Skip to content

Legal

Privacy Policy

Effective date: 15 June 2026  ·  Last updated: 15 June 2026

This Privacy Policy describes how Fabrik AI, Inc.(“Fabrik,” “we,” “our,” or “us”) collects, uses, discloses, and safeguards information about you when you use fabrik.ai and our related services (the “Service”). Please read this policy carefully. If you do not agree with it, please do not use the Service.

This policy applies to all users of the Service, including visitors to our marketing website, registered users, and members of organizational accounts. It does not apply to information collected by third-party websites or services that may be linked from our Service.

1. Information We Collect

1.1 Information You Provide

We collect information you give us directly when you:

  • Create an account— name, email address, password (hashed), organization name, role, and billing details (processed by Stripe; we do not store raw card data);
  • Submit a creative brief or chat message— text descriptions, uploaded reference files (images, audio, documents), project names, and any other content you provide in the chat interface;
  • Manage your account— profile photo, preferences, notification settings, connected integrations; and
  • Contact us— email correspondence, support tickets, and demo booking information.

1.2 Information We Collect Automatically

When you use the Service, we automatically collect:

  • Usage data— pages viewed, features used, buttons clicked, session duration, search queries, and interaction with Generated Content (approve, reject, download events);
  • Device and connection data— IP address, browser type and version, operating system, device identifiers, and network information;
  • Log data— server logs, error reports, API request and response metadata (not content), and performance diagnostics; and
  • Cookies and similar technologies— see Section 6 below.

1.3 Information from Third Parties

We may receive information about you from third-party authentication providers (e.g., Google OAuth, GitHub OAuth) if you choose to sign in via those services. We also receive billing-related event data from Stripe and infrastructure health data from our hosting and monitoring providers.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and improve the Service;
  • Process your creative briefs and orchestrate AI generation on your behalf;
  • Manage your account, subscriptions, and Credits;
  • Send transactional communications (account confirmation, job completion notifications, billing receipts);
  • Send marketing and product update communications where you have opted in (you may opt out at any time);
  • Detect, prevent, and respond to fraud, security incidents, or policy violations;
  • Comply with legal obligations and enforce our Terms of Service;
  • Conduct internal analytics and research to improve platform performance and user experience; and
  • Build and improve our AI systems, subject to the restrictions in Section 3 below.

3. AI Training Data Policy

We take a clear position on how your content interacts with AI model training:

  • We will not use your identifiable briefs, project data, or Generated Content to fine-tune or train AI models without your explicit opt-in consent.
  • We may use anonymized, aggregated statistical signals (e.g., aggregate acceptance rates across asset categories) to improve platform routing, cost optimization, and quality thresholds. These signals cannot be reverse-engineered to recover individual project content.
  • Enterprise customers may negotiate data isolation agreements that prohibit even anonymized usage. Contact enterprise@fabrik.ai.

4. How We Share Your Information

We do not sell your personal information. We may share it in the following circumstances:

4.1 Service Providers

We share information with vendors and service providers that help us deliver the Service, including:

  • Cloud hosting (Supabase/AWS) — storage and database hosting;
  • AI model providers— your prompt content is sent to upstream model APIs to generate assets (see Section 9 for details);
  • Stripe — payment processing;
  • Analytics providers— anonymized usage data for platform improvement; and
  • Email providers — transactional and marketing email delivery.

All service providers are contractually required to use your information only as directed by us and to protect it with industry-standard security measures.

4.2 Organizational Accounts

If you use the Service as a member of an organizational account, the Account Owner can view and manage project activity, member access, and some usage data within their organization. We are not responsible for how Account Owners use this access.

4.3 Business Transfers

If Fabrik is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on the Service before your information becomes subject to a different privacy policy.

4.4 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Fabrik, our users, or the public.

4.5 With Your Consent

We may share your information for other purposes if you give us specific, informed consent to do so.

5. Data Retention

We retain your account data for as long as your account is active and for a reasonable period thereafter to comply with legal obligations and resolve disputes. Specific retention periods:

  • Project data and Generated Content— retained while your account is active. Deleted projects are purged from production systems within 30 days; backups within 90 days.
  • Billing and transaction records— retained for 7 years as required by financial regulations.
  • Server logs— retained for 90 days for security and debugging purposes.
  • Account data after deletion— we delete or anonymize personal information within 30 days of account deletion, except where longer retention is required by law.

6. Cookies and Tracking Technologies

We use cookies, pixel tags, and similar tracking technologies for:

  • Essential cookies— session authentication, security tokens, and preference storage. Required for the Service to function.
  • Analytics cookies— aggregate usage patterns to improve the platform. You may opt out via your browser settings or our cookie preference center.
  • Marketing cookies— only placed with your explicit consent. These help us understand which marketing channels drove you to the Service and measure campaign effectiveness.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from using the Service.

7. Security

We implement industry-standard security measures to protect your information, including:

  • TLS encryption for all data in transit;
  • AES-256 encryption for sensitive data at rest;
  • Row-level security in our database, enforced by Supabase Auth policies;
  • Regular security reviews and penetration testing; and
  • Strict access controls limiting employee access to personal data to those with a legitimate operational need.

No security system is impenetrable. If you discover a security vulnerability, please disclose it responsibly at security@fabrik.ai.

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

  • Access— request a copy of the personal information we hold about you;
  • Correction— request correction of inaccurate or incomplete data;
  • Deletion— request deletion of your personal information (subject to legal retention requirements);
  • Portability— receive your personal information in a structured, machine-readable format;
  • Objection— object to processing of your personal information for direct marketing or on grounds relating to your particular situation; and
  • Restriction— request restriction of processing in certain circumstances.

To exercise any of these rights, contact us at privacy@fabrik.ai. We will respond within 30 days. We may need to verify your identity before processing your request.

You may also opt out of marketing communications by clicking the unsubscribe link in any marketing email or updating your notification preferences in your account settings.

9. Third-Party AI Model Providers

To generate assets, Fabrik sends your prompt and relevant context to one or more upstream AI model providers. These providers process your content under their own privacy policies. We select providers that offer enterprise data protection commitments and do not use submitted content to train their models by default. Current provider data-handling documentation is available on request at privacy@fabrik.ai.

We do not send payment information, personally identifiable account data, or credentials to AI model providers. Only the content necessary to generate the requested asset is transmitted.

10. International Data Transfers

Fabrik is based in the United States. If you access the Service from outside the US, your information will be transferred to and processed in the US. For users in the European Economic Area (EEA), UK, or Switzerland, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission as the legal mechanism for these transfers. Contact us for a copy of our SCCs.

11. California Privacy Rights (CCPA/CPRA)

California residents have the right to know what personal information we collect and share, to delete their personal information, to opt out of “sale” or “sharing” of personal information, and to non-discrimination for exercising these rights. We do not sell or share personal information as defined by the CCPA. To submit a request, contact privacy@fabrik.ai.

12. Children’s Privacy

The Service is not directed at children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information without appropriate consent, please contact us at privacy@fabrik.ai and we will promptly delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email and by updating the “Last updated” date above. We encourage you to review this policy periodically. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

14. Contact

Questions, requests, or complaints about this Privacy Policy should be directed to:

Fabrik AI, Inc. — Privacy Team
privacy@fabrik.ai

If you are located in the EEA and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

This Privacy Policy was last updated on 15 June 2026. Previous versions are available upon request.