Privacy Policy

1. Scope of this Policy

This Privacy Policy applies to frediq.xyz, the FRED IQ web application, private-beta and customer workspaces, and related support or operational services (collectively, the “Service”). It covers information about users of the Service as well as professional business information about people who may appear in FRED IQ research even if they have never created a FRED IQ account.

Depending on the context, FRED IQ may process information for its own operational purposes (for example, account security or independently sourced professional business facts) or on a customer’s instructions (for example, a customer-supplied target list). An enterprise agreement or data-processing addendum may allocate privacy roles differently for a particular customer.

2. Information we collect and process

2.1 Account, authentication, and organization data

• Name, business email address, profile image, account identifier, and authentication/session information.
• Organization, workspace, membership, role, invitation, access-control, and account-status information.
• Security events, login timestamps, session metadata, IP address, browser/device information, and similar operational signals used to protect the Service.

2.2 Customer-provided business information

• Company websites, offers, target criteria, good-customer examples, dream accounts, exclusions, geographies, and other business calibration inputs.
• Known companies or accounts a customer asks FRED IQ to research; feedback, approvals, corrections, notes, and outcome data entered by authorized users.
• Files or other material a user chooses to submit where the Service supports uploads. Users should not upload unnecessary sensitive personal information.

2.3 Professional information about third parties

FRED IQ’s core service can research professionals who have not signed up for FRED IQ. We seek to keep this research in a business and professional context. Depending on the task and available evidence, we may process:

• name, employer, professional title, seniority, business function, and current-employment evidence;
• professional work email address and verification status;
• professional telephone route where legitimately sourced and relevant; we do not label a generic switchboard as a verified direct number;
• company, office, region, and other business context;
• public source URLs, publication dates, provenance, and source-quality or confidence metadata; and
• derived business-research conclusions, such as likely role in a buying process, fit, timing, or why a person may be relevant to a commercial conversation.

We do not design FRED IQ to intentionally collect sensitive personal characteristics for prospecting, such as health information, religious beliefs, sexual orientation, private family information, precise personal geolocation, consumer credit history, or other information unrelated to legitimate B2B research.

2.4 Usage, support, billing, and integration data

• Feature usage, page and workflow events, mission and review status, cost/credit metadata, error logs, performance telemetry, and audit records.
• Support messages and information you choose to provide when asking for help.
• If paid access is offered, transaction and subscription metadata. Payment processors may handle payment-card data directly; FRED IQ does not need your full card number to operate the Service.
• If an administrator configures a provider or integration, connection status and protected credential/token material needed to operate that integration. Secrets are intended to be handled server-side and not exposed in ordinary customer interfaces.

3. Where information comes from

We may receive information directly from users and customers; from Google when a user chooses Google Sign-In; from public business websites, company pages, professional profiles, press releases, news and other lawfully accessible public sources; from licensed or contracted business-data and contact-verification providers; and from the Service itself through security, billing, and usage events.

FRED IQ is not designed to obtain private account content by bypassing access controls, guessing credentials, or circumventing paywalls or technical restrictions. Customers may not instruct the Service to do so.

4. How we use information

• authenticate users, maintain sessions, manage invitations, memberships, roles, and tenant access;
• understand a customer's business, offers, targeting criteria, and exclusions;
• research companies and accounts, evaluate fit and timing, and assemble source-backed opportunity evidence;
• identify and prioritize relevant professional decision-makers, verify current employment, and verify professional contactability after person selection;
• produce, review, deliver, and improve FRED IQ Finds, Decision Pods, recommendations, Atlas/coverage views, and related customer-facing research;
• maintain source provenance, review history, auditability, credits, cost events, and quality controls;
• secure the Service, prevent abuse, investigate errors, detect unauthorized access, and enforce usage restrictions;
• provide support, communicate about the Service, and administer private-beta or commercial access; and
• comply with law, valid legal process, and enforceable contractual obligations.

Where privacy law requires a legal basis, processing may be based on performance of a contract, our legitimate interests in operating and securing a B2B research service, the legitimate interests of customers in lawful B2B prospecting, consent where required, or compliance with legal obligations. The appropriate basis depends on the data, feature, and jurisdiction.

5. Google Sign-In and Google user data

If you choose “Sign in with Google,” Google provides the identity information and permissions you authorize. For ordinary sign-in, this is expected to be limited to the basic identity data needed to authenticate you, such as your name, email address, profile image, and a stable Google account identifier. The exact permissions are shown on Google’s consent screen. FRED IQ does not receive your Google password.

We use Google user data only to provide or improve the user-facing authentication and account features for which it was requested, protect the Service, and comply with law. We do not transfer Google user data to advertising platforms, data brokers, or information resellers. We do not use Google user data for targeted advertising, creditworthiness, lending, or unrelated surveillance.

If FRED IQ later requests additional Google permissions, we will update this Policy and relevant in-product disclosures before using that data for a new purpose and will request additional authorization where required. Our use of information received from Google APIs is intended to comply with the Google API Services User Data Policy, including the Limited Use requirements where applicable.

