Privacy Policy

1. Who we are

This Privacy Policy explains how Faccelerate collects, uses, stores, shares, and protects personal data when you visit our website, submit forms, subscribe to updates, create an account, connect data sources, upload files, use CeeCee, or otherwise use the Faccelerate service.

For privacy questions or requests, contact [email protected].

2. Our role under GDPR

For account administration, website forms, marketing communications, security, product analytics, and business operations, Faccelerate generally acts as a controller. For customer data processed inside a workspace on behalf of a customer, Faccelerate generally acts as a processor and the customer acts as controller. If a separate data processing agreement applies, it controls where there is a conflict with this Policy.

3. Personal data we collect

We may collect account data such as name, work email, password authentication data, company or workspace name, roles, membership status, sessions, and user preferences. We may collect website and form data such as demo requests, newsletter subscriptions, communications, consent records, and page source information.

We may also process workspace data such as onboarding answers, competitor and positioning notes, tenant configuration, connected source metadata, OAuth tokens or API credentials, selected IDs, sync history, manual upload data, metric snapshots, recommendations, action notes, CeeCee prompts and responses, evidence, audit logs, request IDs, and limited technical metadata used for security and rate limiting.

4. Connected data sources and uploads

When you connect services such as Shopify, WooCommerce, Google Analytics 4, Google Search Console, Klaviyo, advertising platforms, social platforms, review tools, referral or affiliate tools, survey tools, backlink providers, or manual imports, we process the data needed to synchronize sources, assess readiness, calculate metrics, generate recommendations, provide evidence, and operate the product. Depending on your sources, this may include customer identifiers, order references, survey responses, review text, social handles, attribution data, traffic data, campaign data, and commerce metrics.

5. Sources of data

We collect data directly from you, from users in your workspace, from forms and communications, automatically from your browser or requests, from connected third-party services you authorize, and from files or records uploaded by your workspace users.

6. How we use personal data

We use personal data to provide and secure the service, create and manage accounts and workspaces, authenticate users, enforce membership and role checks, connect and monitor sources, trigger syncs, calculate metric snapshots, produce readiness states, recommendations, and evidence, ground CeeCee responses, respond to requests, send service messages, maintain audit logs, prevent abuse, debug issues, improve the product, and comply with legal obligations.

7. Legal bases under GDPR

We process account, workspace, support, and product data as needed to perform a contract or take steps before entering into one. We process security, logging, fraud prevention, service improvement, and business communications based on legitimate interests, balanced against individual rights. We process newsletter subscriptions and certain marketing communications based on consent where required. We process some records to comply with legal obligations and may process data to establish, exercise, or defend legal claims.

8. Newsletter and marketing communications

If you subscribe to updates, we store your email address, consent version, source page, subscription status, and timestamps in order to send relevant Faccelerate updates and manage opt-outs. You can withdraw consent or unsubscribe at any time by contacting [email protected]. Withdrawal does not affect processing that happened before withdrawal.

9. AI-assisted features

CeeCee and other AI-assisted features may use your prompts, onboarding context, metric snapshots, readiness states, recommendations, and evidence to produce responses. We design these features to ground responses in tenant data and to refuse causal claims when required data is not ready. AI outputs are decision-support content and should be reviewed by a human before use.

10. Cookies and similar technologies

The product may use strictly necessary cookies or similar storage for authentication, session management, security, and service operation. If we introduce non-essential analytics, advertising, or personalization cookies on the marketing site, we will provide appropriate notice and consent controls where required.

11. Processors and subprocessors

We use service providers to operate Faccelerate, including Cloudflare for Workers, Pages, D1, KV, R2, Queues, R2 SQL, and Workers AI; Airbyte for data synchronization where configured; Resend for email delivery; and connected platforms such as Google and Shopify when you authorize those integrations. These providers process data only as needed to deliver their services to Faccelerate or to your workspace.

We expect subprocessors to maintain appropriate security and data protection commitments. We will update this Policy or provide reasonable notice when material subprocessors change.

12. International transfers

Faccelerate and its providers may process data in countries other than where you or your users are located. Where GDPR or similar laws require safeguards for international transfers, we rely on appropriate mechanisms such as adequacy decisions, Standard Contractual Clauses, data processing agreements, or equivalent safeguards offered by our providers.

13. Retention

We keep personal data only for as long as needed for the purposes described in this Policy. Account, workspace, source, metric, recommendation, and CeeCee data are generally retained while the workspace is active. Security logs, audit logs, rate-limit records, and backup records may be retained for limited periods needed for security, reliability, legal compliance, and dispute resolution. Newsletter records are retained while you remain subscribed and for a reasonable period afterward to honor suppression and consent records.

14. Deletion, export, and workspace requests

Workspace owners and administrators may request export, deletion, or restriction of workspace data by contacting us. Some data may be retained where required for security, legal obligations, backups, audit logs, fraud prevention, or dispute resolution. If we process personal data as a processor, we may refer requests to the relevant customer controller unless law requires otherwise.

15. Your privacy rights

Depending on your location and the context of processing, you may have rights to access, correct, delete, restrict, object to, or port personal data, and to withdraw consent. You may also have the right to lodge a complaint with a supervisory authority. In Spain, the relevant authority is the Agencia Espanola de Proteccion de Datos. To exercise rights, contact [email protected].

16. Security

We use technical and organizational measures designed to protect personal data, including tenant-bound authorization, role checks, encrypted sensitive credentials where applicable, request validation, rate limiting, audit logs, secure headers, structured logging, and infrastructure controls provided by Cloudflare. Our security program is being developed with SOC 2 readiness in mind, but no internet service can be guaranteed perfectly secure and we do not claim SOC 2 certification unless expressly stated.

17. Children

Faccelerate is a business service and is not intended for children or for personal, household, or consumer use. We do not knowingly collect personal data from children.

18. Changes to this Policy

We may update this Policy from time to time. Material changes will be communicated by reasonable means, such as posting the updated version on this page or notifying account contacts. The "Last updated" date shows when this Policy was last revised.

19. Contact

Privacy questions, data protection requests, and security notices can be sent to [email protected].