Privacybeleid

1Scope and roles

This Policy applies when FocalShift determines why and how personal information is processed, including account, website, billing, support, and product-usage information. When a customer uses FocalShift to process information about its own customers, leads, members, employees, or contacts, that customer generally acts as controller or business and FocalShift acts as processor or service provider under the Data Processing Addendum.

2Information we collect

We may collect account identifiers and contact details; profile and workspace information; billing and transaction records; content, files, prompts, instructions, and communications; connected-account identifiers and tokens; device, browser, IP address, log, diagnostic, and usage information; support requests; preferences; approximate location inferred from IP; and information supplied by customers, integrations, or other users.

When you apply for the beta or create an account, we also record, at the moment you submit the form: your IP address and the country and approximate place it resolves to; whether that address belongs to a hosting or datacenter operator, or to a VPN or proxy service; your browser and device type and operating system; the timezone and screen size your browser reports; the page that referred you and any campaign tags in the link you followed; how long the form was open before you submitted it; and whether your email address is at a provider known for disposable addresses. We use this to decide whether an application is genuine, to keep automated signups out, and to understand where interest in FocalShift comes from. Addresses belonging to hosting and datacenter operators are refused at the form; a VPN or proxy is not, and is only noted for the person reviewing the application.

We do not intentionally collect payment-card numbers directly when a payment processor handles them. We may receive payment status, billing address, card type, and limited card details.

3How we use information

We use information to provide and personalize the Services; authenticate users; operate workspaces and integrations; process transactions; publish or transmit content at your direction; provide support; prevent fraud and abuse; secure and troubleshoot systems; analyze performance; improve features; communicate service and account information; market our Services where permitted; enforce agreements; and comply with law.

4Legal bases

Where applicable law requires a legal basis, we process information to perform a contract, comply with legal obligations, protect vital interests, pursue legitimate interests that are not overridden by individual rights, and act on consent. Legitimate interests include operating and securing the platform, supporting customers, improving products, preventing misuse, and communicating about relevant services.

5How information is disclosed

We may disclose information to infrastructure, hosting, security, analytics, communications, payment, customer-support, and AI service providers acting under contract; to connected services at your direction; to workspace owners and authorized members according to permissions; in a business transaction; to professional advisers; to protect rights and safety; and when required by law or valid legal process.

We do not sell personal information for money. If an activity is treated as “selling,” “sharing,” or targeted advertising under applicable law, we will provide required notices and choices.

6AI features

Prompts, files, context, and outputs may be processed to provide requested AI features. Access is limited according to workspace permissions and service requirements. We describe user responsibilities and output limitations in the AI Use and Generated Content Policy. Customer Content is not used to train third-party general-purpose models unless the applicable feature or setting clearly states otherwise and the customer authorizes that use.

7Cookies and similar technologies

We use cookies and similar technologies for authentication, security, preferences, performance, analytics, and—where enabled—marketing. Details and available controls appear in the Cookie Policy. Where consent is required, nonessential technologies are used only after the required choice.

8Retention

We retain personal information for as long as needed to provide the Services, maintain the account, satisfy legal and accounting duties, resolve disputes, enforce agreements, prevent fraud, and maintain security. Retention depends on the information’s nature, sensitivity, purpose, risk, contractual commitments, backup cycles, and legal requirements. We delete or de-identify information when it is no longer reasonably needed.

The signup information described above — the IP address, the resolved country, the network and device details, the timezone and screen size, the referral and campaign tags and the form timing — is stored on the application record itself and is deleted with it. It is not copied into a separate store, and removing an application removes it.

9Security and international transfers

We use safeguards designed to protect information against unauthorized access, loss, alteration, and disclosure. No system is completely secure. Information may be processed in countries other than where it was collected. Where required, we use recognized transfer mechanisms and contractual safeguards.

10Your choices and rights

Depending on location, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of personal information; withdraw consent; opt out of certain sharing, targeted advertising, or profiling; and appeal a denied request. You may also update account settings, unsubscribe from marketing communications, and control cookies. Marketing email we send carries a one-click unsubscribe link and the unsubscribe headers mail applications use, and an opt-out is recorded on a suppression list applied to later marketing sends. Service, security, billing, and other transactional messages about your account are not marketing and continue after a marketing opt-out.

We may verify a request and may retain information where an exception applies. Authorized agents must provide proof of authority.

11California disclosures

California residents should also read the California Privacy Notice, which describes categories of information, purposes, retention criteria, disclosures, and available rights.

12Children

The Services are intended for adults and are not directed to children under 13. Accounts are limited to people 18 or older. Additional information appears in the Age Eligibility and Children’s Privacy Notice.

