Privacy Policy

Draft — not yet published

This draft contains TODO_ITEM placeholders that must be filled in before publication. A privacy policy is a binding promise, and both the Anthropic and OpenAI directories reject submissions whose policy is incomplete or does not match what the software actually does. Have a lawyer review it.

Who we are

Factotum is a product operated by TODO_ITEM: operator legal name, a sole proprietor doing business as Zyxt, located at TODO_ITEM: mailing address. Throughout this policy, "we" and "us" refer to that operator, and "you" refers to the person or organization using Factotum.

Factotum is a system of record for work performed by AI agents. You connect it to an AI assistant, and the assistant reads and writes tasks and their change history on your behalf.

What we collect

TODO_ITEM: complete inventory of stored data

This section must list every category of data Factotum stores or returns, including task content, account identifiers, authentication tokens, request logs, IP addresses, and the usage counters used to enforce the 1,000-task limit. It must be derived from the actual tool responses rather than from memory. Data returned by the service but not disclosed here is a rejection cause during directory review.

We collect only what is needed to operate the service. We do not request your conversation history with the AI assistant, raw chat transcripts, or contextual data beyond what a specific tool call requires.

How we use it

We use the data we collect to operate the service, enforce usage limits, maintain the change history that makes undo possible, respond to support requests, and secure the service against abuse.

We do not use your data to train machine learning models — ours or anyone else's. We do not sell your data. We do not share it with advertisers.

Where it is stored

Factotum runs on Google Cloud Platform in TODO_ITEM: GCP region. Data is stored in the United States.

Who else receives it

Google Cloud Platform — hosting and data storage.
Stripe — payment processing for paid plans. Stripe handles card details directly; we never see or store your card number.
EMAIL TODO_ITEM — transactional email.
TODO_ITEM: error monitoring, if any — error and performance monitoring. If a monitoring service is added, it must be listed here before it is enabled, because stack traces frequently contain user data.

We may also disclose data where required by law, or to protect the rights, safety, or property of our users or ourselves.

How long we keep it

Change history is retained indefinitely. The history of what changed, when, and which agent made the change is the core of the product; it is not automatically purged.

Deletion is immediate. When you delete a record or close your account, it is removed from our active systems right away.

Backups persist for TODO_ITEM: backup retention window after deletion, after which deleted data is purged from backups as part of the normal backup cycle.

TODO_ITEM: resolve history vs. deletion — if change-history entries contain the prior content of a deleted record, this policy must state whether deletion purges those entries or retains them with the content redacted. The two commitments above cannot both be true without an explicit answer here.

Cookies and tracking

This website sets no cookies and runs no analytics or advertising trackers. We do not track you across sites, and we do not build a profile of you.

Security

All connections use HTTPS. Access to production systems is restricted. No system is perfectly secure, and we cannot guarantee absolute security, but we will notify affected users promptly if we become aware of a breach involving their data.

Where the service is available

Factotum is offered to users in the United States only. It is not directed at, or intended for use by, people outside the United States. TODO_ITEM: geoblocking outside the US

Age

Factotum is intended for adults. You must be 18 or older to use it. We do not knowingly collect data from anyone under 18, and we will delete such data if we learn we have it.

Your choices

You can request access to the data we hold about you, ask us to correct it, or ask us to delete it. You can disconnect Factotum from your AI assistant at any time, which immediately ends its access. To make a request, email us at the address below.

Changes to this policy

If we change this policy in a way that materially affects how we handle your data, we will update the date at the top of this page and notify active users by email.

Contact

Questions, requests, or security reports: matthew@zyxt.com