Privacy Policy

1. Introduction

FransinAI acts as a data controller for personal data of its customers (account holders, administrators, and developers) and as a data processor for personal data that customers transmit through our platform (end-user recipient data). The distinction matters for compliance purposes, and we take both roles seriously.

This Policy applies to our website (fransinai.com), dashboard (app.fransinai.com), API, SDKs, and all related services. It does not apply to third-party services linked from our platform.

2. Information We Collect

Account Information: When you create an account, we collect your name, email address, company name, billing address, and payment information (processed securely by Stripe).

Usage Data: We automatically collect information about how you use the Service, including API call logs, dashboard activity, IP addresses, browser type, operating system, and referring URLs. This data is used to operate, improve, and secure the platform.

Message Metadata: When you send messages through our API, we collect message metadata (timestamps, delivery status, sender/recipient numbers, message SID) to provide delivery receipts, analytics, and billing. We do not access or analyze message body content except for compliance purposes or where you have explicitly requested support assistance.

Communications: If you contact our support team, we retain records of those communications to resolve issues and improve our service quality.

Payment Information: Payment card details are processed and stored by our payment processor (Stripe). We receive only a card token and last-four-digit summary; we never store raw payment card data.

3. How We Use Your Information

We use the information we collect to:

Our legal basis for processing under GDPR: contract performance (service delivery), legitimate interests (security, fraud prevention, product improvement), consent (marketing), and legal obligation.

• Provide, operate, maintain, and improve the Service
• Process transactions and send billing-related communications
• Send service updates, security alerts, and support messages
• Send marketing communications (you may opt out at any time)
• Monitor and analyze usage patterns to improve performance and user experience
• Detect, investigate, and prevent fraudulent transactions and abuse
• Comply with legal obligations and respond to lawful government requests
• Enforce our Terms of Service and Acceptable Use Policy

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We may share your information in the following limited circumstances:

• Service Providers: We share data with trusted third-party vendors who help us operate the Service (e.g., Stripe for payments, AWS for infrastructure, Datadog for monitoring). All vendors are contractually obligated to protect your data and may only use it for the specified purpose.
• Carrier Partners: To deliver messages, we share recipient phone numbers and message content with our carrier partners. These are governed by carrier-specific data processing agreements.
• Legal Requirements: We may disclose information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of FransinAI, our customers, or the public.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to equivalent privacy protections.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate and improve our website and dashboard. Types of cookies we use:

You can control cookie preferences through your browser settings or our Cookie Preferences center (accessible from the footer). Note that disabling certain cookies may affect the functionality of the Service.

• Essential cookies: Required for authentication, session management, and core functionality. Cannot be disabled.
• Analytics cookies: Help us understand how visitors interact with our website (via Plausible Analytics, a privacy-first tool). Aggregate only; no individual tracking.
• Preference cookies: Remember your settings and preferences across sessions.

6. Data Retention

We retain your account information for as long as your account is active plus 30 days after termination, to allow data export. After this period, account data is permanently deleted.

Message metadata and API logs are retained for 13 months for billing and compliance purposes, after which they are automatically purged. Customers on Enterprise plans may request extended retention or earlier deletion under a custom DPA.

Billing records are retained for 7 years as required by tax law.

7. Your Rights (GDPR and CCPA)

Depending on your location, you may have the following rights regarding your personal data:

California residents also have the right to know what personal data is collected and shared, the right to opt out of the "sale" of personal data (we do not sell data), and the right to non-discrimination for exercising CCPA rights.

To exercise any of these rights, email privacy@fransinai.com. We will respond within 30 days (or 45 days where extended response is permitted by law).

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data ("right to be forgotten").
• Portability: Receive your data in a structured, machine-readable format.
• Restriction: Request that we limit processing of your data.
• Objection: Object to processing based on legitimate interests or for direct marketing.
• Withdraw Consent: Where processing is based on consent, withdraw it at any time.

8. Security

We implement industry-standard security measures to protect your data, including TLS 1.3 encryption in transit, AES-256 encryption at rest, multi-factor authentication, role-based access controls, and regular penetration testing by third-party security firms. Our infrastructure is SOC 2 Type II certified.

Despite our efforts, no method of transmission over the internet is 100% secure. If you believe your account has been compromised, contact us immediately at security@fransinai.com.

9. International Data Transfers

FransinAI is headquartered in the United States. If you are located outside the US, your information will be transferred to and processed in the United States and potentially other countries. We ensure that such transfers are protected by appropriate safeguards:

Enterprise customers requiring EU data residency can request that their data be stored and processed exclusively within EU-based infrastructure at no additional charge.

• EU Standard Contractual Clauses (SCCs) for transfers from the European Economic Area
• UK Addendum for transfers from the United Kingdom
• Data Processing Agreements with all sub-processors

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact our Data Protection Officer:

Email: privacy@fransinai.com

Post: FransinAI Technologies Inc., Attn: Privacy Team, 548 Market St Suite 84001, San Francisco, CA 94104

EU/UK residents may also lodge a complaint with their local supervisory authority. A list of EU supervisory authorities is available at edpb.europa.eu.