13Changes and contact

We may update this Policy to reflect legal, technical, or product changes. The effective date identifies the current version. Privacy questions and requests may be submitted through FocalShift Contact.

14Network and public content

Public profiles, posts, badges, certifications, listings, comments, and project summaries may be indexed, copied, cached, captured, or redistributed by others. Deleting content from FocalShift does not remove copies held by search engines, recipients, or third parties. Members can use available audience controls and report, block, and mute tools, but those controls cannot retrieve copies another person already made.

15Payments, wallet, identity, and compliance data

When you use subscriptions, commerce, wallet, affiliate, or payout features, we may process plan and invoice records; payment status; limited billing details; credits; ledger entries; pending, available, reserved, withdrawn, fee, and commission amounts; payout eligibility; connected-account identifiers; tax information; identity-verification status; and risk or sanctions-screening results. Full card and bank-account numbers are handled by our payment processor, Stripe, Inc., rather than seen or stored by FocalShift. Where you receive payouts, Stripe processes personal information about you as a connected account holder; Stripe’s handling of that information is described in the Stripe Privacy Policy, and what FocalShift shares with Stripe is described in the Subscription, Billing, Cancellation, and Refund Policy.

16Account deletion and lawful retention

You may request account deletion through available account-security controls or by contacting privacy@focalshift.ai. A self-service request includes identity confirmation and a 30-day cool-off period during which it may be withdrawn. On completion, we delete or de-identify account information and private content except records retained for tax, accounting, payment, fraud, security, abuse prevention, legal holds, claims, and backup cycles.

Deletion does not remove content another member owns or copies already held outside FocalShift. Public and shared records may remain where retention is necessary to preserve another member’s rights, transaction history, safety records, or legal obligations.

17Data export and portability

Available account-security controls provide a machine-readable export of the core account record, excluding credentials and password hashes. Certain tools provide CSV exports for their records. For a broader copy across tools, submit a request to privacy@focalshift.ai. We may verify identity before responding and will provide portability required by applicable law.

18Location, maps, and public place information

We may infer approximate location from an internet-protocol address, and we process location information you choose to provide — for example a city, region, service area, business address, event venue, or a pin you place on a public map. Public map, local-discovery, and directory features are opt-in: a location appears on a public map only after you add it to a profile, listing, business record, or event that your settings make public, and the precision shown is the precision you supply. Choosing a city or region rather than a street address shows an approximate area rather than a precise point.

Location shown publicly may be seen by anyone, appear in search and recommendations, be indexed by external search engines, and be copied by others. You can edit or remove a location, change the audience of the record that carries it, or delete the record, using available controls or by contacting us; removal from FocalShift surfaces does not remove copies others made or cached copies held by third-party search engines. Do not publish a precise location when doing so would create a safety risk, and see the Network Privacy and Safety Notice for Network-specific detail.

19Connections and relationship information

Where connection features are available, we process the connections you create and the interactions you have, and we may infer relationships between accounts — for example that two members share a mutual connection, belong to the same community, or are linked through an intermediary. Discovery, suggestion, and search surfaces may display relationship information to another member, which can include the number of intermediate connections between you and that member and, where a feature is designed to show it, the name of a mutual connection through whom you are linked. Displaying a connection path necessarily reveals to the viewer that the named intermediary is connected to both of you.

Relationship inference and display are drawn from connections and interactions rather than from any external social graph. Where a control is available, you may limit or turn off the display of your connection information and connection paths, and you may remove a connection at any time; the applicable controls are described in the account privacy options and in the Network Privacy and Safety Notice. If a relationship-display feature launches or materially changes, we will describe it here and provide notice where required.

20Organization accounts and administrator visibility

Where an organization holds the account and assigns you a seat, that organization is the customer and controller for the business information processed in its workspace. Organization owners and administrators can access, export, retain, restrict, transfer, and delete workspace content, and can see activity conducted through the workspace — including records, files, tasks, campaigns, calendars, workspace messages and conversations, publishing and automation activity, AI prompts and outputs, audit logs, and login and usage history associated with a seat. FocalShift acts on the organization’s instructions with respect to that information.

Information about you that FocalShift holds as controller — such as your login identity, security records, and support correspondence with us — is handled under this Policy. Direct your questions about the organization’s own retention, monitoring, and access practices to the organization; direct privacy requests concerning workspace content to the organization as controller, and we will assist it as described in the Data Processing Addendum. Seat rules are set out in the Teams and Organizations Addendum.

21Global Privacy Control

Where applicable law treats an activity as selling or sharing personal information, we recognize browser-based Global Privacy Control signals as an opt-out request for that browser or device. Other cookie and marketing choices remain available through applicable settings and unsubscribe controls.