Privacy Policy
Fyboard is launching as an India-first product suite covering Fyboard, FyTools, and FyServices. This Privacy Policy explains how we collect, use, store, share, and safeguard personal data, including files, records, workflow data, payment references, and AI-assisted processing data.
1. Privacy Overview
Our commitment to protecting your personal information
Fyboard is operated by Fybyte Technology Private Limited in India. This Privacy Policy applies to Fyboard, FyTools, FyServices, public website visitors, registered users, customer administrators, invited workspace users, and integrations connected to the Fyboard product suite.
Core Privacy Principles
Data Minimization
We collect only what is needed to run Fyboard, FyTools, FyServices, billing, security, support, and product improvement
- Purpose limitation: Data collected only for specified, legitimate purposes
- Storage limitation: Retained only as long as necessary
- Review of forms, uploads, logs, and AI workflow inputs before expanding collection
Security by Design
Security controls are built around encrypted transport, controlled production access, and India-first infrastructure
- TLS for data in transit and encryption at rest where supported
- Role-based access and least-privilege production access
- Operational reviews for logs, backups, files, and workers
User Control
Customers and users keep control over workspace content, export requests, deletion requests, and privacy choices
- Account and workspace controls where available
- Email-supported export and deletion requests during launch
- Essential cookies by default; consent for non-essential tracking where required
Transparency
Clear, honest communication about our data practices and privacy commitments
- Plain-language privacy policies and notices
- Notice when material processing, vendors, or regions change
- Clear communication about confirmed security incidents when notification is required
Our Privacy Commitments
Never Sell Your Data
We will never sell, rent, or trade your personal information to third parties for monetary gain or any other consideration.
Consent-Based Processing
We process your data when needed to provide the product, comply with law, protect the platform, support customers, or where you consent.
India-First Launch
Our current default production setup is designed around Indian operations and AWS Mumbai hosting, with future regional hosting considered for eligible customers.
Processor Accountability
We maintain a vendor and sub-processor inventory for infrastructure, payments, communications, AI, analytics, monitoring, and support tools.
Privacy by Default
The most privacy-friendly settings are applied by default, with options to customize based on your preferences.
Privacy by the Numbers
Key Points to Remember
- We never sell your personal data to third parties
- You can request export or deletion of personal data through our launch support process
- Current default application hosting is in AWS Mumbai for India-first operations
- GDPR may apply if EU personal data is processed or EU users/customers are targeted
2. Information We Collect
Types of data we gather to provide our services
Account & Profile Information
We collect personal information that you provide when creating an account, joining a workspace, using Fyboard, FyTools, or FyServices, or contacting us by email. This information helps us operate accounts, permissions, billing, security, and support.
Required Information
- • Full name and account display name
- • Email address (primary contact)
- • Password (encrypted and secure)
- • Account, workspace, and role information
- • Product, tool, service, and plan preferences
Optional Information
- • Profile picture, avatar, or bio
- • Secondary email and security preferences
- • Organization and job title
- • Workspace display preferences
- • Communication preferences
Data Accuracy
You are responsible for keeping your personal information accurate. Incorrect information may affect service delivery and security.
Identity Verification & Security
For business accounts, paid plans, invoicing, fraud prevention, or legal compliance, we may collect additional verification information. We do not require this for every user.
Security
- • 2FA data
- • Recovery and verification signals
- • Login and session identifiers
- • Authentication tokens
Business
- • Company registration
- • Tax identification
- • Business address
- • Authorized representative
Compliance
- • KYC documentation, if legally or commercially required
- • Government ID copies only where required for a transaction or verification workflow
- • Address verification
- • Compliance records
Payment & Billing Information
When you subscribe or buy a module, tool, service, add-on, usage pack, AI credit pack, storage pack, or other entitlement, we collect payment information needed to process transactions through Stripe or Razorpay.
Billing Details
- • Billing name and address
- • Payment method type and gateway
- • Last 4 digits where provided by the gateway
- • Transaction history
Security
- • Stripe or Razorpay customer/order/payment IDs
- • Fraud prevention and risk signals
- • UPI, card, bank, or wallet status returned by the gateway
- • Refund and dispute references
We do not intentionally store full card numbers, CVV, UPI PINs, or netbanking credentials on Fyboard servers. Stripe and Razorpay collect payment credentials under their own security and privacy practices.
3. How We Use Information
Transparent processing for legitimate business purposes
We use personal data only for defined product, security, billing, support, compliance, and improvement purposes. For customer workspace content, Fyboard will often act as a processor on behalf of the customer organization; for account, billing, security, marketing, and website data, Fyboard may act as controller.
Primary Processing Purposes
We process personal information for these launch categories. Retention depends on account status, workspace settings, legal requirements, payment records, backups, and the type of module, tool, service, add-on, or usage pack involved.
