Privacy Policy

This policy explains what Futuremodel collects when you use our website at futuremodel.io, our application at console.futuremodel.io, our mobile app and our API (together, the "service"), what we do with it, and the choices you have. "Futuremodel", "we" and "us" mean Futuremodel Inc., the company that operates the service.

The short version: Futuremodel holds descriptions of your data, not a mirror of it. We keep what you tell us about yourself and your organization, the model you build, and what we need to reach the data sources you connect. We do not sell personal information, and we do not use your data to train AI models.

What we collect

Your account

When you request access or create an account we collect your name, your email address and a username, and we store your password in hashed form. We also keep the Organizations you belong to, the Roles you hold in them, and the settings you choose.

What you create

We store the model you and your organization build: Domains, Entities, Attributes, Relations and Metrics, their definitions and their Versions, together with the comments, Questions, Answers, Insights, Corrections and saved views you write. What others in your organization can see of these is decided by Roles and Visibility, which your organization controls.

The data sources you connect

To connect a Source such as a database, a warehouse, a file store or another service's API, we store the connection details and the credentials or access tokens needed to reach it. From a connected Source we keep:

• Descriptions: the names and types of its catalogs, datasets and columns.
• Profiles: statistics computed over the data, such as how complete or how distinct a column's values are.
• Named values: a value is recorded only when it names something in your model (a category's code, or an individual someone chose to record) or when someone quotes it in a comment or an Insight.

Other values are read from the Source when someone asks to see them and are shown to people your organization has allowed to see them. If your organization asks Futuremodel to keep a copy of a dataset up to date, that copy is written to a storage location your organization controls.

How the service is used

We record errors and measurements of how the application performs so that we can find and fix problems. The application at console.futuremodel.io also loads HubSpot's tracking script, which records visits. You can turn on "Do not track" in the application's privacy settings.

The website at futuremodel.io sets no cookies and loads no analytics.

What is kept on your device

The application keeps your session, your preferences and, so that it can open quickly and work offline, a copy of itself and of what it last showed you in your browser's storage. Signing out removes the session.

How we use it

• To provide the service and keep it secure.
• To send you messages about your account and, unless you turn them off, notifications about the things you follow.
• To find and fix faults and to improve the service.
• To answer you when you contact us.
• To meet our legal obligations.

We do not sell personal information, and we do not use the contents of your data sources for advertising.

AI features

If your organization turns on the Assistant, the questions you ask it are sent to our AI provider, Anthropic, together with what is needed to answer them: the names, definitions and structure of your model, and counts and other aggregates of data you are allowed to see. Rows of your data are never sent. Labels of categories and the names of datasets and columns are included only where your organization's Governor has allowed it.

The Assistant acts with your permissions and never with more. We do not use your data to train AI models, and our agreement with our AI provider does not permit it to do so.

If your organization connects an assistant of its own to Futuremodel, that assistant can read and draft only what the Roles it has been granted allow. What it does with what it reads is governed by its provider's terms, not this policy.

Google user data

If you connect Google Drive, Futuremodel uses the access you grant to list, read and, where you ask it to, write the files you choose to work with. Futuremodel's use and transfer of information received from Google APIs adheres to theGoogle API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Google user data only to provide the features you see in Futuremodel.
• We do not transfer it to others except as needed to provide those features, to comply with the law, or as part of a merger or acquisition.
• We do not use it for advertising.
• We do not use it to develop or train generalized AI or machine learning models.
• People at Futuremodel do not read it unless you ask us to, it is needed for security or to comply with the law, or it has been aggregated and anonymized for internal operations.

You can remove Futuremodel's access at any time by deleting the Source in Futuremodel or from your Google account's security settings.

Who we share it with

We share information with the companies that help us run the service, under agreements that limit what they may do with it:

• Google Cloud, which hosts the application and its database.
• Cloudflare, which delivers the website and the application.
• Anthropic, which provides the model behind the Assistant.
• HubSpot, for visit analytics and customer communication.
• Sentry and Segment, for error reports and measurements.
• Mapbox, which serves the maps shown in the application.

We also disclose information when the law requires it, to protect the rights and safety of our users and ourselves, and to a successor if Futuremodel is acquired or merged. What you make Public in Futuremodel is visible to anyone.

Where it is kept

Our providers process information in the United States and in other countries where they operate. Where the law requires safeguards for transferring personal information between countries, we rely on the safeguards our providers offer.

How long we keep it

We keep your account and what you have created for as long as the account exists. When you delete something in Futuremodel it is marked as deleted and can be restored for a grace period, 30 days unless stated otherwise, after which it is removed for good. When an account is closed we delete or anonymize what identifies you, except what we must keep to meet legal obligations.

Your choices and rights

• You can correct your account details and change your email and notification choices in the application's settings.
• You can ask us for a copy of your personal information, to correct it, or to delete it and close your account.
• Depending on where you live, you may have further rights, such as objecting to or restricting certain uses, and complaining to your data protection authority.

To make a request, write to [email protected]. If your account belongs to an organization, we may refer requests about that organization's data to its administrators.

Security

We protect information with measures appropriate to its sensitivity, including encrypted connections and access limited by Role. No system is perfectly secure; if we learn of a breach that affects you, we will tell you as the law requires.

Children

The service is for use at work and is not directed at children. We do not knowingly collect personal information from anyone under 16.

Changes to this policy

We will post any change on this page with a new date, and if a change is significant we will tell account holders by email or in the application before it takes effect.

Contact

Questions about this policy or about your information: [email protected], or by post: