Privacy Policy
Last updated: January 10, 2025
1. Overview
FieldReport.ai (“FieldReport,” “we,” “us,” or “our”) provides a competitive intelligence workspace for business teams. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you interact with our marketing site, join a waitlist, or use our hosted applications (collectively, the “Services”).
FieldReport acts as the data controller for the personal information we collect through the Services. If you access the Services on behalf of a company, you confirm that you have authority to share information on that company’s behalf.
2. Scope
This Privacy Policy covers personal information about visitors, account holders, and workspace collaborators. It does not apply to third-party websites or services that are not under our control; those services are governed by their own policies.
When customers connect third-party sources or upload data into the Services, they remain responsible for ensuring that their collection and use of that information is lawful and consistent with their own privacy obligations.
3. Information We Collect
3.1 Account and Contact Information
When you sign up or are invited to a workspace we collect details such as your name, email address, organization, role, profile photo, authentication identifiers, and communication preferences. Authentication is provided by our identity partner, Clerk.
3.2 Workspace Content
The Services allow you to capture competitor profiles, monitored sources, playbooks, and other intelligence data. You control the nature of this content. We store it on your behalf within our managed databases powered by providers such as Neon/Postgres and encrypted object storage.
3.3 Usage and Technical Data
We collect limited device and log information (for example, IP address, browser type, referring URLs, application telemetry, and error diagnostics) to maintain the security and reliability of the Services. We currently do not run third-party analytics or advertising pixels on the marketing site.
3.4 Support Correspondence
If you contact us for support or provide feedback, we collect the information you submit, along with related metadata (for example, the time of the request) so we can respond and improve the Services.
4. How We Use Information
We use personal information for the following purposes:
- Providing, personalizing, and maintaining the Services
- Authenticating users and securing workspaces
- Monitoring performance, debugging issues, and preventing abuse
- Communicating with you about updates, security alerts, and administrative matters
- Delivering customer support and processing requests from workspace owners
- Developing new features, including AI-assisted workflows where requested by customers
- Meeting legal, regulatory, and compliance obligations
5. Legal Bases for Processing
If you are located in the European Economic Area, United Kingdom, or Switzerland, we process personal information under the following legal bases:
- Contract: To create and administer accounts and deliver the Services.
- Legitimate Interests: To secure our platform, understand usage, and improve functionality.
- Consent: For optional communications or features that you actively enable.
- Legal Obligations: To comply with applicable law or respond to lawful requests.
6. How We Share Information
We do not sell personal information. We share personal information only as necessary to operate the Services or as required by law:
- Service providers: We engage vetted vendors to host infrastructure (for example, Vercel or equivalent cloud providers), manage identity and authentication (Clerk), deliver email communications, store structured data (Neon/Postgres), and support AI-powered features (such as OpenAI when you request automated insights). These providers process personal information strictly under our instructions.
- Workspace collaborators: When you join a shared workspace, your profile information and any content you contribute will be visible to the other members in that workspace.
- Business transfers: If we explore or complete a merger, financing, acquisition, or restructuring, personal information may be shared subject to appropriate safeguards.
- Legal obligations: We may disclose information if required to do so by law, subpoena, or court order, or if we believe in good faith that disclosure is necessary to protect our rights, users, or the public.
7. International Transfers
We operate primarily from the United States and rely on service providers in multiple jurisdictions. When we transfer personal information from the EEA, UK, or Switzerland to countries that have not been deemed to provide an adequate level of protection, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses or the UK International Data Transfer Addendum.
8. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy:
- Account and workspace data are kept while your account is active and for up to 90 days after closure unless you ask us to delete it sooner.
- Workspace content is retained until the workspace owner deletes it or the workspace is terminated.
- Support correspondence and operational logs are typically retained for up to three years unless a longer period is required for compliance or dispute resolution.
When data is no longer needed, we delete it or de-identify it in accordance with our retention schedule.
9. Security
We implement administrative, technical, and physical safeguards designed to protect personal information, including encrypted connections, access controls, and regular monitoring. However, no system is completely secure and we cannot guarantee absolute security. Please use unique passwords and notify us immediately if you suspect unauthorized activity.
10. Your Privacy Rights
Depending on where you reside, you may have the right to request:
- Access to the personal information we hold about you
- Correction of inaccurate or incomplete information
- Deletion or anonymization of personal information
- Restriction or objection to certain processing activities
- Portability of the personal information you provided to us
- Opt-out of direct marketing communications at any time
California residents may also request information about how we disclose personal information and may opt out of any future “sale” or “sharing” of personal information (as defined by the California Consumer Privacy Act). We do not sell personal information today.
To exercise your rights, email privacy@fieldreport.ai. We may ask you to verify your identity before fulfilling your request and will respond within the timeframes required by applicable law.
11. Cookies and Similar Technologies
We use essential cookies to authenticate users, maintain session integrity, and remember interface preferences such as sidebar state. For details, please review our Cookie Policy.
12. Children’s Privacy
The Services are not directed to or intended for children under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided personal information, contact us so we can remove it.
13. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or applicable law. When we post an updated version, we will revise the “Last updated” date at the top of the page and, when required, provide additional notice. Continued use of the Services after the changes become effective constitutes acceptance of the revised policy.
14. Contact Us
If you have questions or concerns about this Privacy Policy, or wish to exercise your privacy rights, contact us at privacy@fieldreport.ai.