Privacy Policy

Last Updated: March 25, 2026

The short version

We collect the minimum data needed to run F3C: your email, payment info (processed by Stripe), and usage data to enforce rate limits. We don't sell your data. We use Google Analytics for basic site metrics. You can delete your account at any time.

1. Introduction

This Privacy Policy describes how F3C ("we," "us," or "our") collects, uses, and protects your personal information when you use the F3C service, including our website, applications, and API (collectively, the "Service").

By using the Service, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use the Service.

This policy should be read alongside our Terms of Service, which govern your use of F3C.

2. Information We Collect

2.1 Information You Provide

  • • Account information: Email address, full name, and password when you create an account. If you sign up via Google OAuth, we receive your name and email from Google.
  • • Organization information: Company or organization name if you associate your account with an organization.
  • • Payment information: When you subscribe to a paid plan, payment details (credit card number, billing address) are collected and processed directly by Stripe. We do not store your full card number. We receive and store only your Stripe customer ID and subscription status.
  • • Saved searches: Search parameters you choose to save for later re-use.
  • • Support communications: Any messages or feedback you send us via email.

2.2 Information Collected Automatically

  • • Usage data: We log which API endpoints and search features you use, the number of results returned, and response times. This data is used to enforce rate limits and improve the Service.
  • • IP addresses: Your IP address is recorded in usage logs, API key activity, and audit logs for security and abuse prevention purposes.
  • • Device and browser information: User agent strings are recorded in audit logs for security purposes.
  • • Analytics data: We use Google Analytics to collect aggregated, anonymized usage statistics such as page views, session duration, and general geographic region. See Section 5 for details.

2.3 Information We Do Not Collect

We do not collect or store: your full credit card number (Stripe handles this), your search result data (results are displayed but not logged), or any data from your device beyond what is described above.

3. How We Use Your Information

We use the information we collect for the following purposes:

Provide the Service Authenticate your account, process searches, enforce rate limits, and deliver results.
Process payments Manage your subscription, process charges through Stripe, and handle billing communications.
Enforce limits Track search counts and API usage to enforce the rate limits associated with your subscription tier.
Security Detect and prevent fraud, abuse, and unauthorized access. Maintain audit logs for accountability.
Communications Send transactional emails: welcome messages, payment confirmations, subscription changes, and security alerts. We do not send marketing emails.
Improve the Service Analyze aggregated usage patterns to improve performance, fix bugs, and prioritize new features.

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties.

We share information only in these limited circumstances:

4.1 Service Providers

We use the following third-party services that may process your data on our behalf:

Provider Purpose Data Shared
Stripe Payment processing Email, name, payment details
SendGrid Transactional email delivery Email address, email content
Google Analytics Site usage analytics Anonymized usage data, IP address (anonymized)
Amazon Web Services Cloud hosting infrastructure All data (stored encrypted at rest)

4.2 Legal Requirements

We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.3 Business Transfers

If F3C is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on the Service before your information becomes subject to a different privacy policy.

5. Cookies and Tracking Technologies

5.1 Cookies We Use

Cookie Type Purpose
sessionid Essential Maintains your login session. Expires when you close your browser or after 2 weeks.
csrftoken Essential Protects against cross-site request forgery attacks. Required for form submissions.
_ga, _ga_* Analytics Set by Google Analytics to distinguish users and throttle request rate. Expires after 2 years.

5.2 Google Analytics

We use Google Analytics to understand how visitors use our site in aggregate. Google Analytics collects information such as how often users visit, what pages they view, and what other sites they visited prior. We use this information solely to improve the Service. Google Analytics does not collect your name or other personally identifying information through F3C.

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

5.3 No Marketing Cookies

We do not use advertising, remarketing, or marketing tracking cookies. We do not participate in ad networks or sell data to advertisers.

6. Data Security

We take reasonable measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

  • ✓ All data transmitted between your browser and our servers is encrypted via TLS (HTTPS).
  • ✓ Passwords are hashed using industry-standard algorithms and are never stored in plain text.
  • ✓ API keys are stored as SHA-256 hashes. The raw key is shown once at creation and cannot be retrieved.
  • ✓ Database and infrastructure are hosted on AWS with encryption at rest.
  • ✓ Administrative actions are logged in an immutable audit trail.

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. Specific retention periods:

Account data Retained until you delete your account or request deletion.
Usage logs Retained for 12 months for rate limiting, billing, and security purposes, then deleted.
Audit logs Retained for 3 years for security and compliance purposes.
Payment records Retained as required by tax and financial regulations (typically 7 years).
After deletion When you delete your account, personal data is removed within 30 days. Anonymized aggregate data may be retained indefinitely.

8. Your Rights and Choices

8.1 Access and Update

You can access and update your account information (name, email, password) at any time through your Account Settings.

8.2 Account Deletion

You may request deletion of your account and associated personal data by contacting us at info@fusioncollective.net. We will process your request within 30 days. Some information may be retained as described in Section 7.

8.3 Data Export

You can export your saved searches and account information by contacting us. We will provide your data in a standard machine-readable format.

8.4 Opt Out of Analytics

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on or by using your browser's Do Not Track setting.

8.5 Email Communications

We send only transactional emails (account confirmations, payment receipts, security alerts). These are necessary for the operation of the Service and cannot be opted out of while your account is active. We do not send marketing or promotional emails.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe a child has provided us with personal information, please contact us at info@fusioncollective.net.

10. Third-Party Links

The Service may contain links to third-party websites, including the FCC, USGS, and Stripe. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a new "Last Updated" date and, for material changes, by sending an email to the address associated with your account. Your continued use of the Service after the effective date of changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: info@fusioncollective.net

Mail: 8 The Grn, Ste #24506, Dover, DE 19901