Frevana Privacy Policy
Effective date: Oct 6, 2026
Last updated: Oct 6, 2026
1. Who We Are and What This Policy Covers
Frevana is operated by Finpeak, Inc., doing business as Frevana (“Frevana,” “we,” “us,” or “our”).
This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit our websites, create an account, communicate with us, or use our applications, AI agents, automation tools, content-generation features, integrations, and related services that link to this policy (collectively, the “Services”).
“Personal information” means information that identifies, relates to, or can reasonably be linked to an individual, as defined by applicable law.
Certain features, including Frevana Companion and its local desktop workflows, have additional privacy notices. Those notices explain feature-specific practices and apply alongside this policy.
Business customer information. When we process personal information on behalf of a business customer and under its instructions, we act as a processor or service provider, as applicable. The customer’s privacy notice and our agreement with that customer govern that processing. Questions about information controlled by a business customer should generally be directed to that customer, and we will assist as required.
This policy describes our privacy practices. It does not replace any consent that applicable law requires us to obtain.
2. Information We Collect and Process
The information we process depends on the Services you use, your settings, the permissions you grant, and whether a feature operates locally or through hosted infrastructure.
Account and subscription information
We collect information you provide when registering, signing in, subscribing, or managing your account. This may include your name, email address, organization, authentication information, account preferences, subscription details, billing information, transaction history, and payment status.
When you sign in through another service, we receive the account information that service makes available through the permissions you authorize.
Frevana does not receive or store your full payment-card details.
Content, instructions, and outputs
When you use hosted features, we process the material you submit and the results generated through those features. Depending on the workflow, this may include prompts, messages, documents, images, brand materials, website addresses, campaign information, agent instructions, reports, and generated content.
Content may contain personal information about you or other people. Please provide only information needed for your task and ensure that you have the necessary authority to submit it.
Information handled exclusively through local browser workflows is addressed separately in Section 3.
Connected accounts and third-party tools
When you connect an account, enable an integration, or authorize an agent to interact with another service, we process the information made available through that connection.
Depending on the integration and permissions, this may include account identifiers, business records, product information, campaign data, documents, messages, and authorization credentials or tokens.
Connection credentials and information retrieved through connected integrations are stored locally on your device, except when that information is uploaded to Frevana’s infrastructure at your request. Any information uploaded to Frevana’s infrastructure is stored and handled in accordance with this Privacy Policy.
Usage and technical information
For our websites and hosted Services, we collect technical and usage information such as IP addresses, browser and device information, application versions, access times, feature interactions, diagnostic records, and error logs.
Collection through local applications or browser extensions is limited as described in the applicable feature-specific notice.
Communications and feedback
We collect information you provide when contacting support, requesting a demonstration, submitting feedback, completing a survey, or otherwise communicating with us.
Information from other sources
We may receive information from your organization, authorized collaborators, connected services, and sources accessed as part of a research, audit, or other workflow you request. Depending on the task, this may include information available on public websites.
Where information is necessary to create an account, process a purchase, or perform a requested task, declining to provide it may prevent us from providing that functionality.
3. Local Desktop and Browser Workflows
For the local browser workflows described in the Frevana Companion Privacy Policy, the extension exchanges task information with Frevana Desktop on your device rather than routing your conversations through Frevana’s servers. Prompts, captured responses, page content, and AI-provider session cookies remain off our servers in those workflows. Limited account, subscription, and error-reporting information is handled as described in that separate notice. [1]
Local processing does not mean that no third party receives information. When you instruct a workflow to submit a prompt to an AI provider or publish content to another platform, the destination service receives the information needed to perform that action through your existing session. That service’s privacy practices and your account settings also apply.
Exported files are saved to the destination you choose. Local data, exported files, and information submitted directly to third-party services are separate from information stored in your Frevana account. Deleting one does not necessarily delete the others.
Other applications or assistants you connect to a local workflow may have their own data-handling practices. Review their permissions and privacy notices before granting access.
4. How We Use Personal Information
We use personal information for the following purposes:
Providing the Services. Creating and administering accounts, authenticating users, managing subscriptions, processing transactions, responding to instructions, generating outputs, and performing authorized workflows.
Supporting and maintaining the Services. Responding to questions, investigating errors, troubleshooting integrations, measuring performance, and improving usability and reliability. Any use of content for AI-model training is addressed separately in Section 5.
Communicating with you. Sending account notices, billing information, security alerts, product updates, and support responses. We also send marketing communications where permitted, subject to your choices.
