Privacy Policy

Last updated: November 1, 2026 Effective date: November 1, 2026

This policy explains what personal information we process when you visit the Feimore AI website, sign in, and use the dashboard and the Publish Assistant: why we process it, who receives it, where it is stored and processed, how long we keep it, and how you can exercise your rights.

Important
  • You sign in with your Google account. From Google we receive your Google account ID, email address, and name, and Google may also share basic profile details such as your profile picture (Section 2.2). We never receive your Google password.
  • We do not sell your personal information. Once your content has been de-identified, we may use it to improve the Service, and you can opt out of this by emailing us.
  • You can access, correct, and delete your information, and you can delete your account at any time. Section 7 explains how.
Contents

    1. Who we are

    Feimore AI (the “Service”) includes the Feimore AI website, the dashboard, and the Feimore AI Publish Assistant browser extension. In this policy, “we” or “us” means the operator of the Service named in Section 11, which is the controller of the personal information described in this policy.

    2. Information we process

    In short

    We list information by how you use the Service. If you don’t provide information marked “required”, the feature that needs it won’t work. Everything else is optional.

    2.1 Visiting the website

    Our servers keep access logs, including your IP address, the time of each visit, the pages you visit, and your browser type and version. We use these logs to keep our network secure and to troubleshoot problems. We do not currently use any third-party analytics or advertising tools on the website or in the dashboard. If we add any, we will update this policy.

    2.2 Signing in with Google

    You sign in to the Service only with “Sign in with Google”. The first time you sign in, your account is created. We ask Google only for basic sign-in information: your Google account ID, email address, and name. Google may also share your profile picture, given and family name, language preference, and, for Google Workspace accounts, the hosted domain. We never receive your Google password, and we get no access to your Gmail, Google Drive, contacts, or any other Google data. We accept only email addresses that Google has verified.

    Information Purpose
    Google account ID (required) Serving as your account’s unique identifier; verifying your identity when you sign in or confirm account deletion; preventing trial credits from being claimed more than once
    Email address (required) Received from Google together with whether Google has verified it. Identifying your account, including when you contact us about activation, billing, or refunds, and contacting you about your account
    Name The name on your Google account, used as your default display name in the dashboard. If there is none, the display name defaults to the part of your email address before the @. You can change your display name
    Sign-in tokens and sign-in times Keeping you signed in, and recording your most recent sign-in time, for account security
    Other Google profile information Your profile picture, given and family name, language preference, and, for Google Workspace accounts, the hosted domain, where Google provides them. Used to personalize the dashboard, set your default interface language, and recognize accounts that belong to the same organization
    Approximate country Inferred at sign-up from your IP address and your browser’s time zone; this is not your precise location. Used to set your pricing region and default settings, prevent fraud and abuse, and comply with sanctions laws

    2.3 Using the dashboard

    Information Purpose
    Project materials Product name, target market and language, target platforms, brand materials, and uploaded documents, used for building the positioning profile, Market Insights, and content generation
    Uploaded media Images, video, and audio, used to produce videos. People’s images and voices in these files are used only to produce videos, not to identify a specific individual or to verify anyone’s identity
    Your replies and decisions Feedback, revision requests, and approval decisions you give during a workflow, used to adjust the content and kept as learnings for that project
    Generated content Reports, strategies, scripts, voiceovers, videos, covers, and copy, delivered to you
    Publishing records Links to published posts, plus views, engagement, and other data that you log or fill in later, used for reviews and to improve that project’s future content
    Run logs Agent call records, error logs, and when and by whom each action was taken, used to troubleshoot problems, account for costs, and keep the Service secure
    Space and member information The spaces you belong to, your member role, when you joined, and invitation records, used to control who can access which projects

    Most of this is business information. If it includes other people’s personal information (for example, images and voices of people in your media, or customer information in your materials), you must first obtain their consent or have another lawful basis. We process that information only according to how you use the Service.

