Privacy

Updated 28 September 2026

Who handles your information

Legal operator: Faseel Private Limited, Pakistan, trading as Faseel. Privacy requests: info@faseel.app. For information your organization supplies about other people, your organization determines its permitted use and we process it to provide the agreed service.

Information processed

Account details, organization information, policies, risk assessments, evidence files and data obtained from integrations you authorize may be processed. These records may include personal or commercially sensitive information supplied by your organization. We also process account and support correspondence, sign-in/session information, security records and subscription references where applicable.

Why we process it

We use information to operate accounts, deliver requested features, support users, investigate abuse, maintain service security and administer subscriptions. Where a legal basis is required, processing may be necessary for a contract, legitimate service/security interests, legal obligations or consent, as appropriate to the activity and jurisdiction.

Hosting, integrations and payments

When you use AI features, relevant prompts, document context or content needed for embeddings may be sent to the external AI service configured for the feature. Check with us before submitting data that requires specific provider, geographic or model-training restrictions. Integrations you authorize may send or receive information under their own terms. For Paddle purchases, Paddle processes payment and transaction information under its own privacy notice. Do not send full card details to Faseel support. We operate from Pakistan. Hosting, payment and integration providers may process information in other countries. Contact us before onboarding for information about the hosting and providers used for your workspace and any required data-processing agreement.

Retention, deletion and requests

Information is retained for service delivery, security, dispute handling and applicable legal obligations. Contact us to request access, correction, export or deletion and to close your account. We verify the requester's authority. Deletion from active systems and expiration from backups are separate processes. Retention depends on the record and service configuration; we do not promise immediate erasure from every backup. Contact us for the retention and deletion arrangements applicable to your workspace before supplying information with specific retention requirements.

Website analytics

Our website loads Google Analytics to help measure visits and usage. It may process browser, device, page-interaction and network information, including IP-related information. Google handles information under its own privacy terms. Browser privacy controls can restrict analytics storage.

Cookies and security

The account service uses authentication/session mechanisms to maintain sign-in and protect requests. Connected payment and identity services have their own notices. No system is risk-free; keep credentials private and avoid uploading information you are not authorized to share. Where applicable, you may complain to your local data protection authority.