Privacy Policy.

1. What this covers

This policy covers the FieldStack AI product (the workspace, the agents, the prompt library) and the marketing website that points to it. The marketing site and the product both run on the Polsia platform — shared infrastructure owned centrally, with FieldStack AI operated as the application on top.

If we link out to a third party (Stripe at checkout, a carrier at phone-routing time), their own privacy policy applies once you land there.

2. Data we collect

• Account: the email you sign up with, the name you choose to give us, and the workspace name you create on signup.
• Authentication: a hashed copy of your credentials — or, if you used an OAuth provider, a token issued by that provider — plus the session cookie that keeps you logged in.
• Workspace: the agents, templates, and prompts you upload or author, every booking created by an agent, and every call the AI Receptionist takes on your behalf.
• AI traffic: the prompts you or your agent send to the model API, the completions streamed back, and token counts. We log this so the booking and call log you asked for renders correctly, and so metered tiers (when we add them) can bill accurately.
• Payments: receipts, subscription state, and tax line items from Stripe. We never see card numbers — Stripe-hosted checkout only.
• Marketing: if you signed up on the waitlist or joined the email drop, the email address and consent timestamp on that form.

3. How we use it

To operate the service you signed up for, to bill you for Pro and Agency plans, to send transactional email (auth, billing, agent notices — receipts, password resets, security alerts). Separately, with your consent at signup, to send the weekly prompt drop and the rare community email. You can unsubscribe from the marketing email at any time.

Aggregated, anonymized statistics may be retained indefinitely — for example, "the median Pro workspace books N calls per week." Those stats cannot be tied back to you or your customers.

4. Where it is stored

• Account, workspace, and AI traffic logs sit in Postgres, hosted on Neon. Neon is the database provider.
• Payments and subscription state sit on Stripe.
• Transactional email is sent through the Polsia email proxy — outbound only, no inbound mailbox, using the fieldstack-ai-8@polsia.app sender address.
• Geographic locations of those datasets depend on the underlying provider's region selection at the time of provisioning; the deploy may be in US or EU regions.

5. Cookies

• Theme preference — a single local-storage entry set by next-themes to remember light/dark. No personal data; none transmitted.
• Authentication session cookie — set when you log in, expires when you log out or after the inactivity window defined by our auth layer. Generic name, no third-party tracking.
• Stripe sets its own cookies on the hosted checkout page when you pay. Those cookies are Stripe's, follow Stripe's policy, and only exist on stripe.com while you complete payment.
• No third-party advertising cookies on FieldStack AI properties. The marketing site may include the Meta Pixel for ad-campaign measurement; it sets no personally identifying cookie unless you convert.

6. Third-party processors

• Stripe — payment processing and Stripe Tax. Card data is handled entirely by Stripe.
• Neon / Postgres — primary database for account, workspace, and AI traffic data.
• Polsia email proxy — transactional email send-only service.
• Polsia AI proxy — per-call model inference; your prompts are routed through it and never reach a model provider directly.
• Meta (Pixel) — present on the marketing website only, for campaign measurement. Not present in the workspace.

7. Your rights

You can request access to the personal data we hold for your account, a correction, an export (a downloadable copy of your workspace and prompt library), or full deletion. Email fieldstack-ai-8@polsia.app and we will respond within a reasonable window — typically within 30 days.

• Access: a copy of the row in your account and workspace.
• Correction: fix anything that is wrong.
• Export: a downloadable archive of your prompts, templates, agents, and the call/booking log on file.
• Deletion: remove your account and workspace. Aggregated, anonymized metrics that cannot be tied back to you are retained.
• On deletion, transactional email logs are purged within the same window, except where retention is required by law (tax records, anti-fraud).

8. Changes to this policy

We may update this policy. The "Last updated" date at the top will be bumped. For material changes we will email active account holders at least 14 days before they take effect. Continued use after that date means you accept the new policy.