THE DETAILS, IN PLAIN LANGUAGE

Your business.
Your information.

Launch draft: the site operator must add their legal identity, privacy contact, retention periods, and applicable jurisdiction before accepting live customer data.

What this application stores

The workspace stores your authenticated account identifier, name and email, business information, approved knowledge versions, incoming guest requests, draft replies, billing references, and service reports. Records are associated with the account that owns the business.

Private source imports

With your permission, public-page and document imports are converted to readable text for business-fact extraction. Original files are processed in memory and are not retained or published. Readable source text, source references, draft facts and approved provenance snapshots are stored privately in the workspace. Source exclusion does not delete prior approval snapshots. The operator must define retention periods and deletion procedures before launch.

AI processing and private tests

Readable import text is sent to the configured AI provider for extraction. Requests and relevant approved business information are sent to that provider to draft a reply. Avoid providing health records, financial details, passwords, customer records, or other sensitive information. Sensitive and unsupported questions are flagged for a person rather than resolved automatically. Provider data-handling terms must be reviewed separately.

Owner-only tests use the current approved knowledge version. They do not create customer conversations, deliver messages or make bookings. Cited facts help you review the draft; they are not a guarantee of every claim's correctness.

Payments

Stripe handles checkout and payment details. Foyerly stores subscription and transaction references needed for billing and access. Card numbers and security codes are not stored in this application.

Cookies and access

The application uses a secure authentication cookie and a short-lived OAuth state cookie to keep accounts signed in and validate sign-in requests. Platform-hosted previews may also be subject to the hosting platform’s analytics and access settings.

Scheduled processing

Configured service jobs review pending requests and generate reports inside the workspace. They do not deliver email or SMS unless a separate delivery integration is configured.

Data requests

Before launch, the operator must publish a contact address and procedures for access, correction, deletion, and retention requests. This draft is not a substitute for a complete jurisdiction-specific privacy policy.