Your privacy
is our foundation

These disclosures supplement our Terms of Service and explain how FunctionFly™ collects, uses, and protects your personal information.

Data controller

FunctionFly™ LLC (d/b/a FunctionFly™), a Wyoming limited liability company with principal operations in Fort Worth, Texas, United States.

Sensitive data

Do not submit PCI data, PHI, or sensitive government-issued identifiers through the Service unless we have explicitly agreed to support that data in writing.

Information we collect

Account & usage data

• Account and profile information (email, name, company)
• Billing and transaction metadata
• Function and execution data
• Agent and API usage
• Device, browser, and network information

Vault & AI data

• Vault data: Encrypted ciphertext only. We never see your passphrase.
• AI interactions: Prompts, messages, and context sent through AI features.
• Support communications: Messages and attachments you send to us.

Legal bases for processing (EEA/UK)

• Contract: To provide the services you request.
• Legitimate interests: To secure and improve the Service.
• Legal obligations: To comply with applicable laws.
• Consent: Where required, withdrawable at any time.

Data retention

• Account data: Active account + 3 years after deletion
• Usage & analytics: Up to 2 years
• Execution logs: Varies by type; up to 7 years for financial
• Support records: 3 years
• Marketing data: 1 year after last interaction
• Longer retention: When required by law or legal proceedings

Your rights

GDPR rights (EU users)

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure (“right to be forgotten”)
• Right to restrict processing
• Right to data portability
• Right to object to processing

CCPA rights (California users)

• Right to know what personal information is collected
• Right to know if personal information is sold or shared
• Right to opt-out of the sale of personal information
• Right to delete personal information
• Right to non-discrimination for exercising CCPA rights

Exercising your rights: contact us at privacy@functionfly.com. We typically respond within 30 to 45 days.

Security measures

Encryption

• Data in transit: TLS 1.3
• Data at rest: AES-256
• Database encryption: Transparent encryption

Access controls

• Role-based access control (RBAC)
• Multi-factor authentication (MFA)
• Regular access reviews
• Principle of least privilege

Zero-knowledge vault

Secrets you store in the FunctionFly™ Vault are encrypted client-side. We process ciphertext and metadata needed to operate the feature; we do not receive your vault passphrase and cannot decrypt your secrets by design.

Cookies

• Necessary: Always active. Session management, authentication, security. Session / 1 year.
• Analytics: Opt-in. Usage analytics and performance monitoring. Up to 2 years.
• Marketing: Opt-in. Targeted advertising and retargeting. Up to 1 year.
• Functionality: Opt-in. Language preferences and UI customization. Up to 1 year.

Last updated: July 7, 2026