    We may use the materials described above, your replies, and generated content to improve the Service, for example to refine our agents’ prompts, workflows, and review criteria and the models we use. We do so only after this information has been de-identified and only where no specific individual can be re-identified from it. If you don’t want your content used this way, email us as described in Section 11 to opt out. The opt-out applies going forward and does not cover aggregated usage statistics or processing needed to secure the Service and prevent abuse (see also Section 8.4 of the Terms of Service).

    2.4 Using the Publish Assistant

    The Publish Assistant runs in your own browser and needs three browser permissions: to manage tabs, to run scripts on supported platform pages, and to store settings locally.

    Information Purpose
    Platform sign-in status and account names Showing in the dashboard whether you are signed in to each platform and with which account, so you can confirm where a post will go. Currently used only within your browser and not saved to our servers
    Content to be published Taking the video, title, body text, and tags from the dashboard and filling them in on the platform publishing page you have opened
    Post links After you click publish, finding the post on the platform’s content management page, reading its link, and sending the link back to the dashboard to log as a publishing record for the project

    To tell whether you are signed in, the Publish Assistant checks platform pages for sign-in markers locally and calls the platform’s account information API using your browser’s signed-in session. The Publish Assistant does not send us your platform passwords, cookies, or other sign-in credentials.

    Third-party platforms and web pages that you open through the Service (including publishing pages opened by the Publish Assistant and web pages cited in market insights reports) are governed by their own privacy policies. We have neither the ability nor a direct obligation to protect personal information that you submit on third-party platforms.

    2.5 Credits and activation

    Information Purpose
    Credit transactions Every credit grant, hold, deduction, return, and expiry, with the project, workflow, and person involved, used for billing, reconciliation, and handling disputes
    Activation requests Your account email address, your space, and any message you leave, used to contact you about activation or renewal
    Questions and feedback When you click Contact us on our website or in the dashboard: the topic you choose (pricing, product help, billing or other), the name, contact details, company, team size and message you enter, the plan you ask about, and any screenshots or screen recordings you attach while signed in, used to answer and resolve your request. Your network address at submission is kept only as an irreversible digest, to stop abusive bulk submissions. If you are signed in, the message is linked to your account. We also record the interface language and the page you sent it from. You don't need an account to submit, but you must sign in to attach screenshots or recordings
    Pricing region When you open the pricing page or send us a message through Contact us, we use the network address you connect from or your browser's time zone to decide which pricing region applies and show prices in its currency (USD for international visitors). The address is only compared with public address ranges on our own servers; it is not sent to anyone else or kept for this purpose
    Purchase requests and orders When you buy a subscription or credit packs, at checkout or through Contact us on the pricing page: the plan or amount, the space the credits go to, the price, currency, and taxes charged, the type of payment method and the payment status, and the payment, renewal, and cancellation times, used to issue credits, renew or end subscriptions, reconcile accounts, calculate taxes, process refunds, and issue invoices. Payments are processed by third-party payment processors or an authorized reseller, which receive your payment details directly; we do not receive or store your full card number
    Contract, offline payment, and invoicing information Company name, contact person, contact details, invoicing details, and records of offline payments, obtained when a contract is signed offline, when you pay offline, or when you email us for an invoice, and used to enter into and perform the contract, confirm payment, and issue invoices

    2.6 Contacting us

    When you email us, we process the content of your email and the contact details in it to answer your questions and handle complaints.

    If you are in the European Economic Area, the United Kingdom, or Switzerland, we process personal information on the following legal bases (and we rely on the same bases wherever else applicable law requires one):

    • performing our contract with you, for example to provide the Service to you, sign you in, process credits, and issue invoices;
    • our legitimate interests, including keeping the Service and your account secure, preventing abuse (such as repeat trial claims and bulk submissions), processing, within a reasonable scope, information that has been lawfully made public (such as public web pages and social media discussions searched by Market Insights), and improving the Service with de-identified data, which you can opt out of as described in Section 2.3;
    • complying with our legal obligations, for example accounting, tax, sanctions, and security obligations;
    • where necessary in an emergency, protecting the life, health, and property of natural persons; and
    • your consent, where applicable law requires it. You can withdraw your consent at any time (Section 7).

