Privacy Policy

What we collect

• Your account. Your name, email address, business name, website, and what you tell us at sign-up about your goals and budget. We sign you in with a code or link sent to your email; there is no password to store.
• What you and your team make. Campaigns, creative, posts, approvals, the brand kit, and the messages you exchange with the agents. This is your work; it is kept so your team can keep working from it.
• Connected services. When you connect Google Analytics or Search Console, we read your reporting data (visits, conversions, search clicks and rankings) for the properties and sites you choose. When you connect an ad platform, we read campaign performance and spend for the ad accounts you choose. When you link social accounts, our publishing partner posts what you approve. See below for each.
• Billing. Payments are handled by Stripe. We keep your plan, usage and invoice history; we never see your full card number.
• Feedback you send. Your note, its type, and, only if you leave the switch on, the page you were on, your browser, window size and app version, plus any screenshot you attach. Kept to fix and improve Fabian.
• Usage. Server logs and error reports with times, addresses and the pages requested, kept briefly to keep the service working and safe.

How we use it

To run your marketing team: plan work, write and produce creative, report on results, and send you the daily brief and the notices you asked for. To bill you for your plan. To keep the service secure and to answer when you write to us. We do not sell your data, and we do not use your data or your connected accounts’ data to advertise to you.

Google user data

Connecting Google gives Fabian read-only access to Google Analytics 4 (scope analytics.readonly) and Search Console (scope webmasters.readonly), plus your email address to name the connection. We use this data only to show your business’s own results inside Fabian and to let your AI team reason about them: goal tracking on the dashboard, the daily brief, and the Analytics agent’s insights. We store the daily numbers we read, the property and site you picked, and an encrypted refresh token so the sync can run each day. You can disconnect at any time from Settings, which deletes the token, or revoke access from your Google Account permissions page.

Fabian’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we do not transfer Google user data to others except as needed to provide the service, do not use it for advertising, and do not allow humans to read it except with your permission, for security, or as required by law. Google data is not used to develop, improve or train generalized AI or machine-learning models.

Social accounts and ad platforms

Social accounts are linked through our publishing partner, Upload-Post, on their page. You sign in to each network there; Fabian never sees your social passwords and never posts anything you have not approved. Ad platforms (Meta, Google and others) are reached through our ads partner, AdManage, with the key you paste in Settings, which we encrypt and use only to read the ad accounts you pick and, when you turn writes on, to carry out the actions you approve.

Cookies and measuring our ads

Signed in, Fabian uses only the cookies it needs to work: your session, your time zone and display settings. Before you sign in, our pages ask whether we may measure which ads bring people here. If you allow it, we keep the ad you came from (its campaign name and click id) for 30 days and save it with your account if you sign up, and Meta’s pixel counts the visit and the signup. If you choose No thanks, none of that happens, and we remember your answer for 180 days. To change your answer, clear this site’s cookies.

Who helps us run Fabian

We use a small number of providers to run the service: Vercel (hosting), Supabase (database), Anthropic (the AI models behind your team), fal.ai (generated pictures and video), Vercel Blob (files and published pages), Resend (email), Stripe (billing), Upload-Post (social publishing), AdManage (ad platforms), Google (Analytics and Search Console, when you connect them), Sentry (error reports, without your content), and Meta (measuring our own ads, only if you allow it). Each receives only what it needs to do its job. Nothing you make is used to train the AI models.

How we protect it

Everything travels over HTTPS. Connection secrets and tokens are encrypted at rest with a key per account. Each account’s data is isolated in the database, so one customer can never read another’s. Access to production systems is limited to the people who run the service.

Keeping and deleting

We keep your data while you have an account. Disconnecting a service removes its tokens right away. If you close your account, or ask us to, we delete your account data within 30 days, except what we must keep for billing and legal records. Backups roll off on their own schedule.

Your choices

You can see and change your brand kit, connections and notes in Settings. You can disconnect Google, ad platforms and social accounts from Settings at any time. You can download a copy of your data, or ask for your account to be deleted, in Settings, under Your data; you can also write to us for either.

Contact

Questions about privacy go to Ankord Labs, by replying to any email Fabian sends you. Changes to this policy are posted here with a new date. See also our Terms of Service.