This Privacy Policy explains how feat labs, inc. ("feat", "we", "us") collects and uses personal data on our marketing site (feat.so) and our hosted product. It covers the data we collect from website visitors and from people who sign up for an account ("Account Personal Data"). For end-user data routed through our APIs ("Customer Data"), our customer is the data controller and we are the processor — see the Data Processing Agreement.
1. Who we are
The data controller for Account Personal Data is feat labs, inc., incorporated in Delaware, United States. You can reach our privacy team at support@feat.so.
2. What we collect and why
| Category | Examples | Lawful basis (EU/UK GDPR) |
|---|---|---|
| Account identifiers | Name, email, hashed password | Contract performance (Art. 6(1)(b)) |
| Organization details | Legal entity name, country, time zone | Contract performance |
| Consent records | Terms / Privacy / Cookie acceptances, IP, user-agent, timestamp | Legal obligation (Art. 6(1)(c)) |
| Product telemetry | Login events, API request logs, error traces | Legitimate interests (Art. 6(1)(f)) - operating the service securely |
| Billing details | Company name, billing address, tax ID | Contract performance and legal obligation |
| Communications | Support tickets, email replies | Legitimate interests |
| Marketing email opt-in | Email + opt-in/out timestamp | Consent (Art. 6(1)(a)) |
3. Cookies and analytics
See the Cookie Policy for the full list. In short: we set a small number of strictly-necessary cookies on the marketing site and in the authenticated console. Analytics that load only after you give consent are documented there. You can change your choice at any time via the "Cookie preferences" link in the footer.
4. Sharing and sub-processors
We share Account Personal Data with vendors that help us run the Service: cloud hosting, email delivery, error monitoring, customer support, and payments. The current list is published at /legal/subprocessors. We never sell personal data.
5. International transfers
feat is established in Delaware, United States. When we transfer personal data out of the EU/EEA, UK, or Switzerland, we rely on the EU-US Data Privacy Framework (where we are self-certified) and the European Commission's Standard Contractual Clauses as a fallback. Equivalent safeguards are used for transfers to other regions where required.
6. Retention
We keep Account Personal Data for as long as your account is active and for a limited period afterward to comply with legal obligations (typically up to 6 years for billing records). Consent records are kept for as long as we may need to evidence them, with personally-identifying details (IP, user-agent) tombstoned upon erasure requests.
7. Your rights
Depending on your jurisdiction you may have rights to access, correct, delete, export, restrict, or object to the processing of your personal data, and to lodge a complaint with a supervisory authority. You can exercise most rights yourself from your account settings:
- Export: download your data as JSON.
- Erasure: delete your account; data is removed after a 28-day grace window.
- Marketing opt-out: toggle off marketing emails any time.
For everything else, write to support@feat.so. We respond within 30 days; complex requests may take an additional 60 days with notice.
8. California (CCPA / CPRA)
California residents have the right to know, delete, correct, and limit the use of their personal information, as well as the right to opt out of sale or sharing. We do not sell personal information. We respect the Global Privacy Control (GPC) signal as an opt-out request for sharing where applicable.
9. Security
See /security for a summary of how we protect your data, including encryption, sub-processor diligence, and breach notification procedures.
10. Children
The Service is not directed to children under 16, and we do not knowingly collect personal data from anyone under 16. Contact us if you believe a child has provided personal data and we will delete it.
11. Changes
If we make material changes to this Privacy Policy we will notify account administrators by email at least 30 days before the change takes effect. The "Last updated" date at the top of this page reflects the current version.
12. Contact
Email: support@feat.so
Postal: feat labs, inc., (to be added on incorporation)