Privacy Policy

In short. This explains what personal data FactsFigs collects, why, and what rights you have. We collect account details, usage/analytics data, and — on free reader pages — advertising data. We use it to run and improve the service, and we do not sell your personal data. We use service providers ("sub-processors") to operate. You have rights to access, correct, and delete your data.

This Privacy Policy explains how FactsFigs ("we") handles personal data of creators, readers, and visitors when you use our service. It forms part of the Terms of Service. FactsFigs is the data controller and is operated from the United Kingdom; you can reach us at ai@factsfigs.com.

1. Who this applies to

• Creators — subscribers who create, download, and publish content.
• Readers — people who view content (free with ads; paid ad-free with downloads).
• Visitors — anyone browsing the service.

2. Data we collect

• Account data. Name/username, email, password credentials (hashed), subscription tier and status, and — for creators — profile/byline details and publishing history.
• Payment data. Handled by our payment processor(s); we receive limited billing metadata (e.g. plan, status, country, last-4), not full card numbers.
• Content and usage data. Content you create or publish, and how you use the editor and the site (features used, pages viewed, downloads, saves/likes, embeds).
• Analytics and device data. IP address, approximate location, browser/device type, referring pages, and interaction events, collected via analytics tools such as Google Analytics.
• Advertising data (free reader pages). Ad-serving and measurement data on ad-supported pages, via our ad provider (Google AdSense). Paid ad-free readers do not see these ads.
• Communications. Emails, support requests, and newsletter subscription status.

We do not knowingly collect data from children below the applicable minimum age (see Section 9).

3. Why we use it, and our lawful bases

Under CCPA/CPRA and similar US regimes, our processing is described by these purposes with a notice-and-opt-out model rather than "lawful bases" (see Section 8).

4. Cookies and advertising

We use cookies and similar technologies for essential functionality, analytics, and — on free reader pages — advertising. You can control non-essential cookies via your browser, though some features may not function properly as a result. Where required, we obtain consent before setting non-essential cookies.

5. How we share data (sub-processors)

We do not sell your personal data. We share it with sub-processors who operate the service under contract, including categories such as: hosting/cloud infrastructure, payment processing, analytics, advertising, email/communications, and abuse/security tooling. A current list of sub-processors is available on request at ai@factsfigs.com. We may also disclose data to comply with law, respond to valid legal requests, enforce our Terms, or protect rights and safety.

6. International transfers

We operate globally and may process personal data in countries other than yours, including our engineering and operations locations (for example, our engineering team in Pakistan). Where we transfer personal data out of the UK or EEA, we rely on an appropriate safeguard such as Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision.

7. Retention and deletion

We keep personal data only as long as needed for the purposes above, to meet legal obligations, and to resolve disputes. Account data is retained while your account is active and for a reasonable period after closure. Note that published quota posts and reader downloads may persist after account closure per the survival terms in the Creator Terms — associated personal data (e.g. byline) may remain visible on those hosted pages.

8. Your rights

Depending on where you live, you may have rights to:

• access a copy of your personal data;
• correct inaccurate data;
• delete your data ("right to erasure"), subject to legal and survival exceptions;
• restrict or object to certain processing;
• portability of data you provided;
• withdraw consent (e.g. marketing) at any time; and
• for California/US residents: know, delete, correct, and opt out of "sale"/"sharing" for targeted advertising, with non-discrimination for exercising rights.

To exercise rights, contact ai@factsfigs.com. You may also complain to your local data-protection authority (in the UK, the Information Commissioner's Office).

9. Children

The service is not directed to children below 13 (or the higher age of digital consent where you live), and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will take appropriate steps.

10. Security

We use reasonable technical and organisational measures to protect personal data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Representatives

Where required by law for regulated markets (for example, an EU GDPR Article 27 representative or a Digital Services Act legal representative), FactsFigs will appoint and identify such representatives. If you need to reach a representative, contact ai@factsfigs.com.

12. Changes

We reserve the right to change this Privacy Policy at any time, at our sole discretion. Updates take effect when posted on this page, with a revised "last updated" date; material changes will be notified as described in the Terms of Service. Where a change materially affects how we use personal data for which your consent is required, we will seek fresh consent rather than rely on this clause.

Business customers — data processing

Where FactsFigs processes personal data on behalf of a business customer (for example, a sponsored-story partner), that customer is the controller and FactsFigs acts as processor: we process such data only on the customer's documented instructions and for the agreed purpose, use sub-processors under equivalent obligations, apply appropriate security measures, govern transfers by Standard Contractual Clauses / the UK Addendum, notify the customer of personal-data breaches without undue delay, and delete or return the data on termination (subject to legal retention). A full Data Processing Agreement is available on request at ai@factsfigs.com.