FIGG Canopy: Privacy Policy

Version: v2.1

Effective Date: September 26, 2026 (beta)

RevSparkAI (Micro Hires LLC d/b/a RevSparkAI) offers two products with genuinely different data postures. This policy separates them throughout, because a statement true of one is not true of the other. In short: Deployed runs in your environment and we see almost nothing; On-Demand is hosted by us and we necessarily process what you submit to it.

1. What We Collect

1.1 Account information (both products)

Provided by you when you create an account: your email address, and, if you complete onboarding, your company name, your website, and the list of what you sell. Subscribing to Deployed asks for nothing further beyond your confirmation that you hold a qualifying Claude plan and which Agent Packs you want. We also hold your subscription status, Credit balance, and a record of purchases.

1.2 On-Demand: what you submit, and what we generate

Because On-Demand is a hosted service, we receive and store:

• Customer Inputs: the target account names and domains you research, the seller context you provide about a deal (such as whether it is warm or cold, your goal, ICP notes), and any capability descriptions you enter.
• Generated outputs: the reports and drafted communications On-Demand produces from those inputs, stored so you can retrieve them.
• Usage records: which actions you took and how many Credits they consumed.

Customer Inputs are sent to our artificial intelligence Subprocessor to generate output. See Section 4.

1.3 Deployed: Usage Data only

Deployed sends a license key, a one-way hashed identifier generated for your installation (not a hardware or device ID), and a cumulative count of completed tasks. That is the complete list. It does not send the content of your work, your CRM data, your email content, your Company Brain or Account Brain content, or any information about the people or companies you work with. That data lives and stays in your own environment and your own Connected Tools.

2. Why We Collect It

• Account information: to provision your account and license, bill you, and communicate about your subscription.
• On-Demand Inputs and outputs: to provide the service you asked for, and to let you retrieve past results. Our legal basis is performance of our contract with you.
• Deployed Usage Data: because usage cannot be technically limited in a self-serve download, this confirms an installation is active and lets us understand aggregate product usage. Our legal basis is our legitimate interest in operating a licensed product. It is not used to monitor the content of your work.

3. Legal Basis and Data Categories (GDPR/CCPA)

We treat the license key and installation hash as pseudonymous personal data, not anonymous data, because combined with account information they could in principle be linked to your account.

Categories collected: identifiers (account email, license key, installation hash), commercial information (subscription and Credit status, purchase history), usage data (task counts, Credit consumption), and, for On-Demand only, the content you submit and the outputs generated from it.

We do not sell or share your personal data with third parties for advertising purposes. We disclose it to Subprocessors solely to operate the Services, as listed below.

If you are in a jurisdiction with data subject rights (such as the EU, UK, or California), you may request access to, correction of, or deletion of your data by contacting support@figgcanopy.com.

4. Subprocessors

We use the following third parties to operate the Services. This list is current as of this version's effective date and may change under Section 8.

Customer Inputs submitted to On-Demand are transmitted to Google for processing. If that is not acceptable for particular information, do not submit that information to On-Demand. Deployed does not send Customer Data to any of these Subprocessors, because Deployed runs in your own environment.

5. Retention

• Account information: retained while your account is active and for a reasonable period afterward for accounting and legal purposes.
• On-Demand Inputs and outputs: retained while your account is active, so that you can retrieve past reports. You can ask us to delete them at any time, and we will do so within thirty (30) days of your request. Email support@figgcanopy.com. We do not currently delete this content automatically on a schedule; deletion is on request.
• Deployed Usage Data: retained for the life of your license plus ninety (90) days after cancellation, then deleted. (Approved 2026-08-27.)

6. What We Do Not Access

For Deployed, to be explicit because the product connects to sensitive systems: we do not access, store, or process the content of your CRM, your email, your lead-finder connections (such as Apollo or ZoomInfo), or any data those connections return. Those connections run using credentials you supply, inside your own environment, under your own control.

For On-Demand, this does not apply in the same way. On-Demand only ever holds what you type into it, and we do not connect it to your CRM or email. But what you type into it, we hold. See Section 1.2.

7. Children's Privacy

The Services are intended for business use and are not directed to individuals under 18. We do not knowingly collect data from children.

8. Changes to This Policy

We will update the version number and effective date above and provide notice of material changes consistent with the Terms of Service, including changes to the Subprocessor list.

9. Contact

Micro Hires LLC d/b/a RevSparkAI, 30 N Gould St Ste N, Sheridan, WY 82801. support@figgcanopy.com.

Version History

• v2.1, effective September 26, 2026. Section 1.1 now describes the account information we actually collect, replacing a description of a Deployed signup form that is no longer used. Sections 3, 5 and 9 now give a single support address for all privacy requests and contact. Section 4 no longer lists Cloudflare Turnstile, which we have not used since September 21, 2026, and now lists Cloudflare for DNS and inbound email routing for figgcanopy.com addresses.
• v2, effective September 1, 2026. Beta Privacy Policy. The full text of this version is available on request using the contact details in Section 9.