Privacy Policy

Last Updated: November 12, 2026

Welcome to getfynch.com ("Fynch," "we," "us," or "our"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website, AI agents, APIs, and web workspace (collectively, the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect information about you in a variety of ways when you interact with our Service:

• Account Information & Third-Party Authentication Data: When you register for an account directly or authenticate using third-party identity providers such as Google OAuth ("Sign in with Google") or Microsoft Identity Platform / Azure AD ("Sign in with Microsoft"), we collect personal profile information, including your name, email address, profile picture, language preference, unique account identifier, and company or organization details, to create, verify, and administer your account.
• User Input and Agent Communications: We collect the content, instructions, files, and prompts you provide when you interact with our AI agents via email or the web workspace ("User Input"). This is necessary for the agents to execute tasks, generate drafts, and perform analyses on your behalf. As set forth in our Terms of Use, you agree not to submit sensitive personal health, government identification, or financial account credentials to the Service.
• Usage Data & Telemetry: We automatically collect technical information about how you access and navigate the Service, such as your IP address, browser type, device information, operating system, and actions taken within your workspace dashboard (e.g., configuring agents, running workflows, or creating documents). This data is used for diagnostics, platform stability, and service analytics.

2. How We Use Your Information

We use the information collected about you via the Service to:

• Authenticate your identity, issue secure sessions, and manage your account across supported identity providers.
• Provide the core functionality of the Service, including processing your User Input to generate responses, summaries, automations, and deliverables from your AI agents.
• Communicate with you regarding your account, security notices, product updates, and technical support.
• Monitor, protect, and analyze system performance, usage trends, and operational health.
• Prevent fraudulent activity, enforce our Terms of Use, and ensure workspace security.

Important Note on AI Model Training: We do not use your User Input, customer content, or the drafts generated by your agents to train, retrain, or fine-tune our core generalized artificial intelligence or machine learning models.

3. Google User Data & API Services Compliance

When you choose to authenticate with Fynch using your Google Account ("Sign in with Google") or connect Google services, our collection, use, and disclosure of your Google user data is strictly governed by the following commitments:

• Google User Data Accessed: When authenticating via Google OAuth, we access only basic profile information provided by Google: your name, email address, language preference, and profile picture (OpenID scopes: openid, email, profile). If you connect Google Calendar or other Google services to enable scheduling and availability management for your AI agent, we access only the specific calendar event metadata (event title, start/end time, attendee status, and availability) required to execute those workflows at your explicit direction.
• Purpose of Use: We use your Google user data solely to authenticate your identity, create and administer your Fynch account, deliver critical service-related communications, and execute user-directed agent actions. We never use Google user data for advertising, retargeting, marketing, or behavioral profiling.
• No Sale or Commercial Transfer: We do not sell, rent, or trade Google user data. We do not transfer or disclose your Google user data to third parties, data brokers, or advertising networks. Google user data is transferred only to trusted cloud infrastructure service providers (e.g., our secure database and cloud hosting providers) strictly necessary to operate the Service, or as required by applicable law.
• No AI Model Training on Google User Data: We do not use Google user data—or content received via Google integrations—to train, retrain, or improve generalized artificial intelligence or machine learning models.
• Human Access Restrictions: We strictly prohibit our personnel or any humans from reading your Google user data unless:
  1. We have obtained your explicit, affirmative agreement for specific troubleshooting or customer support requests;
  2. It is necessary for security purposes, such as investigating a security incident, abuse, or system breach;
  3. It is necessary to comply with applicable laws, regulations, or legal process; or
  4. The data has been aggregated and anonymized for internal technical operations.
• Data Security: All Google user data is protected using industry-standard administrative, physical, and technical safeguards. Data is encrypted in transit using TLS 1.3/HTTPS and encrypted at rest in our secure database infrastructure. Access is restricted to authorized personnel following the principle of least privilege.
• Data Retention & User Revocation: We retain Google user data only for as long as your Fynch account remains active. You may request account and data deletion at any time by contacting us at help@getfynch.com. Upon receiving a verified deletion request, we will permanently delete or anonymize your Google user data within thirty (30) calendar days, unless retention is required by applicable law. You may also review or revoke Fynch's access to your Google Account at any time through your Google Account Security Settings.
• Google Limited Use Disclosure: Fynch's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Microsoft Account & API Services Compliance

When you choose to authenticate with Fynch using your Microsoft Account (Personal, Work, or School accounts via Microsoft Entra ID / Azure AD) or connect Microsoft 365 services, our collection, use, and disclosure of your Microsoft data adheres to the following standards:

