Privacy Policy

For the account, billing, and usage information of the person who signs up, FenceSitter is the data controller.

For the lead, contact, customer, and conversation records that a company imports or generates inside its account, the company is the controller and FenceSitter is a processor acting on that company's instructions. If you are one of that company's leads or customers and want your information changed or removed, contact the company directly; we will assist them.

Account information. Name, work email, password hash, company name, and role. We create this when you sign up.

Billing information. Plan, billing interval, subscription status, and payment history. Card details are entered directly with Stripe and are never stored on our servers; we retain only Stripe's customer and subscription identifiers and the last four digits and card brand that Stripe returns.

Customer and lead data you provide. The records you import or enter — names, email addresses, phone numbers, mailing addresses, project and quote details, estimated values, statuses, notes, tags, and the history of messages exchanged.

Connected-account data. If you connect a mailbox (Gmail, Outlook) or a CRM (such as HubSpot), we access the messages, threads, and contact records needed to sync activity into your account, using OAuth tokens you grant. You can disconnect at any time.

Usage and device data. Log records such as IP address, browser type, pages viewed, actions taken, timestamps, and error diagnostics. We use a strictly necessary session cookie to keep you signed in.

• Provide, operate, and secure the application.
• Run the features you enable — stale-lead detection, AI categorization and scoring, campaign generation, and email/SMS follow-up.
• Process payments and manage your subscription.
• Send service messages (receipts, security notices, product changes) and, if you opt in, occasional product news.
• Monitor performance, debug problems, prevent abuse and fraud, and enforce our Terms.
• Comply with legal obligations.

We do not sell personal information, and we do not use the customer or lead data in your account to train shared or third-party AI models.

FenceSitter uses large language models to categorize opportunities, estimate reactivation likelihood, and draft follow-up messages. When a feature runs, the relevant company, lead, and conversation context is sent to our AI provider (Anthropic) to generate that specific output. Our provider processes it under a commercial agreement that prohibits training on the data and requires deletion after a short retention period for abuse monitoring. AI output is a suggestion, not fact, and a person can review or edit it before anything is sent.

We share information only as follows:

• Service providers that run infrastructure on our behalf: cloud hosting and managed Postgres, Stripe (payments), Anthropic (AI), Resend or an equivalent (email delivery), and Twilio (SMS). Each receives only what it needs to perform its function.
• Accounts you connect, in the direction you authorize (for example, sending an email through your connected mailbox).
• Legal and safety — when required by law or to protect the rights, safety, or property of FenceSitter, our customers, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

We keep account and customer data for as long as your account is active. If you cancel, data is retained in a restricted state so you can resubscribe, and is deleted within 90 days of a written deletion request or account closure, except where we must keep limited records (such as invoices) to meet legal or accounting requirements. Backups age out on a rolling schedule.

Data is encrypted in transit. Passwords are hashed. OAuth tokens and other secrets are encrypted at rest. Access to production data is limited to staff who need it. Each company's data is isolated at the application and query layer so one company cannot reach another's records. No system is perfectly secure, but we work to protect your information and will notify you of a breach affecting your data as required by law.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. Account holders can do most of this from within the app or by emailing us; leads and customers of a FenceSitter company should contact that company. We do not discriminate against you for exercising these rights. You can unsubscribe from product marketing at any time using the link in those emails.

FenceSitter is operated from the United States and our providers may process data there. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for transfers from other regions.

FenceSitter is a business tool and is not directed to children. We do not knowingly collect personal information from anyone under 16.

We will post any changes here and update the date above. For material changes we will give notice through the app or by email before they take effect.

Questions or requests: privacy@fencesitter.ai.