Privacy Notice

• Account data — name, email address, password credentials and profile photo. Used to create and secure your account and to identify you to your teammates. Legal basis: performance of our contract with you.
• Workspace content — projects, uploaded files, thumbnails, comments, annotations and approval decisions. Used to provide the review service. Legal basis: performance of our contract.
• Contact and support messages — what you send us and our replies. Used to answer you. Legal basis: legitimate interests in supporting customers.
• Usage and technical data — pages viewed, feature usage, storage consumption, device and browser information, IP address and log data. Used for security, abuse prevention, billing accuracy and improving the product. Legal basis: legitimate interests.
• Email preferences and delivery events — the notification settings you choose and whether our emails were delivered. Legal basis: performance of our contract and legitimate interests.

Payment card details are never collected or stored by us — they are handled by our payment provider.

• Service providers — hosting, database and file storage, email delivery and error monitoring, acting on our instructions as processors.
• Paddle.com, our Merchant of Record, for the sale of subscriptions, payment processing, subscription management, invoicing and tax compliance.
• People you share with — teammates in your workspace and anyone you send a review link to can see the content and comments you share with them.
• Professional advisers and authorities — legal or accounting advisers, and authorities where we are required by law.

We do not sell personal data.

Our providers may process data outside your country, including outside the UK and EEA. Where that happens we rely on appropriate safeguards such as UK/EU Standard Contractual Clauses or an adequacy decision.

Workspace content is kept while your account is active and for 30 days after deletion or cancellation so you can recover it, after which it is permanently removed. Billing and tax records are kept for as long as the law requires. Support messages are kept for up to two years. Log data is kept for up to twelve months.

Depending on where you live, you can ask for access to your data, correction of it, erasure, restriction of processing, portability, or object to processing based on legitimate interests. Where we rely on consent you can withdraw it at any time. Email privacy@fnshd.co and we will respond within one month. If you are in the UK or EEA you can also complain to your data protection supervisory authority.

Data is encrypted in transit and at rest, access is restricted to the people who need it, workspace content is protected by row-level access rules, and share links can be passphrase-protected and expired.

We use essential cookies and local storage only — to keep you signed in, remember your preferences and secure form submissions. We do not use advertising cookies. You can clear or block cookies in your browser, but the app will not stay signed in without them.

We will post any changes to this notice on this page and, for material changes, tell you in the app or by email. Questions: privacy@fnshd.co.