Privacy Policy

Fias Inc. ("Fias," "we," "us," or "our") operates the Fias platform. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

Information You Provide

Account information: username, email address, and password when you create an account
Content: messages, conversations, Arches, plugins, and other content you create or submit through the Service
Communications: messages you send through chat channels, direct messages, and guilds
Payment information: credit purchase history, subscription status, transaction records, and payment method metadata (card brand and last four digits). We do not store full payment card numbers, CVVs, or bank account details -- these are processed and stored exclusively by our payment processors (Stripe and Coinbase Commerce).
Creator payout information: if you set up payouts as a creator, we collect identity verification data (processed by Stripe Connect), payout history, and earnings records. Tax identification information (SSN/EIN) may be collected as required for 1099 reporting under US law.
Support requests: information you provide when contacting us for support

Information Collected Automatically

Usage data: pages visited, features used, interactions with the Service, and timestamps
Device information: browser type, operating system, and device identifiers
Log data: IP address, access times, and error logs
AI usage data: AI model provider, model name, token counts, and performance metrics associated with your use of AI-powered features
Ad clicks: if you reach Fias from an ad, we record the click: the click identifier, campaign, ad and keyword, the page you landed on, and your cookie choice. Google also tells us the device type and approximate location of the click. These click records are deleted after 400 days. If you then start a trial or create an account, we also record which ad brought you, so we can tell which ads bring people who go on to use Fias; that record is kept as described in "Data Retention" below.

Cookies and Similar Technologies

We use cookies, local storage, and similar technologies to operate the Service. These fall into two categories:

Strictly necessary: required for authentication, session management, and security. These are always on.
Optional: used to remember your preferences and analyze how the Service is used. In the EEA and United Kingdom, we set these only with your consent, which you can manage or withdraw at any time through our cookie preferences.

You can also control cookies through your browser settings; disabling them may limit your ability to use parts of the Service.

2. How We Use Your Information

We use your information to:

Provide, operate, and maintain the Service
Process transactions and manage your account
Send you service-related communications (e.g., account verification, security alerts)
Enforce our Terms of Service and Acceptable Use Policy
Respond to your requests and provide support
Monitor and analyze usage patterns to improve the Service
Detect, prevent, and address technical issues, fraud, and abuse
Comply with legal obligations

We do not use your content, conversations, or inputs to train AI models.

3. Legal Bases for Processing (EEA/UK Users)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal information on the following legal bases:

Contract: to provide the Service, process payments, and fulfill our obligations under these Terms.
Legitimate interests: to operate, secure, and improve the Service; to detect and prevent fraud and abuse; and to communicate with you about your account.
Legal obligation: to comply with applicable laws, including tax, accounting, and anti-money-laundering requirements.
Consent: for processing that requires your consent, such as non-essential cookies. You may withdraw your consent at any time.

4. How We Share Your Information

We may share your information in the following circumstances:

Third-party AI providers: When you use AI-powered features, your inputs are sent to third-party AI providers (such as OpenAI, Anthropic, and Google) for processing. These providers process your data according to their own privacy policies.
Payment processors: When you purchase credits or subscribe, your payment information is processed by Stripe (for card payments and subscriptions) or Coinbase Commerce (for cryptocurrency payments). These processors handle your financial data according to their own privacy policies. Stripe's privacy policy is available at stripe.com/privacy. Coinbase's privacy policy is available at coinbase.com/legal/privacy. For creator payouts, Stripe Connect processes identity verification and bank account information.
Service providers: We use third-party services to help operate the Service, including cloud hosting (Amazon Web Services), authentication, and analytics. These providers access your information only as necessary to perform their services.
Legal requirements: We may disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
With your consent: We may share your information for purposes not described here with your explicit consent.

We do not sell your personal information to third parties.

5. Google Ads Accounts You Connect

When you connect a Google Ads account to the Advertising Optimization arche, you sign in with Google and grant Fias access to that account through the Google Ads API.

What we access. The campaigns, ad groups, ads, keywords and budgets in the account; its performance reports (impressions, clicks, cost and conversions); Google's record of each click on ads that Fias manages (the keyword, device type, position on the results page, and the approximate location Google reports); the search terms report; and keyword planning data such as search volumes and typical bids.

How we use it. Only to provide the arche's features to you: to create and change the campaigns you approve, keep spending within the limits you set, show you reports, suggest improvements, and connect ad clicks to the sign-ups they lead to. We create, change, pause or resume campaigns only when you, or a member of your workspace with permission, asks us to, or within automation settings you turn on.

