Privacy policyYour information. What we collect, and why.
What we collect when you visit our site, book a call or hire us, what we do with it, who else sees it, and how to ask us to change or delete it.
In short
We collect what you tell us when you book a call, plus basic analytics about how people use this site. We use it to talk with you, do the work you hire us for and make the site better. We don't sell personal information and we don't use advertising trackers. When we set up AI for your business, the work lives in your own accounts, and we use what we see there only to do that work.
Who we are
Figure Hawk is a trade name of Brandtogo LLC ("we", "us"). We help small businesses set up and use AI assistants. This policy covers our website, the calls you book with us, and the information we handle when you hire us.
It doesn't cover your AI assistant or the other apps you use. Anthropic, OpenAI, Microsoft, Google and each app's maker handle your information under their own privacy policies.
What we collect
When you book a call
Your name, work email, company and team size, what you tell us about your team's work, the time you pick and your time zone. We use it to hold your time, add the call to our team calendar, let our team know in our team chat, send you an invite and prepare for the conversation.
When you book, we also link your name, email and company to the analytics from your visits to this site, so we can see how you found us and what you looked at before booking.
When you email or talk with us
Whatever you choose to share, like questions, details about your business and how your team works. If you become a client, we also keep your billing contact and what you bought.
When you browse the site
Like most websites, we collect some information automatically:
- Pages you visit, the site that sent you, your browser, device and screen size, and your approximate location (country and region, worked out from your IP address)
- What you do on the site, like clicking a button, opening an FAQ answer or booking a call. For FAQ searches we record how many answers came back, not what you typed.
- Errors the site runs into, so we can fix them
- Recordings of some visits (session replay) that show how the page was scrolled and clicked. Text you type into form fields is masked.
- Request logs kept by our hosting provider, including your IP address and browser
The site's fonts load from Google Fonts, so your browser also sends Google a request that includes your IP address.
Demo connectors
Our demo connectors run on sample data for made-up businesses. If you add one to your AI assistant, the requests your assistant sends reach our server and are handled like any other web request. We record which demo was added, from which AI app, and which of its tools were used, but not what you asked. Please don't send real customer or business information to a demo.
Team login
The login page is for our own team. For those accounts we keep an email address and sign-in details, and set cookies that keep the person signed in.
When you hire us
Setting up AI for your business means working inside your accounts. Here's how we handle what we see there.
- It stays in your accounts. Your company profile, skills and settings live in your own AI account and the apps you already use, not on our servers.
- You type your own logins. We don't ask for your passwords, and we don't keep them.
- We use it only for your work. What we see during setup, training and support, like your emails, records, documents and playbooks, is used only to do the work you hired us for, and we keep it confidential.
- Working copies are temporary. If you send us documents to build from, like SOPs or price lists, we keep them while we build and delete them when we're done or when you ask.
- Custom connectors run on a server just for you. A custom connector reads from your apps when your assistant asks it to, on a private server we maintain for your business alone. It keeps only what it needs to run, like a short-lived copy of a report or, if you asked for one, a history of each request. When the connector is turned off, we delete that data.
- Recordings are for your team. Training sessions we record are shared with your team and used for nothing else.
- We don't train AI on it. We never use your business information to train AI models, and we check your assistant's settings so your chats aren't used to train its maker's models, where your plan allows it.
When we handle personal information in your accounts on your behalf, like your customers' details, we act as your service provider. We follow your instructions and our agreement with you, and don't use it for anything else.
How we use it
- To arrange, prepare for and follow up on calls
- To provide our services: setup, training, support and custom connectors
- To send invoices, take payment and keep business records
- To answer your questions
- To understand how the site is used and make it better
- To keep the site and our systems secure and stop abuse
- To meet our legal obligations
We don't sell personal information or share it for targeted advertising, and we don't add you to anyone else's mailing list.
Who we share it with
We share information only with companies that help us run our business, and only what they need to do their part:
| Company | What they do for us | What they see |
|---|---|---|
| Vercel | Hosts the site and counts visits | Request logs and page visits |
| PostHog | Site analytics, session replay and error reports | How the site is used, your browser and device, and your name, email and company if you book a call |
| Supabase | Stores call bookings and our team login | Booking details |
| Our calendar, email and video calls, and the site's fonts | Booking details, emails, your IP address when fonts load | |
| Discord | Our team chat, where we're told about new bookings | Booking details |
| Payment and accounting providers | Invoices and payments | Billing contact and what you bought |
We may also share information:
- When the law requires it, like a valid court order
- To protect our rights, our clients or the public, like when investigating fraud or abuse
- If our business is merged or sold, with the new owner, who must keep to this policy
- With your permission
Cookies and analytics
Cookies are small files a website saves in your browser. Here's what this site uses:
| Cookie | Set by | What it's for | How long |
|---|---|---|---|
| ph_… | PostHog | Recognizes repeat visits, for analytics and session replay | Up to a year |
| fh_session, fh_refresh | Figure Hawk | Keeps our team signed in. Only set when someone uses the team login. | Up to 30 days |
Vercel's visit counts use no cookies. They don't follow you across other sites or from one day to the next. We don't use advertising cookies, and we don't put ad networks' tracking pixels on this site.
To block or delete cookies, use your browser's settings or a content blocker. The site works without them. We don't currently respond to "Do Not Track" browser signals.
How long we keep it
- Call bookings: while we're in touch about working together. If you don't become a client, we delete them within two years of our last contact.
- Client records, like agreements, invoices and emails: while we work together, then for as long as tax and accounting rules require.
- Custom connector data: until the connector is turned off, then deleted within 30 days.
- Analytics and session recordings: only as long as they're useful for improving the site, within the limits our analytics providers set.
- Hosting request logs: a short period set by our hosting provider.
Security
Access to personal information is limited to our team. The site uses encrypted connections, booking details can only be read by our own server, and secret keys never reach your browser. Custom connectors run on separate servers for each client, which we keep updated.
No system is perfectly secure. If a breach ever affects your information, we'll tell you promptly and as the law requires.
Your choices and rights
You can ask us to:
- Tell you what personal information we have about you, and send you a copy
- Correct anything that's wrong
- Delete it, unless we have to keep it for legal or tax records
- Stop using it for a particular purpose, like analytics
Email support@figurehawk.com. We'll check the request comes from you, then reply within 30 days. Asking won't change how we treat you. Depending on where you live, including California and other US states with privacy laws, you may have further rights, and we'll honor them where they apply.
If you're asking about information we handle for one of our clients, like your details in a client's inbox, we'll pass your request to that client, since they decide what happens to it.
Visitors outside the US
We're based in the United States, and our providers handle information in the US. If you're in the EU or UK, we rely on these legal bases: taking the steps you ask for, like booking a call; our contract with you, to provide our services; our legitimate interest in running, improving and securing our business; and our legal obligations. You can also complain to your local data protection authority.
Children
Our site and services are for businesses. They're not meant for anyone under 16, and we don't knowingly collect their information.
Changes to this policy
When how we handle information changes, we'll update this page and the date at the top. If a change matters to how we use your information, we'll email our clients before it takes effect.
Contact us
Questions about privacy, or a request about your information: email support@figurehawk.com. See also our terms of service.