How we handle your data.

1. Who we are

foyai ("we," "us," "our") is run by Foyai SAS, a société par actions simplifiée registered with the Registre du Commerce et des Sociétés of Bergerac under number 108 680 687, with its registered office at 46 route du Monteil, 24680 Lamonzie-Saint-Martin, France. Foyai SAS is the controller of the personal data this policy describes, except the data it processes for customers, explained below. We make digital sales rooms for B2B teams that sell in Attio. This policy explains what we collect on foyai.com, in the foyai app, and in buyer rooms.

When a company uses foyai to send you a room, that company decides what the room collects and what happens with it. We process that information on their behalf, under our Data Processing Addendum. For questions about a room you received, you can contact the company that sent it, or us.

For any privacy question, use the privacy request form at the bottom of this page.

2. What we collect

When you visit foyai.com or sign up:

• What you enter: your work email, and if you answer them, your role, CRM, team size, call recorder, and the page you signed up from. Some signup forms also ask for your name and company.
• Your country, worked out from your IP address when you sign up, so we know which privacy rules apply.
• Page views, through Vercel's cookieless analytics, and how you use the site, through PostHog. In the EU, EEA, UK, and Switzerland, PostHog only runs if you accept cookies.
• The company you're visiting from, through Apollo.io. Apollo receives your IP address, the pages you view, the site or campaign link that brought you here, and basic browser details, and matches the IP address to a company in its business database. We see the company and the pages it viewed, not who you are. Apollo follows the same cookie choice as PostHog.
• Chat conversations, through Intercom, if you use the chat on this site: what you write, details you share, such as your email, and the pages you view while the chat is running. Fin, Intercom's AI agent, answers first, and a person from our team can step in.
• Privacy requests you send through the form on this page.

When you use the foyai app:

• Your account: your name, email, profile picture, and role from Attio, and the profile details you add for buyers, such as your title, phone, LinkedIn, booking link, photo, and bio.
• Data from your Attio workspace: the deals, companies, people, meetings, call recordings and transcripts, and notes that foyai needs to draft and update rooms.
• Content you add: rooms, decks, documents, case studies, and action plans.
• Connected tools: your Google account email and the Drive files you pick, your Slack user ID, and API keys for your call recorder, which we store encrypted.
• How you use the app, through PostHog. Session recordings mask all text and form inputs.
• Billing details your workspace gives Stripe, such as the workspace name and billing email.

When you open a room someone sent you:

• Your email, when the room asks for it before you enter.
• What you do in the room: the sections, files, and slides you view and for how long, links you click, videos you play, and action-plan steps you tick off.
• Your approximate location (city, region, and country), worked out from your IP address. We don't store the IP address itself.
• A random browser ID kept in your browser, so repeat visits are counted as you, and a cookie that keeps you signed in to that room for 30 days.

The company that sent the room sees this activity in foyai, and it can also reach their Attio workspace (as a note on the deal, and as a contact when you entered your email) and their Slack.

3. How we use it

• To run foyai: drafting rooms with AI, showing sellers who engaged with their rooms, syncing with Attio, and sending sign-in links and notifications.
• To reply to you about your sign-up, your account, billing, and support requests.
• To keep the service secure and working, and to understand how it's used so we can improve it.
• To see which companies visit foyai.com, so we can follow up with the ones that look interested.

We never sell your data, rent it, share it with advertisers, or use it to train AI models. Drafting runs on Anthropic's commercial API, which doesn't train on what we send it.

4. Who we share it with

These companies ("processors") help us run foyai. Each one sees only the data it needs for its job. Our subprocessors page shows where the companies that handle customer data process it.

To show link previews, page text, and company logos for content sellers add, foyai sends only the public link or company domain to Microlink, Jina Reader, and logo.dev. No personal data is sent.

When a workspace connects them, data also moves between foyai and that customer's own tools: their Attio workspace, Google Drive, Slack, and call recorder (Fathom, Fireflies.ai, Avoma, tl;dv, Grain, or Granola).

We don't share your data with anyone else, except where required by law (for example, a valid legal request) or in a corporate transaction, in which case the acquirer is bound by this policy or one materially equivalent.

