Privacy Policy

What Data We Collect and Why?

Identity and Access Data

When you create an account, we ask for (Name, Email, Team or Company Name, Profile Picture)

We use this information to (Create and personalize your account, send important updates, communicate with you regarding the service)

We will not use your name or your company name in any marketing materials without your permission.

Payment and Billing Information

If you subscribe to a paid plan, your card details are handled by our payment processor, Stripe, and are never stored by Fareeqy.

We keep only billing and payment records, for support, billing, and fraud detection purposes.

Content You Add to Fareeqy

We store your account content only so you can use the platform, such as (Projects, Task lists, Tasks, Files, Comments, Attachments)

Company deletion is preceded by a final confirmation step where the owner reviews what will be deleted. Once confirmed, the company closes immediately and no member can access it. Deletion begins within seconds and usually completes within minutes. All workspace data and uploaded files are erased from our databases and storage service. Deletion is final: we will not restore a deleted company in any form.

User Interaction Within the Site

We collect general usage data such as (Browser and operating system, Pages you visit within Fareeqy site, Load performance, Traffic sources, A/B testing)

We use this data to improve the interface and user experience.

Voluntary Correspondence

When you contact us (We keep a record of correspondence, We keep emails you send us)

When We Access or Share Your Data

To Operate the Service

We rely on a small number of service providers to operate Fareeqy. These are their purposes and what reaches each one:

• Hosting and storage: running the application and database, and holding the files you upload and our backups.
• Payment processing: your card details never pass through our servers and we do not store them.
• Email delivery: confirmations, notifications and invitations.
• Artificial intelligence: processing Fareeqy Assistant requests and voice input. Nothing reaches them unless you use the Assistant.
• Calendar integration: which only runs if you connect it yourself.
• Technical error tracking: a report is sent when the service fails, so that we can fix it.
• Visit measurement: on the marketing site, the sign-up and sign-in pages, and public share pages. It does not run inside your workspace, and it is never sent a record title, a full share link, or any part of your content.

None of them is granted the right to use your content for their own purposes, and none receives more than the purpose beside it requires. If your organisation needs the providers named individually for audit or compliance, write to privacy@fareeqy.com and we will supply them.

Upon Your Request

If you choose to link Fareeqy with an external service (like Google Calendar), only the data you allow is shared.

Technical Support With Your Consent

No one at Fareeqy looks at your content except for limited purposes with your ongoing permission, for example, if an error occurs that stops an automated process from working and requires manual intervention to fix. These are rare cases, and when they happen, we look for root cause solutions as much as possible to avoid recurrence. We may also access your data if necessary to respond to legal processes.

For Security or Legal Reasons

We may disclose specific data only when (There is a binding legal request, Complying with local and international laws, Protecting the rights of users and the platform, Investigating misuse)

We always try to notify the user before any disclosure unless we are legally prohibited from doing so.

Where Your Data Is Stored

Fareeqy and its database run on servers in Germany, and the files you upload and our database backups are held by a storage provider in the European Union.

The owning company, Fareeqy LLC, is registered in the United States, and several of the providers listed above are American or European companies. Operating the service therefore requires transferring your data across borders.

We hold that transfer to three limits: it covers only what running the service requires, every provider operates under published data protection obligations, and your content is never used to train models or for any purpose of the provider.

If you are in Saudi Arabia, we follow the guidance of the Personal Data Protection Law (PDPL) in how we process your data. For any question or request about your data, write to us directly at privacy@fareeqy.com.

Google Calendar Integration

Fareeqy offers an optional integration with Google Calendar so that events you create in Fareeqy can be reflected in your Google Calendar and joined via Google Meet. This section describes the data we access, how we use it, and how you can disconnect.

What you authorize when you connect

When you choose to connect your Google account, we ask Google for the following permissions (OAuth scopes):

• https://www.googleapis.com/auth/calendar.events.owned , to create, read, update, and delete only the events that Fareeqy itself adds to your calendar. This scope does not give Fareeqy access to events created in any other app or by anyone else.
• https://www.googleapis.com/auth/userinfo.email , to read the email address of the Google account you connected, so we can show you which account is linked.

Fareeqy does not request, and cannot read or modify, any of the following: events created outside Fareeqy, other people's calendars, calendar settings, sharing/ACLs, Gmail, Contacts, Drive, or any other Google service.

What we do with the data

When you create a Fareeqy event with calendar sync enabled, we instruct Google Calendar to:

1. Insert the event on your primary Google Calendar with the title, description, time, and attendees you entered in Fareeqy.
2. Optionally attach a Google Meet conference link to that event.
3. Send Google's standard invitation email to the attendees you listed.
4. Update or delete that same event if you later edit or delete it in Fareeqy.
5. Read the attendee RSVP statuses on the event so we can preserve them when the event is updated.

What we store

On our servers we store, in encrypted form: the OAuth access token, the OAuth refresh token, the email address of the connected Google account, and a token expiry timestamp. For each synced event we also store the Google event ID returned by Google so we can update or delete that event later. We do not store the contents of any event we did not create, and we do not copy your Google Calendar into our database.