Service Delivery
Core Fyboard, FyTools, FyServices, storage, workflow, extraction, AI-assisted, and collaboration functionality.
Security & Fraud
Security monitoring to protect users, workspaces, payments, files, APIs, and the platform from abuse.
Analytics & Improvement
Improving reliability, usability, workflow quality, and performance.
Communication
Keeping users informed about updates, security, and billing.
Legal Compliance
Required to meet tax, accounting, privacy, corporate, payment, and legal obligations.
Business Operations
Supporting customer onboarding, account administration, vendor management, and internal launch operations.
6. Data Security
How we protect your information
Security is foundational for Fyboard because the product may process files, contracts, emails, invoices, workflow records, and AI-assisted outputs.
Multi-Layered Security Architecture
Encryption Standards
Encryption and transport protections for application traffic, databases, files, and secrets.
Infrastructure Security
India-first AWS Mumbai deployment for current launch operations.
Application Controls
Product controls for accounts, workspaces, tools, APIs, and admin access.
7. Data Retention
How long we keep your information
We retain data only as long as needed for product operation, workspace administration, billing, security, legal compliance, backups, disputes, or customer instructions.
User Account Data
Personal info, account settings, and workspace membership records.
Standard
Account life + deletion/recovery window
Business Data
Workspace content, files, contracts, emails, invoices, forms, Tool Output, and AI Output.
Standard
Customer plan, workspace settings, and legal requirements
Usage Analytics
Platform metrics and performance data.
Standard
Minimized or aggregated where practical
Security & Legal
Audit trails and compliance records.
Standard
As needed for security, accounting, tax, and legal obligations
8. Your Privacy Rights
Understanding and exercising your choices
You may request access, correction, deletion, export, restriction, objection, or complaint review depending on your location, role, customer contract, and applicable law. During launch, requests are handled primarily by email.
Access
View and understand personal data we process about you.
Rectification
Correct inaccurate or incomplete information.
Erasure
Request deletion or anonymization of personal data where legally and technically possible.
Restriction
Limit how we process your personal data.
Portability
Receive data in reasonable portable formats where required and available.
Object
Object to processing based on legitimate interests or direct marketing where applicable.
9. International Transfers
Global data protection and cross-border transfers
Fyboard's current default production setup is India-first: EC2 and RDS in AWS Mumbai. Mumbai hosting does not automatically exempt us from GDPR if EU personal data is processed or if Fyboard later targets EU users or customers.
Our Global Transfer Principles
We are launching with India-focused operations and initially expect India/internal/RCL users. If a customer uploads personal data about EU/EEA individuals, or if Fyboard later offers services to EU/EEA users or customers, storing that data in Mumbai may be treated as a transfer outside the EEA and must be handled with appropriate safeguards.
India Default
Core application and database in AWS Mumbai for launch.
Region Inventory
We track where infrastructure, logs, files, backups, and vendors process data.
Future Regions
EU or US tenant hosting may be added later for eligible customers.
10. Children's Privacy
Special protections for our younger users
We are committed to children's safety. We do not knowingly collect data from children under 13 without verifiable parental consent.
Comprehensive Child Protection
We recognize that our platform may be used in educational or family contexts. We are committed to the highest level of protection for any users under 18.
Children Under 13
We do not knowingly collect personal info from children under 13 without verifiable parental consent. Any inadvertently gathered data is purged immediately.
Teens 13-17
Additional privacy protections and content filtering are automatically applied. Features are limited to educational and professional focus.
Safety Contact
If you believe we have inadvertently collected data from a child, contact us immediately.
11. Policy Updates
How we manage and communicate changes
Privacy is dynamic. We update this policy when Fyboard adds modules, tools, services, payment flows, processors, AI workflows, regions, or legal requirements.
Our Update Philosophy
We are committed to practical, transparent policy updates as Fyboard moves from India/internal launch to broader public and paid B2B use.
Transparency First
Plain-language summaries for material changes.
Advance Notice
Reasonable notice before material changes where practical.
User Choice
Consent or controls for new non-essential processing where required.
Material Changes
Significant modifications affecting user rights, data regions, processors, AI processing, or data sharing.
Administrative
Clarifications, contact info, formatting, or minor operational changes.
Legal Compliance
Changes required by new laws, regulator guidance, payment rules, or court orders.
Security
Updates to improve security, safety, or data protection.
12. Contact us
Questions, concerns, or rights requests
Privacy and data-rights requests are handled by email during launch. We verify requester identity and workspace authority before disclosing, exporting, changing, or deleting data.
Privacy Team
General privacy questions, policy clarifications, and data-region questions.
Office Location
HQ Address
Fybyte Technology Private Limited
House No. 85, Block-A, Sector Sigma-01, Greater Noida
Uttar Pradesh, India 201305
Details
IST (UTC+5:30)
Mon - Fri, 9 AM - 6 PM