5. How long we keep it

• Sign-up details: up to 24 months after our last contact with you, unless you become a customer.
• Your workspace and account: for as long as your workspace uses foyai. If you ask us to delete it, we do so within 30 days, unless we have a legal reason to keep something.
• Rooms and buyer activity: until the seller deletes the room, or the workspace is deleted. Anything foyai already wrote to a customer's Attio stays in their workspace, under their control.

6. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct it if it's wrong.
• Delete it.
• Get a copy in a portable format.
• Object to how we're processing it, or restrict that processing.
• Withdraw consent at any time (we'll honor it going forward).
• Lodge a complaint with your local data protection authority.

The fastest way to exercise any of these is the privacy request form below. A person on our team handles each request, confirms it within a few business days, and finishes it within 30 days. We won't charge you, retaliate, or downgrade your experience for asking. If your request is about a room you received, we may pass it to the company that sent the room, since they control that data.

California residents: the CCPA/CPRA gives you the same rights described above and a right not to be discriminated against for exercising them. We have not "sold" or "shared" personal information for cross-context behavioral advertising in the past 12 months, and we don't plan to.

EEA / UK residents: we process account and workspace data to provide the service you signed up for, sign-up details and product usage data on the basis of our legitimate interest in running and improving foyai, and website analytics and company identification on the basis of your consent. We process buyer data in rooms on behalf of the company that sent the room.

7. International transfers

Foyai SAS is based in France. Some of our processors handle data in the European Union, and others in the United States, including the servers the foyai app runs on and its database. When personal data is transferred out of the EEA, the UK, or Switzerland, we rely on the EU–US Data Privacy Framework where the recipient is certified, or on Standard Contractual Clauses. Our subprocessors page lists where each one processes customer data.

8. Cookies & tracking

On foyai.com, PostHog sets first-party cookies so we can measure how the site is used. If you're in the EU, EEA, UK, or Switzerland, we ask first with a cookie banner, and if you decline, PostHog doesn't load. Everywhere else, PostHog loads by default and you can turn it off. We treat a Global Privacy Control signal from your browser as a request to turn it off. You can change your choice at any time with the Cookie preferences link in the footer. Vercel's page-view analytics runs either way and doesn't use cookies.

Apollo.io also runs on foyai.com, to tell us which company a visit comes from. It keeps a random ID in your browser's storage so repeat visits count as the same visitor. It follows the same choice as PostHog: where we ask first, it loads only if you accept, and everywhere else, declining or a Global Privacy Control signal turns it off.

The chat on foyai.com runs on Intercom, which sets cookies to keep your conversation going across pages and visits. It follows the same choice as PostHog: where we ask first, or if you've declined or sent a Global Privacy Control signal, Intercom loads only when you open the chat yourself.

In the foyai app, we use a cookie to keep you signed in for up to 30 days, short-lived cookies during sign-in and when you connect Google or Slack, and PostHog to understand how the app is used.

In buyer rooms, we use a cookie to keep you signed in to a room for up to 30 days, and a random ID in your browser's storage to count repeat visits. Rooms don't set analytics or advertising cookies.

We don't use advertising cookies or fingerprinting anywhere.

9. Security

Everything is served over HTTPS. Connection tokens for Attio, Google, and Slack, and API keys for call recorders, are encrypted in our database with AES-256-GCM. Access to Attio is limited to the permissions your Attio admin approves. More detail is on our security page. No system is perfectly secure; if we ever discover a breach that affects you, we'll notify you and the relevant authorities within the timelines required by law.

10. Children

foyai is a B2B product. We don't knowingly collect data from anyone under 16. If you believe we have, use the privacy request form below and we'll delete it.

11. Automated decision-making

We don't make decisions about you using automated processing that produces legal or similarly significant effects. foyai uses AI to draft room content, and a seller reviews each draft before a buyer can see it.

12. Changes to this policy

If we update this policy, we'll change the "Last updated" date at the top. For material changes, such as new categories of data, new processors, or new uses, we'll email workspace admins before the change takes effect.

13. Submit a privacy request

Use this form for any privacy request — access, correction, deletion, export, or anything else. A person on our team reads every submission and responds within 30 days, usually much sooner. You can also email support@foyai.com directly if you prefer.