Protecting the Services and meeting legal obligations. Detecting fraud and misuse, protecting accounts and systems, enforcing our agreements, maintaining required records, responding to lawful requests, and establishing or defending legal claims.
Where we use information for a materially different purpose, we will provide additional notice and obtain consent when required by law.
5. AI Processing, Model Training, and Human Access
Processing information to perform your task
AI-enabled features process your instructions and relevant context to generate responses, analyze information, or perform requested actions. Hosted features may send relevant information to AI-service providers that support the feature.
Using information to produce an answer or complete a task is different from using it to train a model for future use.
We use AI service providers that, by default, are configured or contractually required to provide zero data retention and not to use information submitted through Frevana to train their models.
An exception may apply to video-generation models (Seedance models, Kling models, Minimax models) whose providers require the use of submitted information for model training or improvement. When you choose to use one of these models, information submitted to that model may be processed in accordance with the provider’s applicable data-use practices.
Where reasonably practicable, Frevana will identify or provide notice of any AI model that is subject to different retention or model-training practices before your information is submitted to that model.
We select and configure AI providers with the goal of minimizing retention and secondary use of information. Provider-specific practices may vary, and additional information about applicable providers may be made available through our Services or upon request.
Model training and improvement
For eligible content submitted to our hosted Services, we may use de-identified information to train or improve AI models where permitted by applicable law and our agreements. You may opt out of future training use by contacting [email protected]
This permission does not extend to information that remains exclusively on your device, information subject to contractual restrictions that prohibit training, or information subject to third-party platform restrictions that prohibit that use.
Opting out of model training does not prevent processing necessary to provide the features you request.
De-identified information
We treat information as personal information whenever it can reasonably be linked to an individual. Removing a name or other direct identifier does not, by itself, establish that information is anonymous.
Where we maintain information as legally de-identified, we apply measures intended to prevent identification and do not attempt to re-identify individuals except where permitted by law.
Access by personnel
Access to personal information by our personnel and service providers is limited to authorized purposes, such as providing support, investigating security incidents, and maintaining the Services. Any additional restrictions applicable to connected-service information continue to apply.
6. How We Disclose Personal Information
We disclose personal information in the following circumstances.
Providers working on our behalf
We use providers for functions such as hosting, storage, payment processing, authentication, AI processing, communications, customer support, and security.
Providers processing personal information on our behalf are subject to contractual restrictions appropriate to their services and our legal obligations.
Services you choose to connect or use
When you authorize an integration, send content to another platform, or direct an agent to take an external action, information is disclosed as needed to carry out that instruction.
Third parties you use through your own accounts may process information under their own terms and privacy policies. Our obligations concerning information we process remain applicable.
Your organization and collaborators
Where organizational accounts or collaboration features are available, administrators and authorized users may access information according to their roles, permissions, and your organization’s settings.
Content you publish or share
Content you choose to publish, or instruct an agent to publish, becomes accessible to the audience associated with the destination and its settings. Public content may be copied, indexed, or retained by others.
Legal, security, and business circumstances
We may disclose information when reasonably necessary to comply with law or legal process; protect rights, safety, or security; investigate misuse; or establish or defend legal claims.
Information may also be disclosed in connection with a proposed or completed merger, acquisition, financing, reorganization, or transfer of business assets, subject to applicable safeguards and any additional notice or consent requirements.
Sale and advertising-related sharing
We do not sell your personal information.
We may use customer information to communicate with you about Frevana features, products, services, updates, and promotions that we believe may be relevant to you. This use is limited to marketing and promoting Frevana and does not mean that we sell your personal information to third parties.
You may opt out of promotional communications at any time by using the unsubscribe link included in our marketing emails or by contacting us. You may continue to receive non-promotional communications relating to your account, transactions, security, or use of the Services.
We do not share personal information with third parties for their own cross-context behavioral advertising or targeted advertising purposes, unless we provide you with additional notice and any opt-out rights required by applicable law.
7. Legal Bases for Processing
Where European Economic Area or United Kingdom data-protection law applies, we process personal information on the following bases, as appropriate to the activity:
Contractual necessity: To provide Services you request under our agreement with you, including account administration and paid functionality.
Legitimate interests: To maintain and secure the Services, respond to business inquiries, support customer relationships, and improve service performance, provided those interests are not overridden by your rights.
Consent: For processing that requires your permission, including certain tracking technologies, communications, or optional uses of information.
Legal obligations: To maintain legally required records, respond to lawful requests, and meet other applicable requirements.
Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
8. Cookies and Similar Technologies
Our websites and hosted Services use cookies and similar technologies to support functions such as authentication, security, preference storage, and usage measurement.
Where applicable law requires consent for a technology or purpose, we obtain that consent before using it. You can manage cookies through your browser settings. Disabling some technologies may affect functionality.
Where legally required, we recognize applicable browser-based opt-out preference signals, including Global Privacy Control, for processing covered by those signals. California distinguishes advertising-related “sharing” from other disclosures and recognizes qualifying opt-out signals.
Website tracking practices should not be understood as applying to local browser-extension workflows where the extension-specific notice states otherwise.
9. Data Retention and Deletion
We retain personal information only for as long as reasonably necessary for the purposes described in this policy, taking into account the type of information, the Services used, account settings, contractual requirements, security needs, and applicable legal obligations.
Account and subscription records are retained as needed to manage your relationship with us and satisfy relevant recordkeeping requirements. Hosted content is retained according to the applicable feature settings and customer agreement. Diagnostic and security records are retained according to their operational purpose and risk.
When information is no longer needed, we delete it or render it anonymous, subject to lawful exceptions. Information retained for a legal obligation or dispute is restricted to that purpose.
Disconnecting an integration stops the access associated with that connection but does not necessarily delete previously retrieved information. Locally stored records, exports, and copies held by third-party services may require separate deletion.
10. Information Security
We maintain technical and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and loss.
Access is limited according to authorized responsibilities and operational needs. The safeguards applicable to a particular feature depend on its design and processing environment.
No method of transmission or storage can eliminate all security risk. Contact us promptly if you believe your account or information has been compromised.
11. International Data Transfers
11. International Data Transfers
Frevana primarily processes and stores personal information in the United States. However, some of our service providers, AI providers, and business partners may process personal information in other countries or regions in connection with providing the Services.
If you access or use the Services from outside the United States, or if information is processed by a provider located in another jurisdiction, your personal information may be transferred to and processed in countries other than your own. Those countries may have data protection laws that differ from the laws in your country or region.
Where applicable law requires safeguards for international transfers of personal information, we will use appropriate legal mechanisms and protections as required by applicable law.
12. Your Rights and Choices
Privacy rights
Depending on your location and applicable law, you may have rights to access your personal information, obtain a copy, correct inaccuracies, request deletion, restrict certain processing, receive information in a portable format, or withdraw consent.
Right to object: Where applicable, you may object to processing based on legitimate interests and to the use of your personal information for direct marketing.
You may also have rights concerning significant decisions based solely on automated processing, including certain profiling activities.
These rights are subject to applicable conditions and exceptions. You may complain to the relevant data-protection authority, including the authority where you live or work, where applicable.
Additional U.S. state rights
Residents of certain U.S. states may have rights to opt out of the sale of personal information, targeted advertising, or specified profiling; limit certain uses of sensitive personal information; or appeal a decision concerning a privacy request.
Where applicable, an authorized agent may submit a request on your behalf. We do not unlawfully discriminate against you for exercising your privacy rights.
Making a request
Contact [email protected] to submit a privacy request. We may request information reasonably necessary to verify an access, correction, or deletion request and protect your information. We do not require verification for an opt-out request where applicable law prohibits doing so.
We respond within applicable legal deadlines. Where we cannot fulfill a request, we explain the reason and any available appeal or complaint process.
For information controlled by a business customer, we may direct your request to that customer and assist it as required.
Marketing and permissions
You can unsubscribe from marketing emails using the instructions in those messages. You may still receive essential account, billing, security, and service communications.
You can revoke integration permissions through the relevant service or available Frevana controls. Revocation may disable features that depend on those permissions.
13. Children’s Privacy
The Services are intended for individuals aged 18 and older and are not directed to children.
If you believe a person under 18 has created an account or provided personal information in violation of this requirement, contact us so we can investigate and take appropriate action.
14. Changes to This Policy
We may update this Privacy Policy to reflect changes in our Services, practices, or legal obligations. The revised policy will show a new “Last updated” date.
For material changes, we provide appropriate notice, such as an email or an in-product announcement, as required by law. Where a change requires your consent, we obtain that consent before applying it to the relevant processing.
An update to this policy does not, by itself, constitute your consent to processing that requires separate permission.
15. Contact Us
For privacy questions, concerns, or requests, contact:
Finpeak, Inc., doing business as Frevana
Email: [email protected]
Mailing address: 101 Jefferson Dr, Menlo Park, CA 94025