FabuBlox Privacy Policy

When you use AI Features, we process your prompts, instructions, selected files and other information you make available to the feature, generated responses, and records of tool calls and agent actions. If you connect another service, we process the information accessible within the permissions you grant and any connection credentials or tokens needed to operate the connection. We use this information to perform your requests, provide and support AI Features, investigate errors and abuse, evaluate performance and safety, and improve the Services subject to the restrictions below. Authorized personnel may access relevant information as needed for these purposes, subject to access controls and confidentiality obligations.

We do not use your account content, AI Inputs or Outputs to train or fine-tune generalized AI models, or authorize our AI providers to do so. We do not intentionally use that content or confidential insights derived from it to populate AI responses for other customers or unaffiliated third parties. This does not prevent service-provider processing on our behalf or sharing you expressly direct, including through collaboration or publication settings. We may use operational metadata and aggregated de-identified statistics that do not reasonably identify people or organizations or reveal proprietary recipes, process know-how or other confidential content to operate and improve the Services. We do not attempt to re-identify those statistics.

We protect your personal data using appropriate physical, technical, organizational and administrative security measures. Please be aware that no method of transmitting or storing data is completely secure.

All data is encrypted via SSL/TLS when transmitted from our servers to your browser. The database backups are also encrypted.

Data is encrypted at-rest. This is drive level encryption. You may read the Google Cloud security policies for more information.

Data is not encrypted within the database itself (since they need to be ready to send to you when you need them) but all data is encrypted via SSL/TLS when in transit from or to the database.

We strive to apply the same data rights to all customers, regardless of their location. GDPR regulations requires these rights to be easy to comprehend. Some of these rights include:

• Right to Know
• Right of Access
• Right to Correction
• Right to Erasure / "To Be Forgotten"
• Right to Complain
• Right to Restrict Processing
• Right to Object
• Right to Portability
• Right to not Be Subject to Automated Decision-Making
• Right to Non-Discrimination

Many of these rights can be exercised by signing in and updating your account information. Please note that certain information may be exempt from such requests under applicable law. For example, we need to retain certain information in order to provide our services to you.

In some cases, we also need to take reasonable steps to verify your identity before responding to a request, which may include, at a minimum, depending on the sensitivity of the information you are requesting and the type of request you are making, verifying your name and email address. If we are unable to verify you, we may be unable to respond to your requests. If you have questions about exercising these rights or need assistance, please contact us at hello@fabublox.com

In many of our applications, we give you the option to delete content. The deleted content cannot be accessed via the application and we are not able to retrieve it for you. Trashed content may persist for a period in our active systems and in database backups. Any content trashed in your product accounts is purged from all of our systems and logs within 90 days.

If you choose to cancel your account, your content will become immediately inaccessible and should be purged from our systems in full within 90 days. This applies both for cases when an account owner directly cancels and for auto-canceled accounts.

The account-content and deletion periods above also apply to stored AI Inputs, Outputs and content-bearing action logs. Connection credentials or tokens are retained as needed to operate an authorized connection. Disconnecting an integration does not by itself delete conversation history or recall information already held by an independently operated connected service. You may request deletion through account controls or by contacting us.

Our products and other web properties are primarily housed in the United States. If you are located in the European Union, UK, or elsewhere outside of the United States, please be aware that any information you provide to us will be transferred to and stored in the United States. By using our websites or Services and/or providing us with your personal information, you consent to this transfer.

To provide products or services you've requested. We use some third-party subprocessors to help run our applications and provide the Services to you. We maintain a data processing agreement with each of them, including appropriate safeguards for any transfer of personal data outside the European Economic Area or the United Kingdom:

• Google Cloud Provider: https://cloud.google.com/terms/data-processing-addendum
• Auth0: https://auth0.com/docs/secure/data-privacy-and-compliance/gdpr
• Sentry: https://sentry.io/legal/dpa/
• AI service providers that help us operate our AI Features, including by processing inputs and generating outputs on our behalf, subject to contractual confidentiality and data-protection obligations. We do not authorize these providers to use your content to train or fine-tune generalized AI models.
• We provide the information needed to fulfill AI requests to these providers acting on our behalf, subject to contractual protections and our AI data-use restrictions above. Changes to providers do not expand the permitted uses of your content.
• When you direct an agent to send information to an independently operated connected service, that service handles the information under its own terms and privacy practices. Your selected permissions determine the information and actions made available through the connection. Disconnecting stops future access through that connection but does not reverse completed actions or recall information already sent.

Each of these subprocessors have their own privacy policies that meet the protections in this privacy policy.

hello@fabublox.com

Privacy Contact:
Jack Muller - jack@fabublox.com