Foo AI

Privacy Policy

Last updated: FILL IN: date

This policy explains what data Foo AI ("we", "us") collects when you use the Foo AI desktop application and this website, and how it is used. It is a template describing the data flows that actually exist in the product — replace the placeholders below with your finalized legal text before publishing.

1. Controller

FILL IN: legal name and address of the data controller. Contact for privacy matters: FILL IN: privacy contact email.

2. What we collect

  • Account data: email address and authentication credentials, managed via our authentication provider (Supabase Auth).
  • Usage data: request counts, token usage, and cost per request, used to enforce plan limits and shown back to you in your dashboard's usage history.
  • Conversation content: prompts you send and the agent's responses within a project are stored so your conversation history persists across sessions.
  • Billing data: subscription and payment details are processed and stored by Stripe, our payment processor — we do not store your card details.
  • Local files: the desktop app reads and edits files in the project folders you open. File contents are sent to the configured AI model provider only as needed to fulfill your requests, and are not otherwise transmitted to us.

3. How we use it

To provide and operate the service, enforce plan limits, process payments, respond to support requests, and improve reliability. We do not sell personal data.

4. Sub-processors

  • Supabase (authentication and database hosting)
  • Stripe (payment processing)
  • OpenRouter and its underlying model providers (AI inference)
  • FILL IN: hosting/infrastructure provider, if additional to the above

5. Data retention

Account and conversation data is retained for as long as your account is active. You may request deletion at any time by contacting FILL IN: privacy contact email.

6. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise these rights, contact us at FILL IN: privacy contact email.

7. International transfers

FILL IN: describe where data is hosted and any transfer safeguards (e.g. SCCs) if applicable

8. Changes to this policy

We may update this policy from time to time. Material changes will be announced via the application or by email.