Privacy Policy

This Privacy Policy explains how Fancy N Design LLC (“Company”, “we”, “us”, or “our”) collects, uses, shares, and protects personal information when you use Focus-OS™, our website, software, applications, AI-assisted tools, subscriptions, and related services (the “Service”). By using the Service, you acknowledge that your personal information will be handled as described in this Privacy Policy.

1. Information we collect

We may collect the following categories of information:

• Account information: name, email address, login details, company name, plan, account settings, and support history.
• Billing information: subscription plan, invoices, payment status, tax information, billing address, and limited payment details. Full card numbers are processed by Stripe and are not stored by us.
• User Content: prompts, ideas, notes, documents, messages, uploaded files, AI outputs, and other content you submit to or generate through the Service.
• Usage and device information: IP address, device type, browser type, operating system, pages viewed, features used, referral URLs, timestamps, approximate location derived from IP address, logs, and diagnostic data.
• Communications: messages you send to us, support requests, survey responses, and feedback.
• Cookies and similar technologies: cookies, local storage, pixels, and similar technologies for login, security, preferences, analytics, and website performance.

2. How we use information

We use personal information to:

• provide, operate, maintain, and improve the Service;
• create and manage accounts;
• process subscriptions, payments, invoices, taxes, refunds, and cancellations;
• provide AI-assisted features and generate outputs requested by users;
• respond to support requests and communicate with users;
• send service notices, billing notices, security alerts, and product updates;
• monitor, prevent, and investigate fraud, abuse, security incidents, and technical issues;
• analyze usage and improve performance, reliability, and user experience;
• comply with legal obligations and enforce our Terms.

3. Legal bases for processing

Where privacy laws require a legal basis, we process personal information based on one or more of the following:

• performance of a contract, such as providing the Service and billing your subscription;
• legitimate interests, such as improving the Service, securing it, and preventing abuse;
• consent, such as certain cookies or marketing communications where required;
• legal obligations, such as tax, accounting, compliance, and law enforcement obligations.

4. AI processing

The Service may process User Content through AI providers to generate, summarize, organize, or improve content at your request. You should not submit sensitive personal information, confidential third-party information, or regulated data unless you are authorized to do so and the Service is appropriate for that use. AI outputs may contain personal information if your input contains personal information. You are responsible for reviewing outputs before using, publishing, or sharing them.

5. How we share information

We may share personal information with:

• Service providers and sub-processors that help us provide hosting, database, authentication, storage, payment processing, email, analytics, security, AI processing, and customer support.
• Payment processors, including Stripe, which processes payments and may collect payment and billing information directly from you.
• AI and infrastructure providers that help generate AI outputs, host the Service, send emails, store data, and monitor performance.
• Professional advisers, including lawyers, accountants, auditors, insurers, and other advisers where necessary.
• Authorities and legal parties when required by law, legal process, court order, or to protect rights, safety, users, and the Service.
• Business transfer participants as part of a merger, acquisition, financing, reorganization, sale of assets, or similar transaction.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising unless we clearly state otherwise and provide any required opt-out rights.

6. Current sub-processors

Our current core sub-processors may include:

• Stripe: payments, billing, invoices, subscriptions, and fraud prevention;
• Supabase: database, authentication, file storage, and backend infrastructure;
• OpenAI: AI processing for prompts, User Content, and generated outputs;
• Resend: transactional and product email delivery;
• Vercel: hosting, deployment, performance, logs, and analytics if enabled.

We may update this list as our Service evolves. We will provide notice of material changes where required by law.

7. International transfers

We and our service providers may process personal information in countries other than the country where you live. These countries may have different privacy laws. Where required, we use appropriate safeguards for international transfers, such as contractual protections or other lawful transfer mechanisms.

8. Data retention

We keep personal information for as long as reasonably necessary to provide the Service, maintain records, comply with legal obligations, resolve disputes, enforce agreements, prevent abuse, and support legitimate business purposes. You may request deletion of your account or personal information. We may retain certain information where required or permitted by law, including payment, tax, security, fraud prevention, backup, and legal records.

9. Security

We use reasonable technical and organizational measures designed to protect personal information. However, no online service, storage system, or transmission method is completely secure. You are responsible for using a strong password, keeping credentials confidential, and protecting access to your devices and email account.

10. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your personal information. You may also have the right to withdraw consent where processing is based on consent. To exercise privacy rights, contact us at support@focus-os.ai. We may need to verify your identity before responding. You may also have the right to complain to your local data protection authority.

11. Marketing communications

You may unsubscribe from marketing emails by using the unsubscribe link in those emails or by contacting us at support@focus-os.ai. We may still send non-marketing messages such as account, security, billing, and service notices.

12. Cookies

We may use necessary cookies for login, security, and core website functionality. We may also use optional analytics or performance cookies where enabled. If required by law, we will request consent before using non-essential cookies. You can usually control cookies through your browser settings, but disabling cookies may affect the Service.

13. Children

The Service is not intended for children under 16 years old, or any higher age required by applicable law. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us and we will take appropriate steps to delete it.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on our website with a new “Last updated” date. If changes are material, we will provide additional notice where required by law.

15. Contact

For privacy questions or requests, contact us at: