Privacy Policy

1. Who we are

frutti.ai (the "Service") is operated by Fast AI Labs ("we", "us"), the controller of personal data processed through the Service. Contact us about privacy at [email protected].

2. Data we collect

• Account data — your email and authentication identifiers, handled via our auth provider (Clerk).
• Connected accounts — when you connect a social account (e.g. X), the handle and the access tokens needed to act on your behalf, stored encrypted.
• Content data — the prompts you submit, the content we generate for you, your style preferences, schedules, and memory notes.
• Billing data — plan, credit balance, and subscription identifiers. Card payments are processed by Stripe; we do not store full card numbers.
• Usage & device data — log data, approximate location from IP, and analytics events (via Google Analytics and Cloudflare Web Analytics) to keep the Service secure and improve it.
• Cookies — strictly-necessary cookies for sign-in and security, plus analytics cookies/identifiers as above.

3. How we use your data

• to provide the Service — authenticate you, generate content in your selected voice, schedule and post where you ask;
• to process payments, manage subscriptions and credits, and prevent fraud and abuse;
• to secure, debug, monitor, and improve the Service;
• to communicate with you about your account, support, and material changes;
• to comply with legal obligations.

4. Legal bases (UK/EU GDPR)

We process data to perform our contract with you (providing the Service and billing), on the basis of our legitimate interests (security, fraud prevention, analytics, and product improvement, balanced against your rights), to comply with legal obligations, and on the basis of your consent where required (e.g. certain cookies), which you may withdraw at any time.

5. AI processing & sub-processors

To generate output, your prompts and related content are sent to third-party AI model providers (such as OpenRouter and the models routed through it) and to data sources used to research and source media (such as TwitterAPI.io). We share data only with providers that help us run the Service, including:

• Clerk — authentication;
• Stripe — payments and subscriptions;
• Supabase — database and storage;
• AI model providers (e.g. via OpenRouter) — content generation;
• Cloudflare and our hosting provider — delivery, security, and infrastructure;
• Google Analytics & Cloudflare Web Analytics — usage measurement.

We do not sell your personal data.

6. International transfers

Some providers process data outside your country, including outside the UK/EEA. Where they do, we rely on appropriate safeguards such as standard contractual clauses or an adequacy decision.

7. Retention

We keep personal data for as long as your account is active and as needed to provide the Service, then for as long as necessary to meet legal, tax, accounting, and security obligations or to resolve disputes. You can delete content from within the Service, and you can ask us to delete your account.

8. Your rights

Subject to law, you have the right to access, correct, delete, restrict, or object to processing of your personal data, to data portability, and to withdraw consent. To exercise any of these, email [email protected]. You also have the right to complain to your local data protection authority (in the UK, the ICO).

9. Security

We use technical and organisational measures appropriate to the risk, including encryption of connected account tokens, access controls, and reputable infrastructure providers. No system is perfectly secure, so we cannot guarantee absolute security.

10. Children

The Service is not directed to anyone under 18, and we do not knowingly collect their data.

11. Changes & contact

We may update this policy; the "last updated" date shows the current version. Questions or requests: [email protected].