• Microsoft Account Data Accessed: When authenticating via Microsoft OAuth, we request only the standard identity permissions necessary to authenticate you: your name, email address, profile picture, unique user identifier, and organizational tenant identifier (standard Microsoft identity scopes: openid, email, profile, and User.Read). If you connect Microsoft 365 tools (such as Outlook Calendar or Teams) to enable scheduling for your AI agent, we access only the specific calendar and meeting event metadata required to execute those workflows at your direction.
• Purpose of Use: Microsoft account data is used exclusively to authenticate your identity, create and administer your workspace account, deliver essential administrative notices, and execute user-directed agent automations. We never use Microsoft account data for advertising, retargeting, or profiling.
• No Commercial Transfer or Sale: We do not sell, rent, or commercialize Microsoft account data. We do not share or transfer Microsoft user data to third parties, data brokers, or external advertising networks. Data is transferred only to trusted cloud hosting and database service providers necessary to provide the Service, subject to strict confidentiality terms.
• No AI Model Training on Microsoft Data: We do not use Microsoft account data, customer organizational data, or content received via Microsoft integrations to train, retrain, or improve generalized artificial intelligence or machine learning models.
• Human Access Restrictions: We strictly prohibit our personnel or contractors from reading your Microsoft account or integration data, except with your explicit prior consent for troubleshooting, to investigate security incidents or abuse, or as required by law.
• Data Security: Microsoft account data is encrypted in transit using TLS 1.3/HTTPS and encrypted at rest in our secure database infrastructure using AES-256. Access within our systems is strictly partitioned by tenant and governed by the principle of least privilege.
• Data Retention & Consent Revocation: Microsoft account data is retained only while your Fynch workspace remains active. You may request account deletion at any time by contacting help@getfynch.com. Deletion requests are fulfilled within thirty (30) calendar days. You may also inspect, manage, or revoke Fynch's access permissions to your Microsoft Account at any time via:
  • Personal Microsoft Accounts: Microsoft Account Consent Management
  • Work or School Accounts (Entra ID): Microsoft My Apps Portal or Microsoft My Account
• Compliance with Microsoft Policies: Fynch's collection, use, and handling of Microsoft data complies with the Microsoft Identity Platform Guiding Principles and the Microsoft APIs Terms of Use.

5. Disclosure of Your Information

We do not share, sell, rent, or trade your personal information with third parties for their commercial marketing purposes. We disclose information only under the following limited circumstances:

• By Law or to Protect Rights: If we believe release is necessary to respond to lawful legal process (e.g., court orders, subpoenas), investigate potential violations of our policies, or protect the rights, property, and safety of Fynch, our users, or the public.
• Third-Party Infrastructure & Service Providers: We share information with trusted third-party service providers who assist us in operating our Service (e.g., cloud database hosting, payment processing, transactional email delivery, and error monitoring), subject to strict confidentiality and security agreements.
• With Your Consent: We may share or disclose your information for any other specific purpose upon receiving your explicit consent.

6. Data Security

We implement robust administrative, technical, and physical security measures to safeguard your personal information against unauthorized access, destruction, loss, or alteration. All web traffic and API interactions are encrypted in transit via TLS 1.3, and data stored in our cloud infrastructure is encrypted at rest using AES-256. While we employ rigorous security practices, please be aware that no method of transmission over the Internet or electronic storage is completely infallible.

7. Data Retention

We retain your personal information for as long as your account is active, or as needed to provide you with the Service, maintain business records, resolve disputes, and comply with legal obligations. When data is no longer needed, it is deleted or anonymized in accordance with our data retention schedules.

8. Your Rights and Choices

Depending on your jurisdiction, you may have rights regarding your personal information, including the right to:

• Access and request a copy of the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request the permanent deletion of your personal data.
• Object to or request restriction of our processing of your personal data.

To exercise any of these rights, please email us at help@getfynch.com. You may also review, update, or modify your profile details at any time through your workspace account settings.

9. International Users and Cross-Border Data Transfers

Fynch is headquartered in the United States, and our core databases, application servers, and service infrastructure are hosted primarily in the United States (with edge routing and security delivery operating across global cloud locations). Our Service is designed and intended primarily for business users and organizations located within the United States.

If you choose to access or use the Service from the European Economic Area (EEA), the United Kingdom, Switzerland, Canada, or another region with laws governing data collection and use that differ from U.S. federal and state law, you acknowledge that your personal information—including account details, authentication data, technical telemetry, and workspace inputs—will be transferred to, stored, and processed in the United States and other countries where our trusted cloud infrastructure and service providers operate.

Where required by applicable data protection laws (such as for transfers originating from the EEA, the UK, or Switzerland), we rely on recognized legal transfer mechanisms in place with our cloud infrastructure and subprocessor partners, such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or applicable adequacy frameworks. If you have questions regarding how cross-border data transfers are safeguarded, please contact us at help@getfynch.com.

10. Children's Privacy

Our Service is designed for business professionals and teams. It is not intended for or directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us immediately so we can promptly delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our legal obligations, product capabilities, or operational practices. When updates occur, we will post the revised policy on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

Contact Us

If you have questions, feedback, or concerns regarding this Privacy Policy or our data practices, please contact us at:

• Email: help@getfynch.com
• Web Contact: https://getfynch.com/contact