Privacy Policy

1. Who we are

Fullspan provides business research, account management and growth workflows. This policy covers our website, application and connected services. Contact us about privacy at contact@fullspanhq.com.

Fullspan is responsible for personal information we use to operate our business, such as account, billing and website information. When we process client records, messages and other workspace content on behalf of a business customer, that customer determines the purposes of the processing. If your information is in a customer’s workspace, you can contact that business about its use of your information, or contact us for help directing your request.

2. Information we collect

• Account and business details: your name, email address, business domain, workspace membership, preferences and information you provide during setup or support.
• Workspace content: client and prospect records, business guidance, uploaded documents, meeting notes, prompts, research, drafts, feedback and activity history.
• Connected accounts: information you authorise us to access, including email messages and participants, calendar events, LinkedIn conversations and account identifiers. We also store connection credentials or tokens needed to maintain authorised access.
• Messages to Fullspan: email, WhatsApp messages, phone numbers, voice notes and transcriptions, and information you submit through other enabled tools.
• Research information: public business and professional information from websites, search providers, news and other sources, including names, roles, professional contact details and source links.
• Billing information: subscription status, payment-provider identifiers and invoice or refund records. Stripe processes payment-card details; Fullspan does not store full card numbers.
• Technical and usage information: IP addresses, browser and device information, page visits, interactions, error reports, service logs and session recordings where enabled.

You may choose not to provide optional information or connect an account. Some features cannot work without the information they require. Website research can begin before signup when you submit a business domain.

3. How we use information

We use information to create and secure accounts, deliver research and account records, run authorised assignments, prepare drafts and recommendations, synchronise connected tools, respond to requests, process subscriptions and support customers. We also use operational and usage information to diagnose problems, understand use, improve the service, prevent abuse and meet legal obligations.

Where UK or European data protection law applies, our grounds include performing our contract with you, our legitimate interests in operating and securing the service and supporting business customers, compliance with legal obligations, and consent where required. You can withdraw consent without affecting processing that was lawful before withdrawal. For content processed on a customer’s behalf, that customer is responsible for establishing its lawful basis.

4. Google account data

If you connect Google, Fullspan requests access to your Google account email address, Gmail reading, Gmail draft management and sending, and read-only Google Calendar data. We use authorised messages, participants and events to maintain account context, prepare meeting briefs, identify follow-ups and create drafts. Sending a saved email draft requires your review and explicit Send action in Fullspan or Gmail.

Relevant Google content may be processed by our hosting and AI providers to deliver those features. Google account data is not used for advertising or to train general-purpose AI models. Human access is limited to circumstances permitted by Google’s policy, such as your affirmative agreement for support, security investigation or a legal requirement.

Fullspan’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy and the Google Workspace API User Data and Developer Policy, including their Limited Use requirements.

You can disconnect Google in Settings or revoke access through your Google Account connections. Disconnecting stops future access through that connection; it does not automatically remove information already added to workspace records. Contact us to request deletion of retained Google data.

5. AI processing and service providers

Fullspan sends relevant prompts, workspace context and source material to AI providers to generate research, summaries, drafts and recommendations. Depending on the feature, this can include personal information from connected tools. Our service uses providers such as Fireworks for model processing and OpenAI for voice transcription, along with research providers such as Exa.

Other providers support hosting, storage, authentication, payments and communication. These include Vercel, Supabase, Modal, Cloudflare, Stripe, AgentMail, Twilio and Unipile, depending on the features you use. They receive the information needed for their role. Connected services also process information under their own terms and privacy policies.

6. Cookies and analytics

We use cookies and similar storage to maintain sign-in sessions and service functionality. We also use PostHog for product analytics, error monitoring and session replay where configured. Signed-in activity can be associated with your account identifier. Replay is configured to mask input values and visible text and to exclude network request bodies, headers and console recording.

Our marketing pages use Google Analytics to measure visits and LinkedIn’s Insight Tag for advertising measurement and audience features. These providers may collect device identifiers, page visits and interaction data using cookies or similar technologies. Connected Google mailbox and calendar content is not provided to these advertising tools.

You can manage or delete cookies through your browser and manage advertising preferences through Google and LinkedIn. Blocking storage may affect sign-in or other functionality. Contact us with questions about analytics or to exercise applicable privacy rights.

7. When we share information

Workspace information is available to members according to their roles and access settings. Information from connected sources may become part of shared account records. Private drafts and personal connections have additional access restrictions. Authorised Fullspan administrators may access workspace information to operate and support the service.

We share information with service providers as described above, with recipients or services you instruct us to use, and where necessary to comply with law, protect rights or investigate abuse. If our business is acquired or reorganised, information may transfer as part of that transaction, subject to applicable safeguards and notice requirements.

8. Retention, security and international processing

We retain information for as long as needed to provide the service and for legitimate operational, security, accounting and legal purposes. The period depends on the information, your workspace’s use, deletion requests and any legal requirements. Disconnecting an integration or cancelling billing does not by itself delete a workspace. Contact us to request account or workspace deletion. Some records may need to remain for legal obligations, resolving disputes or backup recovery cycles.

We use access controls, workspace isolation and protected connections to help secure information. No system is completely secure. Tell us promptly if you believe your account or information has been compromised.

Our providers may process information in countries other than yours. Where applicable law requires safeguards for international transfers, those transfers must be covered by an appropriate mechanism, such as an adequacy decision or approved contractual safeguards. Contact us for information about the arrangements relevant to your data.

9. Your choices and rights

Depending on your location and the circumstances, you may have rights to access, correct, delete or receive a portable copy of your personal information, restrict or object to processing, and withdraw consent. You may object to direct marketing at any time. We may need to verify your identity and the scope of your request before responding.

Send requests to contact@fullspanhq.com. Where a business customer controls the relevant information, we will help direct your request to that customer. You can also complain to your local data protection authority; in the UK this is the Information Commissioner’s Office.

10. Children and policy changes

Fullspan is a business service intended for adults, and is not directed at children under 18. Contact us if you believe a child has provided personal information so we can investigate and take appropriate action.

We may update this policy as the service or our practices change. We will update the date on this page and notify you of material changes through the service or by email where appropriate.