Privacy Policy

Effective 2026-10-14 · Last updated 2026-09-13

Version 2026-09. This policy explains what we collect, why, who we share it with, how long we keep it, and the rights you have.

1. Who We Are and Our Role

Fratelli Platform Inc. ("Fratelli," "we," "us"), PO Box 2013, Rancho Mirage, CA 92270, USA, operates the Fratelli business-management platform. For your own account information we act as a data controller. For the business records you store in the Service about your customers, suppliers, and employees ("Customer Data"), you are the controller and we are your processor, acting on your instructions under our Data Processing Addendum. If you are a customer or employee of a business that uses Fratelli, please direct privacy requests to that business first; we will help them respond.

2. Information We Collect

A. Information you provide

• Account & identity: name, email, phone, business name, address, industry, country, logo, and login credentials (passwords are stored only as salted cryptographic hashes; passkeys use public-key cryptography and we never hold the private key).
• Business records (Customer Data): clients, suppliers, products, inventory, invoices, estimates, orders, expenses, receipts, projects, appointments, payroll and HR records, documents you upload, and messages you send through the Service.
• Support communications: tickets, chat, feedback, and survey responses.

B. Information from integrations you connect

• Stripe (payments): your connected-account status, verification requirements, payout schedule, masked bank/card details (last four digits, brand, bank name), balances, transactions, refunds, disputes, and payouts. Stripe collects identity documents and full financial details directly; we never receive them. See Stripe's Privacy Policy.
• Plaid (bank connectivity): account balances, transactions, account identifiers, and institution name — never your online-banking password. See Plaid's Privacy Policy.
• Google (Gmail sending, sign-in): your Google account email and basic profile, OAuth tokens needed to keep the connection, and — only when you deliberately send email through Fratelli — the outgoing message, recipients, and approved attachments. We do not read or scan your inbox. Our use of Google user data adheres to the Google API Services User Data Policy, including Limited Use.
• Apple sign-in: a stable identifier and, if you allow it, your name and (possibly relayed) email.

C. Information collected automatically

• Security & device data: IP address (stored hashed for security events), approximate location derived from IP, browser and device type, device identifiers we generate, login method, sign-in times, MFA status, and security events (new-device logins, failed attempts, password resets, session revocations).
• Presence & activity data: while you are signed in, the Service periodically records that your account is in use — the time, the area of the product you are viewing (for example "Invoices" or "Planner"), the browser/device, and a city-level location derived from your IP address (the IP itself is hashed, never stored in clear). We keep a list of up to 20 distinct devices and 20 locations per user, monthly counts of which areas were used, and the last-active time of each team member. This tells us whether an account is active, which features matter to you, and helps us spot shared credentials or account takeover. It does not record what you type, which records you open, or the contents of your data.
• Usage & metering data: which features you use and how often, counts of AI requests and tokens, emails sent, automation runs, documents generated, storage consumed, and database operations attributable to your account. We use this to enforce plan limits, detect abuse, calculate our costs, and improve the Service — it does not include the contents of your documents.
• Diagnostics: error logs, performance data, and crash reports.
• Cookies and similar technologies: see our Cookie Policy.

D. Information from other sources

Fraud-prevention signals from Stripe (such as dispute outcomes and risk indicators), and publicly available business information used to verify accounts.

3. How We Use Information

We do not sell your personal information and we do not use Customer Data to train AI models. Our AI providers are contractually prohibited from training on your data.

4. Automated Decision-Making

We use automated risk scoring (for example, a login risk score based on device and location, and an account health score based on payment disputes, security events, and usage patterns) to protect accounts and the platform. These scores may trigger additional identity verification, temporary limits, or human review. They do not by themselves permanently terminate an account; a person reviews any suspension. You may contest an automated decision by contacting privacy@fratelli-app.com.

5. Platform Staff Access to Your Account

Authorized Fratelli Platform Inc. personnel may access your account and Customer Data only for the following purposes: (a) responding to a support request you or your team initiated; (b) investigating suspected fraud, abuse, security incidents, or violations of these Terms; (c) diagnosing and resolving technical problems; (d) complying with law, legal process, or a Stripe, card-network, or banking-partner requirement; and (e) protecting the rights, property, or safety of Fratelli Platform Inc., our customers, or the public.