Who can see it. Members of the workspace where you connected the account, according to their role. To write and improve ad copy, we send summaries of ad performance to our AI providers (see "How We Share Your Information"). The Fias AI assistant also reads this data when you ask it about your ads. We do not sell Google user data, use it to advertise to anyone, or use it to train AI models.

How long we keep it. Your access tokens are stored encrypted. When you disconnect the account, we delete them immediately and can no longer read the account. Per-click records and search terms reports are deleted after 400 days. Other reports stay in your workspace's history until you ask us to erase them.

Removing access. You can also remove Fias's access at any time from your Google Account at myaccount.google.com/connections.

Fias's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service.

Closing your account. When you close your account, we deactivate it and revoke access to the Service immediately, and we anonymize your request history. Content you have stored in the Service — such as documents, notes, and other material in your workspace — is not deleted automatically at closure. It is retained until you ask us to erase it, or until it is removed under a retention schedule, as described below.

Requesting erasure. You may ask us to erase your personal information at any time, whether or not you close your account, by contacting us using the details in the "Contact Us" section. We will respond within 30 days, or as required by applicable law, and will delete or anonymize the information we hold, except where we are required or permitted to retain it for legal, regulatory, or legitimate business purposes — for example financial and transaction records, signed documents and the record of how they were signed (see below), or information needed to resolve a dispute or enforce our agreements.

Backups and prior versions. Deleting content removes it from the active Service. Copies can remain for a limited period in encrypted backups and in retained prior versions of stored files, which exist so that data can be recovered after an incident or an accidental deletion. Those copies are not used to provide the Service and are overwritten in the ordinary course as the backup and version-retention windows elapse.

Shared conversation links automatically expire 30 days after creation.

Signed documents. When you sign a document through the Service, or send one for signature, the completed document and the record of how it was signed — who consented to electronic records and when, who viewed the document, and who signed it — are retained for seven years from the date the document is completed, and for longer where the law or the agreement governing that document requires it. These records are kept even if you close your account, and they are not removed on an erasure request. The other parties to a signed agreement rely on them as evidence of an agreement you are all still bound by, so erasing them at one party's request would destroy another party's evidence.

Payment transaction records and credit transaction history are retained indefinitely for legal, accounting, and audit purposes, even after account closure.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

Access: Request a copy of the personal information we hold about you
Deletion: Request erasure of your personal information, subject to the retention exceptions described in "Data Retention" above
Correction: Request correction of inaccurate personal information
Export: Export your conversation data in JSON or Markdown format through the Service
Account closure: Close your account at any time through your account settings
Restriction: Request that we restrict processing of your personal information in certain circumstances
Objection: Object to processing based on our legitimate interests, including for direct marketing
Withdraw consent: Where we rely on your consent, you may withdraw it at any time without affecting processing performed before withdrawal

To exercise these rights, contact us at privacy@fias.io. We will respond to your request within 30 days, or as required by applicable law.

California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how it is used, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at privacy@fias.io.

EEA/UK Residents

If you are located in the EEA or the United Kingdom, you also have the right to lodge a complaint with your local data protection supervisory authority. UK residents may contact the Information Commissioner's Office at ico.org.uk.

8. Data Security

We implement reasonable technical and organizational measures to protect your personal information, including encryption in transit and at rest, access controls, and regular security assessments. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

9. International Data Transfers

Your information may be transferred to and processed in the United States, where our servers are located. If you are accessing the Service from outside the United States, please be aware that your information may be subject to U.S. data protection laws, which may differ from those in your country.

Where personal information is transferred from the EEA, United Kingdom, or Switzerland to the United States, we rely on the Standard Contractual Clauses approved by the European Commission (and the UK International Data Transfer Addendum, where applicable) as the legal mechanism for such transfers.

10. Do Not Track

Some browsers transmit a "Do Not Track" signal. Because there is no common industry standard for how to respond, the Service does not currently respond to Do Not Track signals.

11. Children's Privacy

The Service is not intended for anyone under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that we have collected information from a child under 18, we will take steps to delete that information promptly.

12. Third-Party Links and Services

The Service may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you use.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on the Service with a new "Last Updated" date. Your continued use of the Service after the changes take effect constitutes your acceptance of the revised policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Fias Inc.
Email: privacy@fias.io