    3. Local browser storage

    In short

    We use local storage to keep you signed in and to remember your interface settings.

    • We store your sign-in token, recently opened projects, unsubmitted form drafts, and interface preferences such as language and light or dark theme in your browser’s local storage (localStorage).
    • The sign-in page loads Google’s sign-in button from Google. It is governed by Google’s privacy policy, and Google may set its own cookies there.
    • You can clear local storage in your browser settings. You will then need to sign in again.

    4. Service providers and sharing

    In short

    We use service providers to help us provide the Service and give them only the information they need for the task. We don’t sell your personal information.

    These providers supply cloud servers, databases, and storage, large language models and image generation, web search, speech synthesis, and similar services, and are subject to change as our business needs require. Section 4.1 sets out where they are located. Through agreements or terms of service, we set out the purposes and methods of their processing and the safeguards they must apply, and we require them not to use the information for any purpose beyond what was agreed.

    Payment processors and authorized resellers process payments under their own privacy policies.

    Our operations staff can view the account and project information they need when setting up spaces, granting credits, handling appeals, and troubleshooting. Their access is permission-controlled, and they are bound by confidentiality obligations.

    Apart from the cases in this section, we do not provide your personal information to any other organization or individual unless:

    • we have your consent;
    • laws or regulations, litigation, or competent government authorities acting in accordance with law require it;
    • it is necessary in an emergency to protect the life, health, and property of you or others; or
    • personal information needs to be transferred because of a merger, acquisition, division, reorganization (including a transfer to an affiliate), dissolution, declaration of bankruptcy, or similar event. In that case, we will tell you the recipient’s name and contact details, and the recipient must continue to meet the obligations in this policy. If the recipient changes the purposes or methods of processing, it must obtain your consent again.

    If we stop operating the Service, we will stop collecting personal information, notify you by public announcement or other means, and delete or anonymize the personal information we hold, unless laws or regulations provide otherwise.

    4.1 Where your information is stored and processed

    • Storage: your account information, space and credit records, project materials, uploaded media, and generated content are stored on Tencent Cloud servers and object storage located in Singapore.
    • Processing: when content is generated, project materials, your replies and instructions, and voiceover scripts are sent to model and speech providers located in the United States.

    Vercel (AI Gateway), Google, Anthropic, OpenAI, and Perplexity receive the content above through their APIs to generate text and images and to search the web. We use Microsoft to turn voiceover scripts into speech. Each provider’s contact details are in its privacy policy (click its name to view it). These providers process the content on our instructions under agreements or terms of service and may not use it for other purposes. If our providers change, we will promptly update this list. If you want to exercise rights such as access, correction, or deletion against these providers, let us know using the contact details in Section 11, and we will help you do so.

    Requests we send to model and speech providers do not include your email address, Google account ID, or other account information. However, any personal information you put in your materials, media, and replies is sent along with that content.

    We encrypt data in transit and take other necessary safeguards to keep your data secure.

    5. How long we keep information

    In short

    We keep information only for the shortest time needed for its purpose, then delete or anonymize it.

    Information How long we keep it
    Account information For as long as your account exists. When you delete your account, we immediately erase your email address, Google account ID, name, and other Google profile information, and change your display name to “Deleted user”
    Trial credit claim records Kept as an irreversible keyed hash of your Google account ID, including after you delete your account, to prevent trial credits from being claimed more than once
    Access logs and network logs As long as needed for security and as required by applicable law
    Project content in personal spaces For as long as your account exists. After you delete your account, we delete or anonymize the personal information in it as required by law
    Project content in team spaces For as long as the team space exists, or as set out in our contract with that business
    Questions and feedback As long as needed to answer and resolve your request and follow up. When you delete your account, the name, contact details and message in requests sent while signed in are erased, and their screenshots or recordings are deleted
    Credit transactions; orders and payment records; contract, offline payment, and invoicing information For the periods required by accounting and tax laws and regulations

    If a retention period required by laws or regulations has not yet ended, or if deletion is technically difficult to achieve, we will stop all processing other than storing the information and taking necessary security measures.

