Privacy Policy

1 · What we collect

When you interact with Frontberg we process the following categories of data:

• Account: email address, name, authentication provider identifiers, hashed password.
• Usage: pages visited, buttons clicked, desks opened, chart settings, and alert preferences.
• Device: IP address, browser type, operating system, viewport, locale.
• Billing (paid tiers): billing address, card brand + last four, invoice history. Card numbers are stored by our PCI-compliant processor, never by us.
• Support: any messages you send us plus relevant metadata.

2 · How we use it

• Run the Service and authenticate your session.
• Deliver product updates, billing notices, and security alerts.
• Improve reliability, detect abuse, and respond to support requests.
• Comply with legal obligations (tax, AML, lawful requests from regulators).

We do not sell your personal data. We do not share your personal data with third parties for their independent marketing.

3 · Subprocessors

We use a short list of vetted infrastructure providers to operate Frontberg:

• Hosting & delivery — Vercel (EU region for landing, global edge for static assets).
• Database — Supabase (EU region).
• Queue & cache — Upstash Redis (EU region).
• AI inference — Anthropic / OpenAI for AlphaFlow causal outputs.
• Email — transactional provider (login links, billing receipts).

Each subprocessor is bound by a Data Processing Agreement and processes data only on our instructions.

4 · Retention

Account data is kept for the life of your account plus 30 days. Billing records are retained for 7 years to meet accounting obligations. Usage analytics older than 24 months are aggregated and anonymised.

5 · Your rights

Under GDPR and equivalent laws you can request access to, correction of, deletion of, or portability of your personal data. You can also object to processing or withdraw consent where we rely on it. Email privacy@frontberg.com to exercise any of these rights.

6 · Cookies & tracking

We use strictly necessary cookies to keep you signed in and analytics cookies to understand how the Service is used. You can reject analytics cookies without losing core functionality.

7 · Security

We encrypt data in transit (TLS 1.2+) and at rest. Access to production systems is limited to named engineers and audited. Security incidents that involve your personal data will be notified within 72 hours as required by law.

8 · International transfers

Some subprocessors may process data outside the EU/EEA. Such transfers are covered by Standard Contractual Clauses and supplementary measures as required.

9 · Children

Frontberg is not intended for children under 18. We do not knowingly collect data from anyone under 18.

10 · Changes

If this Policy changes materially we will notify you by email or within the Service. Continued use after the effective date constitutes acceptance.

11 · Contact

Controller: Frontberg (Brain Tech). privacy@frontberg.com