This Privacy Policy explains what data Factrail collects when you use factrail.ai (the "Service"), why, and the choices you have. Questions can be sent to hello@factrail.ai or via the contact page.
Data we collect
When you register, we store your email address and a hashed password. If you sign in with a social provider, we receive the basic profile information that provider shares (such as your email). When you use the Service we process limited first-party usage signals (see Cookies below) and any messages you send us.
Data we do not collect
The public site does not load third-party advertising or analytics trackers. There is no Google Analytics, Google Tag Manager, Meta Pixel, or similar third-party tracking, and we do not sell your personal data. We do not store analytics identifiers in your browser's local storage.
Cookies and similar technologies
Factrail uses a small number of cookies:
- Strictly necessary — a refresh-token cookie that keeps you signed in, a short-lived sign-in handshake cookie used only during social login, and the cookie that records your consent choices. These are always active because the Service cannot function without them.
- Analytics — two first-party, opaque, randomly generated identifiers that group anonymous usage events so we can understand which materials are read. They are not advertising identifiers and are not shared with third parties.
Analytics cookies are only set after you accept them, and we honor browser Do-Not-Track and Global Privacy Control signals. You can review or change your choices at any time from the Cookie Settings link in the site footer.
Payments
Subscriptions and payments are processed by Paddle, our merchant of record. Card details are handled by Paddle and never reach Factrail's servers; we receive only subscription identifiers, plan status and billing state needed to provide your access.
How we use data
We use your data to operate your account, provide and secure the Service, process payments through Paddle, respond to your messages, and understand aggregate usage.
Service providers (subprocessors)
We rely on a small set of infrastructure providers who process data on our behalf under appropriate safeguards: cloud database and storage hosting, application and website hosting, caching, search, transactional email delivery, error monitoring, payment processing (Paddle), and the AI providers used to generate analytical materials. Some of these providers operate internationally, so your data may be processed in other countries with appropriate protections in place.
Data retention
We keep account data for as long as your account is active and as needed to provide the Service and meet legal obligations, then delete or anonymize it.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. To exercise these rights, or to request account deletion, contact hello@factrail.ai.
Changes to this policy
We will post any changes to this policy here with a new effective date and, for material changes, more prominent notice.
Contact
For privacy questions or requests, email hello@factrail.ai or use the contact page.