Privacy Policy

1. Scope

This policy applies to Firmory products and services that link to it. It does not govern third-party websites, AI tools, or services that have their own privacy notices.

If your employer or another organization provides your Firmory workspace, that organization may control the workspace content and your access to it. Contact your workspace administrator to learn about your organization’s privacy practices.

2. Information we collect

The information we collect depends on how you use Firmory.

• Account and profile information, such as your email address, display name, avatar, authentication records, and account preferences.
• Workspace information, such as company, project, role, membership, review, and permission settings.
• Content you choose to provide, including files, document text, prompts or instructions submitted through a connected workflow, comments, and related metadata.
• Relationship and activity metadata, such as source files, versions, connected outputs, timestamps, and actions taken in a workspace.
• Device, network, and diagnostic information, such as IP address, browser or app version, operating system, crash data, security events, and service logs.
• Communications you send to us, including support requests and feedback.

3. Information we do not intentionally collect

Firmory is not designed to scan your entire hard drive or import your complete AI chat history. We process content that you, your organization, or a connected tool intentionally makes available to Firmory.

Firmory is not intended for Social Security numbers, payment-card data, health records, biometric identifiers, or other highly sensitive personal information. Please do not submit such information unless a Firmory feature expressly requests it and provides an appropriate notice.

4. How we obtain information

We receive information directly from you, from a workspace administrator or teammate, automatically from your browser or application, and from third-party tools you choose to connect. A connected tool's processing remains subject to its own terms and privacy policy.

5. How we use information

We use personal information to provide and secure Firmory, authenticate users, manage workspaces and permissions, record file relationships and versions, operate review workflows, provide support, diagnose errors, prevent abuse, communicate service information, comply with law, and improve the product.

We do not use workspace content to train general-purpose AI models unless we first provide a separate notice and obtain any consent required by law or contract.

6. How we disclose information

We may disclose information to authorized members and administrators of your workspace; vendors that provide hosting, authentication, security, diagnostics, communications, and customer-support services; connected tools at your direction; professional advisers; and government authorities or other parties when required by law or necessary to protect rights, safety, and service integrity.

We may transfer information in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality protections.

We do not sell personal information for money or share personal information for cross-context behavioral advertising. If that practice changes, we will update this policy and provide legally required choices before the change applies.

7. Retention

We retain personal information for as long as reasonably necessary to provide the service, maintain security and audit records, comply with legal obligations, resolve disputes, and enforce agreements. The period depends on the information type, workspace settings, account status, contractual commitments, and legal requirements. We delete or de-identify information when it is no longer needed, unless retention is required or permitted by law.

8. Security

We use administrative, technical, and organizational safeguards designed to protect personal information. No storage or transmission method is completely secure, so we cannot guarantee absolute security. Please protect your email account and promptly report suspected unauthorized access.

9. Your choices and U.S. privacy rights

You may update certain account information in the product and may ask us to access, correct, delete, or provide a copy of personal information. Depending on your state and whether its law applies to Firmory, you may also have rights to know categories and sources of information, opt out of certain sale, sharing, targeted advertising, or profiling, limit certain uses of sensitive information, appeal a denied request, and receive equal service when exercising a privacy right.

Submit a request to contact@firmory.ai. We may verify your identity and authority before completing a request. An authorized agent may submit a request where permitted by law. We will not discriminate against you for exercising an applicable privacy right. Some information may be exempt from a request, including information we must retain for security, legal, or contractual reasons.

10. Children

Firmory is a workplace product and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

11. International use

Firmory and its service providers may process information in countries other than where you live. Where required, we use legally recognized safeguards for international transfers.

12. Cookies and browser storage

This website uses local storage to remember your cookie choices (firmory-cookie-consent), appearance (firmory-theme). Cookie choices expire after 180 days; appearance preferences remain until changed or cleared. These preferences support your requested settings and do not require optional analytics consent. Hosting providers may also process technical request logs to deliver and secure the website.

Optional tools remain off until you choose to enable them. Analytics and session recordings have separate controls, both off by default. Accepting, rejecting, or saving a custom choice is remembered for the same 180-day period on this browser. Closing the settings dialog, scrolling, or continuing to browse does not grant consent.

If you enable analytics, PostHog may process page visits, referral and campaign information, browser and device details, and permitted interaction events. Its first-party identifiers use names beginning with ph_ and may be stored in cookies or local storage. We configure PostHog cookies to expire after 180 days. Browser local-storage identifiers may remain until cleared. PostHog session recordings and automatic interaction capture are disabled.

If you enable session recordings and heatmaps, Microsoft Clarity may process homepage interactions such as clicks, scrolling, and page layout, along with device and browser information. Clarity uses _clck (up to one year) and _clsk (up to one day) to associate visits and session activity. Advertising storage is set to denied. Microsoft processes this information under its privacy statement; enabling recordings is optional and is not required to use this website.

Open Cookie settings in the footer to change your choices or reject optional tools at any time. Withdrawing a permission stops the relevant tools, removes known analytics identifiers accessible to this website, and refreshes the page to unload running scripts. We cannot delete cookies owned by other domains or information already received by providers from your browser. Withdrawal does not affect the lawfulness of processing before withdrawal; contact us to exercise applicable deletion rights.

These choices apply to this landing website and browser. The app at app.firmory.ai is a separate service and may use storage needed to deliver a workspace or sign you in. Its own optional processing needs its own controls. Our local product video does not load an external video player.

13. Information for people in Europe

Where the EU General Data Protection Regulation, UK GDPR, or other applicable European data-protection law applies, we process information on the following bases: performance of a contract for requested account and service functions; legitimate interests in securing the service, preventing abuse, responding to inquiries, and maintaining service reliability, subject to your rights and interests; compliance with legal obligations; and your consent for optional website analytics and session recordings. You can withdraw that consent through Cookie settings without losing access to the website.

Firmory determines the purposes and means of processing website visitor information and information used to manage its customer relationships. Where an organization controls workspace content and Firmory processes it on that organization’s instructions, the organization is responsible for that processing as controller and Firmory acts as processor. Workspace-related requests may need to be handled with your organization’s administrator.

Subject to the conditions in applicable law, you may request access, correction, erasure, restriction of processing, or a portable copy of your personal data. You may object to processing based on legitimate interests and withdraw consent at any time. You may also complain to a data-protection authority in the country where you live or work, or where an alleged infringement occurred. You do not have to contact us before making a complaint.

Send rights requests or privacy questions to contact@firmory.ai. We may ask for information reasonably needed to verify your identity. We normally respond within one month; where legally permitted, a complex request may take up to two additional months, and we will explain the extension within the initial month.

Our service providers may process data outside the European Economic Area or the UK. Where applicable law requires transfer safeguards, these must be in place before the transfer, such as an applicable adequacy decision or approved contractual safeguards. Contact us for information about the safeguards applicable to your data and how to obtain a copy.

14. Changes and contact

We may update this policy as our practices or legal obligations change. We will post the revised policy with a new effective date and provide additional notice when required. For privacy questions or requests, email contact@firmory.ai.