Privacy Policy

1. Who is responsible

FollowUp AI is operated by GE ZHANG, an individual in Ontario, Canada, operating as "FollowUp AI". We are responsible for (the "controller" of) the personal information described here. Contact: support.followupai@gmail.com.

2. Information we collect and why

• Account details — email address, name and profile picture if you sign in with Google, and sign-in credentials. Used to create and secure your account. Basis: providing the service (contract).
• Conversation notes and generated content — the notes you type or dictate, your tone and language choices, and the outputs created. Used to generate results and show your saved history. Basis: contract.
• Usage information — number of generations per month and plan status. Used to apply plan limits. Basis: contract.
• Usage events and traffic source — we record basic usage events (such as sign-ups, follow-ups generated and upgrade clicks) and the traffic source that brought you here, without cookies, to understand how the app is used. Basis: legitimate interests.
• Technical information — IP address, browser and device details, and error logs. Used for security, fraud prevention and fixing problems. Basis: legitimate interests.
• Support messages — what you send us when you ask for help. Basis: legitimate interests.

Card and payment details are collected by Paddle, not by us.

3. Voice input

Voice input uses your browser's built-in speech recognition and only starts when you press the microphone button. We do not record or store audio. Depending on your browser, your browser provider (for example Google or Apple) may process the audio to convert it to text under their own privacy terms. Only the resulting text is added to your notes.

4. AI processing

To create your follow-up suggestions and messages, the notes you submit are sent through Lovable's hosted AI gateway to an AI model, which returns the results to us. Lovable's published privacy policy and Data Processing Agreement restrict the use of customer data for training AI models, and the model endpoint we selected is documented as zero-retention for inference requests — meaning the provider does not keep the text of those requests after returning the result.

That zero-retention statement applies to the model's inference requests only. It does not mean nothing is kept anywhere: platform logs, security and abuse-monitoring logs, backups, your account data and saved history, and other operational records may still be retained, and we have not confirmed exactly how long gateway security logs or backups are kept. We also do not promise that any request is processed in a particular country or region — see section 6 for information that may be handled outside Canada.

Please avoid entering unnecessary sensitive information about yourself or your clients.

5. Who we share information with

• Service providers — hosting, database, authentication and AI processing providers that help us run the service.
• Paddle — our Merchant of Record, for the sale of subscriptions, payment processing, subscription management, tax compliance and invoicing.
• Professional advisers — such as lawyers or accountants, where needed.
• Authorities — where required by law.

We do not sell your personal information.

6. International transfers

Some of our service providers may store or process information outside Canada, including in the United States. That information may be subject to the laws of those countries.

7. How long we keep information

We keep your saved history until you delete it or close your account. Account information is kept while your account is active. When information is no longer needed, we delete or anonymise it, except where we must keep certain records (for example, for tax or legal reasons).

8. Your choices and rights

You can delete individual history items in the app at any time. You may also ask to access or correct your personal information, ask us to delete your account, or withdraw consent where we rely on it, by contacting support.followupai@gmail.com. We aim to respond within 30 days. If you have concerns, you may contact the Office of the Privacy Commissioner of Canada.

9. Security

We use reasonable technical and organisational measures, such as encrypted connections and access controls that limit each account to its own data. No method of storage or transmission is completely secure.

10. Cookies and local storage

We use essential browser storage to keep you signed in and remember your language choices for the current session. We do not use advertising cookies. Paddle may use cookies during checkout.

11. Changes

We may update this policy and will post the new version here with a new date.