Support access is governed by strict controls:

• Read-only. Support "view as customer" sessions cannot create, modify, delete, send, or charge anything. Changes to your account are only made by you, or by Fratelli Platform Inc. through separately logged administrative actions (for example, applying a refund you requested or suspending an account for abuse).
• Time-limited and re-authenticated. Each session expires automatically after 15 minutes and requires the staff member to re-verify their identity immediately beforehand.
• Documented reason. A written reason is required for every session and every administrative action.
• Fully logged. The staff member's identity, timestamp, reason, and actions are recorded in a tamper-evident audit trail retained for at least 24 months.
• Visible to you. A record of each support access appears in your account's Security & Activity timeline.
• No card or bank secrets. Staff never see full payment card numbers, bank account numbers, passwords, or identity documents. Those are held by Stripe, Plaid, or Google and are only ever displayed in masked form (for example, the last four digits).

Support access records are retained for at least 24 months and are available to you on request.

Account health dashboard. Our platform administrators can see, for each business account, an operational summary built from the security, presence, and metering data described in Section 2C: last-active time, active days, most-used areas of the product, the list of devices and approximate locations, record counts (for example how many invoices or clients exist — not their contents), plan and billing status, and the automated health score in Section 4. This is used to provide support, detect abuse and account compromise, and understand product adoption. Every time an administrator opens this view it is written to an audit log that you may request.

6. How We Share Information

We share personal information only as follows:

• Service providers (sub-processors) that process data on our behalf under written contracts: Google Cloud / Firebase (hosting, database, storage, authentication, analytics), Stripe (payments and billing), Plaid (bank connectivity), Google (Gemini AI models; Gmail API; Maps), our transactional email provider, and error-monitoring tools. A current list is maintained on our Sub-processor List page.
• Your integrations and recipients — when you send an invoice, email, or payment link, the recipient receives the information you chose to send.
• Legal and safety — to comply with law, subpoenas, or court orders; to enforce our Terms; to protect the rights, property, or safety of Fratelli, our users, or the public; or to respond to a Stripe, card-network, or banking-partner requirement.
• Business transfers — in a merger, acquisition, financing, or sale of assets, with notice to you and continued protection under this policy.
• With your direction or consent.

7. International Transfers

We are based in the United States and store data in Google Cloud regions in the United States. If you are outside the U.S., your information will be transferred to and processed in the U.S. For transfers from the EEA, UK, or Switzerland we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum) with our sub-processors, and on our Data Processing Addendum with you.

8. Data Retention

9. Security

We protect information with TLS 1.2+ in transit, AES-256 encryption at rest, per-tenant database security rules, multi-factor authentication and passkeys, device verification, role-based access with least privilege for staff, audit logging of all administrative access, rate limiting, automated anomaly detection, and continuous backups. Details are in our Security Policy. No system is perfectly secure; if we learn of a breach affecting your data we will notify you and any regulators as required by law, without undue delay.

10. Your Rights and Choices

• Access, correct, export, delete. Most of this is self-service in Settings → Data & Privacy. You can also email privacy@fratelli-app.com. We respond within 30 days (45 for California requests if extended).
• Marketing emails. Unsubscribe via the link in any marketing email or the preference center. Transactional and security emails cannot be turned off while you have an account.
• Integrations. Disconnect Stripe, Plaid, or Google at any time in Settings; we then stop receiving new data from them.
• EEA/UK/Swiss residents also have the rights to restrict or object to processing, to data portability, to withdraw consent, and to lodge a complaint with your supervisory authority.
• California residents (CCPA/CPRA): you have the right to know, delete, correct, and to non-discrimination. We do not sell or share personal information for cross-context behavioral advertising, and we do not use or disclose sensitive personal information other than to provide the Service. You may designate an authorized agent. Requests: privacy@fratelli-app.com.
• Other U.S. states (e.g., Virginia, Colorado, Connecticut, Texas, Oregon): you have comparable rights to access, correct, delete, and port your data and to appeal a refusal by replying to our decision email.
• Do Not Track / Global Privacy Control: we honor GPC signals as an opt-out of sale/sharing where applicable (we do not sell data in any case).

11. Children

The Service is for businesses and is not directed to anyone under 18. We do not knowingly collect information from children. If you believe a child has provided us information, contact privacy@fratelli-app.com and we will delete it.

12. Changes to This Policy

We will post updates here with a new "Last Updated" date and, for material changes, notify you by email or in-app at least 30 days before they take effect.

13. Contact

Fratelli Platform Inc. — Privacy Office
PO Box 2013, Rancho Mirage, CA 92270, USA
privacy@fratelli-app.com
Web: https://fratelli-app.com