Privacy Policy

1. Who We Are

FuseIQ is operated by Abbasi Labs LLC (fuseiq.io). Our registered address is Florida, United States.

Abbasi Labs LLC is the data controller responsible for your personal data under applicable data protection laws, including the UK GDPR and EU GDPR.

Subscription and checkout payments are processed by Dodo Payments Inc as merchant of record on behalf of Abbasi Labs LLC, Florida, United States. The merchant of record may collect billing name, email, payment method metadata, and transaction history required to complete purchases.

2. Information We Collect

We collect the following categories of information:

• Account Data: Name, email address, company name, billing information
• Usage Data: Agent configurations, execution logs, feature interactions, page views
• Technical Data: IP address, browser type, device identifiers, operating system
• User Content: Prompts, queries, instructions submitted to AI agents via the Platform
• AI Outputs: Content generated by AI agents in response to your instructions
• Communications: Support tickets, correspondence with our team

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Platform
• Process transactions and manage your account
• Send technical notices, security alerts, and support messages
• Monitor usage patterns to optimize performance and security
• Comply with legal obligations

3.1 Lawful Basis for Processing

Under UK GDPR and EU GDPR, we process your personal data under the following lawful bases:

• Contractual Necessity (Art. 6(1)(b)): To provide the Platform, process payments, manage your account, and deliver customer support. Without this processing, we cannot fulfil our contract with you.
• Legitimate Interests (Art. 6(1)(f)): To monitor and improve the Platform, ensure security, prevent fraud, and send service-related communications. We balance these interests against your privacy rights. Our Legitimate Interests Assessment is available on request.
• Consent (Art. 6(1)(a)): Where we rely on your consent (e.g., non-essential cookies, optional marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
• Legal Obligation (Art. 6(1)(c)): To comply with applicable laws and regulatory obligations, including tax and accounting requirements.

No Special Categories: We do not intentionally process Special Categories of personal data (Art. 9 — race, religion, health, biometrics, etc.) and our systems are not designed to collect such data. You should not submit Special Categories of data through the Platform.

4. Data Security

We implement industry-standard security measures including AES-256-GCM encryption, secure data transmission via TLS 1.2+, role-based access control (RBAC), multi-factor authentication (MFA), 24/7 system monitoring, and an incident response plan. Your API keys and sensitive configuration data are encrypted at rest.

4.1 Cookies and Tracking

FuseIQ uses the following categories of cookies and similar tracking technologies:

• Essential Cookies: Required for platform functionality (authentication, security, session management). These do not require consent.
• Analytics Cookies: Used to understand usage patterns and improve the Platform (e.g., page views, feature usage). We obtain your consent before placing these cookies.
• Marketing Cookies: Used for optional marketing communications. Only placed with your explicit consent.

You may manage your cookie preferences at any time via the cookie settings panel. For a detailed list of cookies, their purpose, and duration, please see our Cookie Policy (available on request). FuseIQ does not sell your personal data for any purpose.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy, subject to our legal obligations:

After the applicable retention period, data is securely deleted or anonymized. You may request earlier deletion of your data by contacting us.

6. Third-Party Services and International Transfers

The Platform integrates with third-party providers for essential services. These include:

• AI Model Providers: FuseIQ AI, OpenAI, Anthropic, Google, and others for AI inference
• Payment Processing: Dodo Payments Inc (merchant of record for Abbasi Labs LLC)
• Infrastructure: Managed cloud database, application hosting, and product analytics processors under data-processing agreements. Sub-processor names available on request via privacy@fuseiq.io.

Your use of these integrations is subject to their respective privacy policies and terms.

6.1 International Data Transfers

Where we transfer your personal data to countries outside the UK or European Economic Area (including the United States), we ensure appropriate safeguards are in place. These include the UK International Data Transfer Addendum to the EU Standard Contractual Clauses (2021) and Transfer Impact Assessments (TIAs) for each transfer. You may request a copy of these safeguards by contacting privacy@fuseiq.io.

7. Your Rights

Under applicable data protection law, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure (Right to be Forgotten): Request deletion of your personal data
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where we rely on it

How to Exercise Your Rights

In product (fastest): Settings → Profile → Leave FuseIQ — export your personal data package, then schedule deletion (default 7-day grace, cancel anytime) or choose permanent delete now. After grace ends or on immediate delete: sole-owned workspace content is removed (not a recoverable soft restore), and you are removed from shared workspaces. You can also email privacy@fuseiq.io. Email requests are answered within one month of verifying your identity. For complex or multiple requests, this may be extended by up to two additional months, with notice.

Complaints:If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK at ico.org.uk or your local EU data protection authority.

7A. California Residents — CCPA/CPRA Rights

If you are a California resident, the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (CCPA/CPRA), grants you additional rights:

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected, the business purpose for collection, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt-Out: FuseIQ does not sell your personal information. We do not share personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising any CCPA right.
• Shine the Light: California Civil Code §1798.83 entitles residents to request information about sharing with third parties for direct marketing purposes.

To exercise your CCPA/CPRA rights, contact privacy@fuseiq.io with the subject line “CCPA Request.” We will verify your identity before processing your request. You may designate an authorized agent to make a request on your behalf.

8. Children’s Privacy

FuseIQ is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that a child under 16 has provided us with personal data, we will take steps to delete that information. If you believe a child has provided us with personal data, please contact privacy@fuseiq.io.

9. Data Breach Notification

In the event of a personal data breach, FuseIQ will notify affected users without undue delay and in any event within 48 hours of becoming aware of the incident. Notification will include the nature of the breach, categories and approximate number of data subjects and records concerned, likely consequences, and measures taken or proposed. Where applicable, we will also notify the relevant supervisory authority in accordance with GDPR Art. 33.

10. Contact

For privacy-related questions, data subject requests, or inquiries about our data protection practices:

• Email: privacy@fuseiq.io
• Legal notices: legal@fuseiq.io
• Post: Abbasi Labs LLC, Florida, United States
• Data Protection Officer: dpo@fuseiq.io