Privacy

DRAFT

Privacy

DRAFT: FuturEdge Privacy Policy (v3, for futuredge.ai/privacy)

DRAFT. NOT LEGAL ADVICE. Prepared Oct 17, 2026 (PT) by Head of FuturEdge for Jason's review. Have qualified counsel review it before publishing. Nothing has been published.

Builds on /workspace/futuredge-bd/brand-room/fe-privacy-policy-draft-v2.md (the scheduler and platform-API sections are carried over so one company-wide policy covers the site, the Library and the scheduler) and adds what the live site actually collects (brief intake, studio guide with voice, card checkout for film packages, Library subscriptions, analytics, email, testimonials).

Fill before publishing: [LEGAL ENTITY NAME] · [CONTACT EMAIL] (e.g. privacy@futuredge.ai; support@futuredge.ai is used elsewhere) · [EFFECTIVE DATE] · confirm every [CONFIRM: …] line against how the site actually works (payment processor, analytics tools, AI providers, voice-recording retention).


Privacy Policy

Effective date: [EFFECTIVE DATE]

[LEGAL ENTITY NAME] ("FuturEdge," "we," "us") runs futuredge.ai, the FuturEdge studio guide and brief intake, the FuturEdge Library and Tools, and the FuturEdge social scheduling service (together, the "Services"). This policy explains what we collect, why we collect it, who we share it with, and the choices you have. Story Hero (story-hero.ai), a product by FuturEdge, has its own privacy policy, which applies when you use Story Hero.

1. What we collect

Information you give us

  • Briefs and intake conversations. When you start a brief, our AI intake interview records your answers and turns them into a structured brief. This can include your name, work email, company, role, project details, budget range, files you upload, and links you share.
  • Studio guide conversations. Messages you type to the studio guide on our home page. If you use Talk, we process your voice to turn it into text. [CONFIRM: whether audio recordings are stored, and for how long, or only transcribed and discarded.]
  • Account and project information. Login details, your project timeline, revision notes, approvals and messages in your project portal.
  • Purchases and subscriptions. When you buy a film package or subscribe to a Library plan, our payment processor [CONFIRM: Stripe] collects your card details. We don't store full card numbers. We receive the billing name, email, billing address, the last four digits and the transaction record.
  • Testimonials. If you agree to give us a testimonial, we store your quote, name or handle, role, any photo you provide, and your written consent record. We publish a testimonial only with your written consent, and you can withdraw it at any time (see §6).
  • Communications. Emails and messages you send us, and your email preferences.

Information collected automatically

  • Usage and device data: IP address, browser and device type, pages viewed, referring URL, UTM campaign tags, and timestamps.
  • Cookies and similar technologies: cookies needed to run and secure the Services (sign-in, checkout, fraud prevention), and analytics to understand how the site is used. [CONFIRM: the analytics tools in use; the live site loads Lovable-hosted scripts /~flock.js and /__l5e/events…js.] See §8.

Information from connected platforms (scheduler only)

  • When you connect YouTube, X, Instagram, Facebook or LinkedIn to the scheduler, we receive access tokens and the profile, page and channel information those platforms share under the permissions you grant, plus post-level performance data (for example, impressions and engagement).

2. How we use it

  • To run the Services: read and scope your brief, recommend a package, produce and deliver your project, run your project portal, and provide the Library, Tools and scheduler.
  • To process payments and subscriptions, and prevent fraud.
  • To answer your questions through the studio guide, email or support.
  • To publish testimonials you've consented to, with any required disclosure.
  • To send service messages (receipts, project updates, security notices). With your permission, or where the law allows, to send occasional updates about FuturEdge. Every marketing email includes an unsubscribe link and our postal address, as required by the CAN-SPAM Act, and we honor opt-outs within 10 business days.
  • To secure, maintain and improve the Services, and to understand site usage in aggregate.
  • To comply with the law and enforce our terms.

AI processing. Our Services use AI models, some provided by third-party AI providers, to run the intake interview, the studio guide and production work. Content you submit is sent to those providers only to produce your result. [CONFIRM: provider list and their data-use terms.] We don't use your briefs, project files or conversations to train general-purpose AI models, and we don't permit our providers to do so under our agreements with them. [CONFIRM against each provider's terms.]

We don't sell your personal information, and we don't share it for cross-context behavioral advertising. We don't use data from connected social platforms for advertising.

