Privacy policy
How we collect, use and protect personal data across our website and the platforms we run.
This is an unreviewed draft. It was written as a starting point and has not been checked by a lawyer. Every item marked in red must be completed, and the whole document must be reviewed against what Futuvara actually does before this page goes live.
1. Who we are
[Registered company name], trading as Futuvara, is the controller responsible for the personal data described in this policy. We are registered in [country] under company number [number], with a registered office at [registered address].
If you have a question about this policy or about how we handle your data, contact us at hello@futuvara.com.
2. What this policy covers
This policy covers the Futuvara website, and the client platforms we design, deploy and run where Futuvara is the controller of the data. Where we build and operate a platform on behalf of a client, that client is usually the controller and we act as their processor. In those cases the client's own privacy notice governs how your data is handled, and our obligations are set out in our contract with them.
3. Information we collect
We collect the following categories of personal data:
- Information you give us. When you contact us or ask for an account, we collect your name, email address, company, and anything else you choose to include in your message.
- Account information. If we issue you access to a platform, we collect the credentials and profile details needed to operate that access.
- Technical information. When you use our website or our app, Google Cloud, which hosts them, logs each request: the IP address, the browser, the page asked for and the page you came from. Our own logs add the result and how long it took.
- The website conversation. What you type to the AI agent on our website, and the figures you give it, so it can suggest ideas and work out an indicative range. When you give your work email, we keep your name, email, company website and the conversation as a lead record so our team can follow up. Type “delete my transcript” at any time and the conversation is deleted.
- Video calls you start from our website. We email the call's link to the address you give. One of our people and our AI agents take part, and the call's record (what was said, decided and agreed) is kept with the project your call opens. If a call is recorded, you see a notice in it first.
- Analytics. Only if you tick “Count my visit anonymously”, we count which steps of the website conversation were reached. It does not identify you. We use no other analytics tool.
We do not knowingly collect special category data, and we do not collect personal data from children.
4. Why we use it, and our legal basis
- To reply to you and to discuss work you have asked us about. Our basis is legitimate interests: responding to a request you initiated.
- To set up a call you ask for, hold it, and send you a proposal from it. Our basis is your consent, which you give by ticking the box before the call is set up.
- To provide and secure platform access for people we have issued accounts to. Our basis is performance of a contract.
- To keep our systems safe and available, including detecting and preventing abuse. Our basis is legitimate interests.
- To send updates where you have asked for them. Our basis is consent, and you can withdraw it at any time.
- To meet our legal obligations, including accounting and tax requirements.
5. Who we share it with
We do not sell personal data. We share it only with service providers who process it on our instructions, and only as far as they need to do their job. They are Google (Google Cloud hosts our website, our app, its database, files and logs, and turns speech into text and text into speech on our video calls; Google Workspace carries our email and calendar) and Anthropic (the Claude models behind our AI agents). Our video calls run on our own servers in Google Cloud.
We may also disclose personal data where we are required to by law, or to establish or defend legal claims.
6. AI processing
We build AI-native platforms, and some of our services pass data through AI models to deliver a feature you have asked for. Where that happens, we tell you, we use providers under contract who do not train their models on your content, and we do not send personal data to a model unless it is needed for the task. Our AI providers are Anthropic (Claude) and Google (speech on calls). [Confirm the contract terms with each provider support this paragraph.]
7. International transfers
We are a globally distributed team, so personal data may be accessed from, or stored in, countries outside your own. Where we transfer personal data out of the [UK / EEA / relevant region], we rely on [state the safeguard: adequacy decision, standard contractual clauses, or other].
8. How long we keep it
We keep personal data only as long as we need it for the purpose we collected it for, and then delete it or make it anonymous. A website conversation and the lead record it makes are kept for 24 months. A video call's recording is kept for 30 days. Request logs are kept for 30 days. [Confirm these periods, and add any others, such as account and contract records.]
9. Your rights
Depending on where you live, you may have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct data that is wrong or incomplete;
- ask us to delete your data, where there is no good reason for us to keep it;
- object to, or ask us to restrict, how we use it;
- ask us to transfer it to another provider;
- withdraw consent, where consent is what we relied on;
- complain to your data protection regulator. In the UK that is the Information Commissioner's Office. [Name the correct regulator for your jurisdiction.]
To exercise any of these, email hello@futuvara.com. We will respond within one month.
10. Cookies
Our website sets no cookies. It keeps one item in your browser's local storage: your answer to the cookie bar and the date you gave it, so you are not asked again. It is never sent to us, and clearing your browser's storage removes it.
11. Security
We take appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. Data travels encrypted (HTTPS) and is stored encrypted by Google Cloud. Our systems need a signed-in Futuvara account, and each request to them is logged. [Add staff training and the breach procedure.] No system is completely secure, and we cannot guarantee absolute security.
12. Changes to this policy
If we change this policy we will update the date at the top of this page. If a change materially affects how we use your data, we will tell you directly.
13. Contact
Questions, requests and complaints go to hello@futuvara.com, or write to us at [registered address].