Privacy Policy

1. Scope

This policy applies to FFDB websites, applications, and services. It does not apply to third-party services you connect to FFDB.

If a signed enterprise agreement includes different data terms, that agreement controls to the extent of conflict.

2. Information We Collect

• Account data: name, email address, organization/account metadata.
• Operational data: logs, device/browser identifiers, IP address, security events.
• Billing data: subscription and transaction metadata (processed by payment providers).
• Customer Data you store or transmit through FFDB.
• Support and communication data sent to us.

3. How We Use Information

• Provide, secure, maintain, and improve FFDB.
• Authenticate users and prevent abuse, spam, fraud, and service attacks.
• Process billing and enforce plan limits.
• Respond to support requests and legal obligations.
• Send service-critical notices and administrative communications.

4. Legal Bases (Where Applicable)

Where required by law, we process personal information based on contract necessity, legitimate interests (such as security and product operations), legal obligations, and consent where applicable.

5. Sharing and Disclosures

We may share information with:

• Service providers (hosting, infrastructure, analytics, support, payment processing).
• Professional advisors and legal authorities when required.
• Successors in a merger, acquisition, financing, or asset transfer.

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising.

We may use subprocessors to process information on our behalf under contractual confidentiality and security obligations.

6. Data Ownership and Portability

• You retain ownership of your Customer Data.
• You may download/export your Customer Data at any time via available tools.
• We process Customer Data only to provide and secure the service, subject to our Terms and any separate written enterprise agreement.

7. Security

• We use administrative, technical, and organizational safeguards.
• Secrets are encrypted at rest.
• Access controls, monitoring, and abuse prevention are used to protect systems.

If we confirm a data incident requiring notice under applicable law, we will provide notice without undue delay and target notice within 48 hours of confirmation.

No security measure is perfect and we cannot guarantee absolute security.

8. Retention and Deletion

We retain personal information only as long as needed for service delivery, legal obligations, dispute resolution, and legitimate business purposes.

After account closure, we may delete or de-identify data after a commercially reasonable period, except where storage is required by law, security obligations, fraud prevention, tax/accounting rules, or contractual commitments.

9. Cookies and Similar Technologies

We use cookies and similar technologies for authentication, session management, security, analytics, and feature performance. You can control cookies through browser settings, but disabling some cookies may affect service functionality.

10. Do Not Track

FFDB does not currently respond to browser "Do Not Track" signals in a uniform way because no consistent industry standard exists.

11. International Transfers

If information is transferred across borders, we use appropriate safeguards as required by law. Enterprise customers may request additional contractual protections.

12. Your Privacy Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, export, restrict, or object to certain processing of personal information, and to withdraw consent where processing is based on consent.

To submit a request, contact us at the email below. We may need to verify your identity before processing a request and may decline requests where a legal exemption applies.

13. California Privacy Rights (CCPA/CPRA)

California residents may have rights to request access, correction, deletion, and portability of personal information, and to limit certain uses of sensitive personal information where applicable. You may exercise rights by contacting us at the email below.

We will not discriminate against you for exercising applicable privacy rights.

14. Children

FFDB is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

15. Enterprise and Isolated Deployments

We may offer enterprise or isolated deployments under explicit written agreements, including custom maintenance/support obligations and data handling terms.

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will post updates with a revised effective date.

Material changes may be communicated through the product or by email when required by law.

17. Contact

Privacy and legal requests: [email protected]