    6. Security

    • We use encryption in transit.
    • You sign in with Google, so we do not store a password for your account.
    • Access is controlled by space and project.
    • Internal staff are given access only as needed and are bound by confidentiality obligations.

    You should also keep your Google account and the devices you sign in on safe, and not let anyone else use them. If you notice anything unusual with your account, contact us immediately.

    No internet environment is completely secure, and the devices and networks you use to access the Service may also run into problems for reasons beyond our control. If personal information is, or may be, leaked, tampered with, or lost, we will take remedial action immediately, and will notify you and report to the competent authorities as required by applicable law.

    7. Your rights

    In short

    You can do most of this yourself in the dashboard. For anything else, contact us and we’ll reply within 15 business days.

    • Access and copying: You can view your account information in Account settings, and view and download project content in the dashboard. If you need a copy, contact us.
    • Correction and completion: You can change your display name in Account settings. Your email address and name come from your Google account and are managed there; if any information we hold about you is inaccurate, contact us.
    • Deletion: You can delete uploaded documents in the dashboard. To delete a whole project or other information, contact us. You can ask us to delete your information in the circumstances set out by law, such as when the purpose of processing has been achieved, when you withdraw your consent, or when we stop providing the Service.
    • Withdrawing consent: You can withdraw consent you have given at any time. Once you do, the features or services that depend on it can no longer be provided. Processing we performed based on your consent before you withdrew it, and processing based on the other legal bases in Section 2.7, are not affected.
    • Deleting your account: You can delete your account in Account settings, confirmed by signing in again with the same Google account. Account deletion is irreversible. Once your account is deleted, you can no longer sign in to it or recover its content. For other consequences, see Section 3.6 of the Terms of Service; for what happens to paid credits, see Section 7 of the Paid Services Terms.
    • Objection and restriction: You can object to processing based on our legitimate interests, including the use of de-identified content to improve the Service, and ask us to restrict processing in the circumstances set out by law.
    • Portability: Where applicable law provides this right, you can ask us to transfer your personal information to another controller you designate.
    • Explanation: You can ask us to explain this policy and our rules for processing personal information.
    • Complaint: You have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work (Section 11).

    When you contact us to exercise your rights, we will first verify your identity, and we will reply within 15 business days. We may refuse requests that are repeated without good reason, require excessive technical effort, put the lawful rights and interests of others at risk, or are clearly impractical, and we will explain why.

    If a user dies, their close relatives may, for their own lawful and legitimate interests, exercise the rights above, such as access, copying, correction, and deletion, with respect to the deceased user’s personal information.

    8. Automated decision-making

    The Service uses artificial intelligence to generate marketing content and to score that content. This processing concerns the content itself. It does not make decisions about you personally that significantly affect your rights and interests. If we send you commercial messages by email or other means, we will give you a way to opt out of receiving them.

    9. Children

    The Service is not directed to children, and you must be at least 18 years old (or the age of majority where you live) to use it. We do not knowingly collect personal information from children under 16 (under 13 in the United States); if we learn we have, we delete it. A parent or guardian who becomes aware of such a case can contact us.

    10. Changes to this policy

    When we update this policy, we will post the new version and its update date on this page. If there is a material change to the purposes or methods of processing, the types of information processed, or the service providers listed in Section 4, we will notify you by prominent means, such as an in-app notice or email, before the change takes effect. Where your consent must be obtained again, we will ask for it again.

    11. Contact us

    • Controller: Beijing Luofang Artificial Intelligence Technology Co., Ltd.
    • Privacy contact email: [email protected]

    We will reply within 15 business days of receiving your request. If you are not satisfied with our reply, you can lodge a complaint with your local data protection authority, or bring a claim before a court with jurisdiction.

    12. Language versions

    This policy is available in English and Chinese. If the versions differ, the English version prevails.