, and we do not knowingly collect personal data from children under 18.

Foryn is U.S.-based. If you access the Service from outside the United States, you understand that your information may be processed in the United States and other jurisdictions where our service providers operate.

We may update this Privacy Policy from time to time. If we make a material change, we will post the updated version, update the last updated date, and may provide additional notice where appropriate.