Privacy policy

The customer workspace is the controller of the client and prospect information it chooses to send to FollowUpOS. FollowUpOS acts as a service provider or processor for that information. FollowUpOS is the controller of account, billing, security, and service-usage data.

• Account identity, email address, workspace membership, role, and timezone.
• Email metadata and content forwarded by a customer-selected rule, including participants, subject, message identifiers, timestamps, snippets, and message bodies.
• Structured deal data, summaries, draft follow-ups, approvals, sequence state, and customer corrections.
• Billing status, plan, provider identifiers, and payment-event metadata. We do not store full card details.
• Audit, security, usage, and diagnostic events needed to operate and protect the service.

We use information to authenticate users; ingest and correctly thread selected conversations; identify quiet opportunities; create grounded summaries and draft follow-ups; enforce sending safeguards and plan limits; provide support; prevent abuse; and improve reliability.

We do not sell personal information, use email content for advertising, or add tracking pixels to customer messages.

Relevant conversation data may be sent to configured AI providers to classify opportunities, summarize threads, and draft follow-ups. We minimize the content sent, validate structured outputs, and do not let a model execute arbitrary database or external actions. Automated sending is disabled in the initial product.

Raw message bodies are scheduled for removal 90 days after ingestion. Message metadata, thread summaries, deal records, drafts, and audit events may be retained while the workspace is active so the product continues to function and decisions remain explainable.

Customers can stop new ingestion at any time by deleting their forwarding rule. Requests to access, correct, export, or delete account data can be sent to privacy@tryfollowupos.com. We may retain limited billing, fraud-prevention, and legal records where required.

We share data only with infrastructure, authentication, email, AI, billing, monitoring, and support providers needed to run FollowUpOS; with professional advisers under confidentiality; or when required by law. Providers receive only the data needed for their role.

FollowUpOS uses tenant-isolated database policies, encryption in transit and at rest through its providers, restricted server credentials, signed or secret-protected webhooks, and an append-only audit trail. No internet service is risk-free. Data may be processed in countries where our providers operate, with contractual and technical safeguards appropriate to the service.

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or export personal information. Contact privacy@tryfollowupos.com. We will verify requests before acting and respond within the period required by applicable law.