3. Platform-specific terms (scheduler)

  • YouTube: the scheduler uses YouTube API Services. By connecting YouTube you agree to the YouTube Terms of Service (https://www.youtube.com/t/terms). The Google Privacy Policy (https://policies.google.com/privacy) also applies. You can revoke access at any time at https://security.google.com/settings/security/permissions.
  • Google API data: our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
  • Meta (Instagram and Facebook), X and LinkedIn: we access these platforms only through their official APIs and within the permissions you grant, following each platform's developer terms.

4. Sharing

We share personal information only with:

  • Service providers that host, store, secure, analyze, process payments for, or help deliver the Services (for example, our hosting provider, payment processor, email provider and AI providers), under contracts that limit their use of it;
  • the social platforms you tell us to publish to (scheduler);
  • the public, for testimonials you've consented to publish;
  • authorities or others when the law requires it, or to protect rights, safety and security;
  • a successor, if FuturEdge is involved in a merger, acquisition or sale of assets, in which case this policy continues to apply.

5. Retention

  • Briefs, project files and portal data: for the life of the project and [CONFIRM: e.g. 3 years] afterwards, so we can support your deliverables, unless you ask us to delete them sooner.
  • Studio guide conversations that don't become a brief: [CONFIRM: e.g. 90 days].
  • Payment and tax records: as long as tax and accounting law requires.
  • Testimonials: until you withdraw consent. We remove a withdrawn testimonial from our site within 2 business days, and keep the consent record as proof of what was agreed.
  • Scheduler: we keep connected-account tokens and content while your account is active. When you disconnect an account, we delete its tokens right away and delete its stored data within 30 days, unless the law requires us to keep it. Data we receive through YouTube API Services is deleted within 7 days after you revoke access or ask us to delete it.

6. Your choices and rights

  • Email: unsubscribe from marketing email using the link in any message.
  • Testimonials: withdraw consent at any time by emailing [CONTACT EMAIL].
  • Cookies: you can block or delete cookies in your browser; essential cookies are needed for sign-in and checkout.
  • Access, correction, deletion and export: depending on where you live (for example, California, Utah or other US states, the UK or the EU), you may have the right to access, correct, delete or get a copy of your personal information, to opt out of certain processing, and not to be discriminated against for using these rights. Email [CONTACT EMAIL]. We'll verify your request and respond within 30 days (or the time the law requires). You can use an authorized agent where the law allows.
  • Data deletion: email [CONTACT EMAIL] from your account email with the subject "Delete my data," or follow the steps at futuredge.ai/data-deletion. We'll confirm and complete the deletion within 30 days (7 days for YouTube API data), except for records we must keep by law.

7. International users

We're based in the United States and process information there. If you use the Services from outside the US, your information will be transferred to and processed in the US. [CONFIRM with counsel whether EU/UK users are targeted and if Standard Contractual Clauses or a representative are needed.]

8. Cookies

We use essential cookies (sign-in, security, checkout) and analytics [CONFIRM tools]. We don't use advertising cookies. [CONFIRM: add a cookie banner if non-essential cookies are used for EU/UK visitors.]

9. Security

We use encryption in transit, encrypt connected-account tokens at rest, limit staff access to what the job needs, and log access to accounts. No system is perfectly secure, so we also review our providers' security practices. If a breach affects your information, we'll notify you as the law requires.

10. Children

The Services are for businesses and professionals. They aren't directed to children under 16, and we don't knowingly collect personal information from them. If you think a child has given us information, contact us and we'll delete it.

11. Changes

If we make material changes, we'll post the updated policy here with a new effective date and notify account holders by email or in the Services.

12. Contact

[LEGAL ENTITY NAME]

3802 N 60 E, Provo, UT 84604

[CONTACT EMAIL]


Data deletion instructions (futuredge.ai/data-deletion, required by Meta)

To delete your data, email [CONTACT EMAIL] from your account email with the subject "Delete my data," or disconnect the account in Settings, then Connected accounts. We'll confirm, and we'll complete the deletion within 30 days. Data we received through YouTube API Services is deleted within 7 days.


Reviewer notes (remove before publishing)

  • Voice and brand: written in the brand "we", with no founder or Jason, per bible v3.2.
  • Footer: add a "Privacy" link next to "Terms" on every page once this is published (change pack §G).
  • The testimonial clauses match bible v3.2 §4.1 (written consent on file, withdrawal, disclosure).
  • Utah (UCPA) and California (CCPA/CPRA) obligations depend on revenue and volume thresholds that FuturEdge may not meet. The rights language is kept general on purpose. Counsel should confirm.