What we do not do

We do not sell, rent, or share Google user data with third parties. We do not use Google user data for advertising. We do not use Google user data to train, develop, or improve generalized or general-purpose machine learning or AI models. Google user data is used solely to provide and improve the Google Calendar integration features described above, in compliance with the Google API Services User Data Policy, including the Limited Use requirements.

Does anyone at Fareeqy see your calendar data?

No. No human at Fareeqy reviews the Fareeqy-created events in your calendar except in these rare cases: with your explicit permission to resolve a technical support issue, for security purposes necessary to investigate misuse, or to comply with a binding legal request.

How to disconnect

You can disconnect your Google account from Fareeqy at any time from your Profile → Calendar settings. Disconnecting stops Fareeqy from syncing any future events to your Google Calendar and removes the connection from our records. You can additionally revoke Fareeqy's access from Google directly at myaccount.google.com/permissions.

Deleting your data

When you delete your Fareeqy account, all stored Google OAuth tokens and account references are deleted along with your account. Events that Fareeqy previously created in your Google Calendar remain in your Google Calendar; they are not deleted automatically. You can remove them yourself from Google Calendar.

Other Google Services: Sign-in and reCAPTCHA

Signing in with Google

If you choose to sign up or sign in with your Google account, we ask Google for the email and profile scopes only, which give us your email address, name, profile picture, and Google account identifier. We use them to create your account and sign you in. They give us no access to your calendar or to any other Google service. The calendar integration described above is a separate connection that you turn on yourself.

reCAPTCHA on the sign-in page

After repeated failed sign-in attempts on an account, the sign-in page asks for a Google reCAPTCHA check before the next attempt. When that check runs, the visitor's IP address and the browser data needed for the check are sent to Google, under Google's Privacy Policy.

Fareeqy Assistant and AI Request Processing

Fareeqy Assistant is optional and runs only when you send it a request. When you use it, we send the minimum data needed to fulfil that specific request for processing, such as your prompt and the content needed to answer within your account permissions. We do not send your whole workspace by default.

You are responsible for the request you submit, reviewing the output, and approving proposed changes before they are applied. If you switch on Instant execution, your writes run without a confirmation card, and you remain responsible for them. AI output can contain errors and should not be relied on alone for high-risk decisions.

The technologies or service providers that help process these requests may change over time. Our principles of data minimisation, permission-limited access, and using data to fulfil your specific request remain the same.

Your Rights Regarding Your Data

We grant every user, regardless of country, the same rights: the right to know, access, rectify, erase, object, restrict processing, receive data portability, and stop automated decisions.

Several of these are self-serve inside the application: rectification from your profile page and company settings, data portability by requesting a full copy from company settings, full erasure from company settings, stopping messages from the unsubscribe link at the foot of every email, and disconnecting the Google integration from settings. For anything else, write to privacy@fareeqy.com and we reply within 30 days at the latest.

Data Security

These are our actual measures, not a generic list:

1. All traffic encrypted over enforced HTTPS, with unencrypted connections refused.
2. Sensitive fields encrypted inside the database, such as Google integration access tokens.
3. Rate limiting to blunt password guessing and abusive automated use.
4. Antivirus scanning of uploads: project files are held until their scan completes, except files over 500 MB, which are not scanned. Comment and rich-text attachments and voice notes are scanned right after upload, and any infected file is removed.
5. Continuous database backups with point-in-time recovery across the last 7 days, and we test restores in practice rather than assuming they work.
6. Audit logs for permission changes, access keys and deletions.
7. Internal access limited to the minimum required to run the service.

Full detail of our measures is on the security policies page.

Data Retention Period

We retain data as long as your account is active.

Company deletion is preceded by a final confirmation step where the owner reviews what will be deleted. Once confirmed, the company closes immediately and no member can access it. Deletion begins within seconds and usually completes within minutes. All workspace data and uploaded files are erased from our databases and storage service. Deletion is final: we will not restore a deleted company in any form.

To be precise about backups: once data is erased from live systems, it remains inside our database backups for a maximum of 7 days, then leaves them permanently as the recovery window expires. Those backups are used only to restore service after a failure and cannot be used to reinstate a deleted account. Uploaded files are removed from the storage service immediately, with no prior versions retained.

Our operational logs are kept for shorter periods: what we record about running the service itself is deleted automatically after 90 days. That covers the log of requests made through our APIs and access keys, notification delivery records, the record of actions the assistant carried out, and the interaction data we use to improve the experience. A file you upload when importing from another tool is deleted after 30 days, and a copy of your data that you request for download stays available for 7 days and is then deleted. What we keep for longer is what cannot be given up: billing records, and the log of permission changes inside your company, which is what lets you see who granted which permission and when.

Changes to Privacy Policy

We may update this policy from time to time.

We will notify you of any material change via email or within the application.

Questions and Inquiries

If you have any questions about privacy, you can contact us via:

Email: privacy@fareeqy.com