How we handle your data.

1. Who we are

This site is operated by foyai ("we," "us," "our"). If you'd rather skip the formality: we're a small team building digital sales rooms for B2B teams running pipeline in Attio.

For any privacy question, use the privacy request form at the bottom of this page.

2. What we collect

Right now, foyai is in waitlist mode. The only personal data we collect is what you actively submit through the waitlist form:

• Email address — so we can reach out when your slot opens.
• Role — AE, leadership, ops/enablement, or other.
• CRM — which CRM your team uses (Attio, HubSpot, Salesforce, other).
• Sales room usage — whether you use one today and which one.
• Team size — roughly how many sellers are on your team.
• Timeline — when you're looking to start.

We do not use analytics, tracking pixels, advertising cookies, fingerprinting, or session-replay tools on this site. Our hosting provider (Vercel) may collect standard server logs — IP address, user-agent, request path — for security and operational purposes. We don't read or analyze these logs unless we're debugging an issue.

3. How we use it

We use your information to:

• Decide who to invite off the waitlist and in what order.
• Email you about your early access, ask follow-up questions, and (if you want) share product updates.
• Understand who's interested so we can prioritize the right features.

We will never sell your data, rent it, share it with advertisers, or use it to train third-party AI models.

4. Who we share it with

We use a small set of vendors ("processors") to run the business. They only see the data they need to do their job:

We don't share your data with anyone else, except where required by law (e.g., a valid legal request) or in the event of a corporate transaction (in which case the acquirer becomes bound by this policy or one materially equivalent).

5. How long we keep it

We hold onto your waitlist information for as long as you're on the waitlist, plus a reasonable window after (up to 24 months) in case you want to come back. If you ask us to delete your data, we'll do so within 30 days unless we have a legal reason to keep it.

6. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct it if it's wrong.
• Delete it.
• Export it in a portable format.
• Object to how we're processing it, or restrict that processing.
• Withdraw consent at any time (we'll honor it going forward).
• Lodge a complaint with your local data protection authority.

The fastest way to exercise any of these is the privacy request form below. We'll confirm within a few business days and finish the request within 30 days. We won't charge you, retaliate, or downgrade your experience for asking.

California residents: the CCPA/CPRA gives you the same rights described above and a right not to be discriminated against for exercising them. We have not "sold" or "shared" personal information for cross-context behavioral advertising in the past 12 months, and we don't plan to.

EEA / UK residents: our legal basis for processing your waitlist data is your consent (when you submit the form) and our legitimate interest in evaluating product-market fit and reaching out to prospective users. You can withdraw consent at any time.

7. International transfers

Some of our vendors are based in the United States. When we transfer personal data out of the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses or equivalent safeguards published by the relevant authority.

8. Cookies & tracking

This site does not set cookies, use localStorage for tracking, or run any third-party analytics or advertising scripts. We don't show a cookie banner because there's nothing to consent to — if that changes, we'll update this page and ask you first.

9. Security

We protect your information using standard industry practices — TLS encryption in transit, scoped API tokens, least-privilege access to our CRM, and audit logging at our vendors. No system is perfectly secure; if we ever discover a breach that affects you, we'll notify you and the relevant authorities within the timelines required by law.

10. Children

foyai is a B2B product. We don't knowingly collect data from anyone under 16. If you believe we have, use the privacy request form below and we'll delete it.

11. Automated decision-making

We don't make decisions about you using automated processing that produces legal or similarly significant effects. A human reviews every waitlist invite.

12. Changes to this policy

If we update this policy, we'll change the "Last updated" date at the top. For material changes (e.g., new categories of data, new processors, new uses), we'll email everyone on the waitlist before the change takes effect.

13. Submit a privacy request

Use this form for any privacy request — access, correction, deletion, export, or anything else. A real person reads every submission and responds within 30 days (usually much faster). You can also email support@foyai.com directly if you prefer.