6. Professional research about people who are not users

A prospect, executive, manager, or other professional may appear in FRED IQ because public or licensed business information indicates that the person is relevant to a customer’s commercial research. That person may never have visited FRED IQ. We treat this differently from a FRED IQ user account:

• research should stay tied to a legitimate professional or business purpose;
• we seek current-employment evidence and source provenance instead of presenting guesses as verified facts;
• professional contact lookup is intended to occur after FRED IQ has selected the relevant person rather than collecting a large contact list first;
• where a required professional contact route cannot be verified, the Service should preserve the uncertainty rather than invent information; and
• a person may contact us to request correction, deletion, objection, or other rights available under applicable law.

7. AI-assisted analysis and quality controls

FRED IQ uses automated systems, including AI models, to extract, summarize, classify, rank, and reason over business information. AI output can be incomplete or wrong. FRED IQ therefore uses automated evidence and quality controls, provenance, confidence states, and human review where appropriate. Customers should review research before relying on it for outreach or business decisions.

The Service is not designed to make legally significant or similarly high-impact eligibility decisions about individuals, including employment, housing, credit, lending, insurance, education admission, or access to essential services. FRED IQ is a B2B opportunity-research service, not a consumer-reporting agency or background-screening service.

8. How information is shared

We may disclose information only as reasonably necessary for the following categories of recipients and purposes:

• authorized users within the same customer organization, according to role and workspace permissions;
• hosting, database, authentication, observability, AI/research, professional contact-verification, and other service providers that process information to help operate FRED IQ;
• customers, where a delivered research result includes professional business information that is part of the Service's core function;
• professional advisers, auditors, or security specialists where reasonably necessary and subject to appropriate confidentiality obligations;
• government authorities or other parties when required by valid law or legal process, or where reasonably necessary to protect rights, safety, or the integrity of the Service; and
• a successor in a merger, financing, reorganization, acquisition, or sale of assets, subject to applicable notice or consent obligations.

We do not sell FRED IQ user-account data for money or use it for third-party behavioral advertising. The Service does, however, provide authorized customers with professional business research and contact information as part of the product. Privacy laws in some jurisdictions use broad definitions of “sale” or “sharing”; we will honor applicable rights and opt-out requirements where they apply.

9. Tenant isolation and factual reuse

FRED IQ is designed with organization-level authorization and tenant isolation. One customer should not be able to see another customer’s private target recipes, account lists, notes, feedback, usage, spend, or internal decisions.

Separately, certain source-backed business facts and verified professional contact facts may be retained in a shared factual layer and reused across customer work where lawful and appropriate. This is intended to reduce duplicate verification and improve consistency. Reuse is limited to facts independently sourced or verified for professional use; it does not authorize disclosure of a customer’s confidential strategy, private annotations, or proprietary data to another customer.

10. Retention and deletion

We retain information for as long as reasonably necessary for the purposes described in this Policy, including to provide the Service, maintain evidence and auditability, comply with legal obligations, resolve disputes, enforce agreements, prevent abuse, and protect security. Retention periods vary by data type and customer arrangement.

• Account and organization data is generally retained while the account or customer relationship is active and for a reasonable period afterward as needed for security, support, billing, and legal records.
• Mission, Find, evidence, source, review, and outcome records may be retained to preserve the integrity and auditability of delivered research and billing/credit decisions.
• OAuth tokens or connection credentials are intended to be removed or invalidated when the relevant connection is revoked or no longer needed, subject to short-lived backup and security records.
• Independently sourced professional facts may be retained until stale, superseded, corrected, removed, or no longer reasonably necessary, subject to applicable law and rights requests.
• Backups may retain deleted information for a limited recovery cycle before being overwritten; we do not restore deleted information from backup for ordinary product use.

11. Security

We use administrative, technical, and organizational safeguards intended to protect information, including role-based access, tenant isolation, database row-level access controls, secure transport, server-side secret handling, audit and review records, and controls designed to prevent provider credentials from appearing in ordinary client state or logs. No system can guarantee absolute security, and users are responsible for protecting their own credentials and devices.

12. Your choices and privacy rights

Depending on where you live and the nature of the data, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to appeal certain privacy decisions. We may need to verify your identity before completing a request. Authorized agents may be used where applicable law permits.

You can also revoke Google access through your Google Account permissions. Revoking Google authorization stops future access through that authorization but may not automatically delete information already lawfully retained in FRED IQ. To request deletion of your FRED IQ account or to raise a concern about professional information in a FRED IQ result, contact hello@frediq.xyz.

Where applicable, we will honor legally required opt-outs relating to sale, sharing, targeted advertising, or certain profiling. FRED IQ does not use personal information for third-party behavioral advertising.

13. International processing

FRED IQ and its service providers may process information in countries other than the country where you are located. Where required, we will use legally recognized transfer mechanisms or other appropriate safeguards for cross-border processing.

14. Children and sensitive uses

The Service is intended for business users and is not directed to children under 18. Do not use FRED IQ to intentionally research, profile, or target minors. Do not submit sensitive personal information unless it is necessary, lawful, and expressly supported by the Service and your agreement with FRED IQ.

15. Changes to this Policy

We may update this Policy as the Service, providers, legal requirements, or operating structure change. The “Effective” date will be updated when a new version is published. If a change materially affects how previously collected Google user data or other personal information is used, we will provide additional notice or obtain consent where required before using the data for the new purpose.

16. Contact

Privacy requests and questions: hello@frediq.xyz

Website: https://frediq.xyz

If a formal operating legal entity or additional privacy contact is designated later, this section will be updated so users and non-user professionals can identify the appropriate contact without naming an individual unnecessarily.