Privacy Policy

1. Introduction

Fig ("we," "us," or "our") operates a platform that lets you provision and manage personal AI agents deployed as Telegram bots. Fig is currently offered as an invite-only research preview. This Privacy Policy explains what information we collect, how we use it, and your choices regarding that information.

2. Information We Collect

Account information

When you sign up we collect your name, email address, and authentication credentials through our identity provider (Clerk).

Agent configuration

We store the agent names, instructions, deployment regions, and integration settings you provide when configuring your agents.

Connected services

During the research preview, Google Workspace is the only supported third-party connection. If you connect Google Workspace, we store the OAuth credentials needed to maintain that integration, including in agent machine configuration. We do not store your third-party passwords.

Usage data

Our application and infrastructure providers may generate standard operational logs such as IP addresses, browser type, pages visited, request metadata, and timestamps to operate, secure, and improve the service.

3. How We Use Your Information

• Provision, run, and manage your AI agents
• Authenticate you and secure your account
• Maintain integrations with connected services
• Monitor service health and prevent abuse
• Communicate with you about your account or the service

4. Data Sharing

We do not sell your personal information. We share data only with service providers that help us operate the platform:

• Fly.io — hosts your agent machines
• Clerk — provides authentication
• Neon — hosts our database
• Anthropic — powers agent intelligence via the Claude API

We may also disclose information if required by law or to protect the rights and safety of our users.

5. Data Retention

We retain your account and agent data for as long as your account is active. When you delete an agent, we remove its application record and request deletion of the associated machine and attached persistent volume. Some operational logs, backups, or provider-side records may persist for limited periods according to our service providers' retention policies. If you close your account, we delete your personal data within a reasonable period, except where retention is required by law.

6. Security

We use industry-standard measures to protect your data, including encrypted connections (TLS), provider-managed infrastructure controls, and access-controlled operational systems. No method of transmission or storage is completely secure, but we work to protect your information.

7. Your Rights

You may access, correct, or delete your personal information at any time through your account settings or by contacting us. Depending on your jurisdiction, you may have additional rights under applicable data protection laws.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new effective date.

9. Contact

If you have questions about this Privacy Policy, please reach out to us at nishantshreshth@gmail.com.