Privacy
Last updated 28 May 2026. We are a B2B product. Your data is your company's data. We act as a processor under GDPR and as a Service Provider under the CCPA.
What we collect
- Workspace metadata (name, plan, billing contact).
- User account information (name, email, role).
- Content from connected applications, scoped to the OAuth permissions you grant.
- Operational telemetry (latency, error rates, feature usage — never query content).
Why we collect it
To provide, secure, and improve the Service for you. We do not sell personal information. We do not use Customer Data to train shared models.
Who we share it with
Sub-processors, listed in our Trust Center. Notable: AWS (hosting), Cloudflare (edge), Anthropic + OpenAI (model inference, zero-retention agreements), WorkOS (SSO/SCIM), Stripe (billing).
Where it lives
By default, US (us-east-1). EU customers may select Frankfurt or Dublin residency. Enterprise customers may select additional regions (UK, AU, JP) or run in their own VPC / on-prem.
How long we keep it
For the duration of your subscription. On termination, Customer Data is deleted within 30 days unless legal hold requires retention. Audit logs are retained for 7 years to support compliance.
Your rights
Under GDPR, CCPA, and similar laws you have the right to access, correct, port, and delete personal data. As a processor, we honor requests via your workspace administrator. Email privacy@findola.com for direct inquiries.
Cookies
We use strictly-necessary cookies for authentication and a minimal analytics cookie (no third parties). You can decline non-essential cookies via the banner on first visit.
Contact
Data Protection Officer · dpo@findola.com
EU Representative · Findola GmbH, Berlin