Privacy Policy

FPGAi ("we", "us") operates FPGAi at fpgaitool.com. This Privacy Policy describes what data we collect, how we use it, and your rights regarding that data. It applies to all users of the FPGAi platform, including the website, web dashboard, and local CLI agent.

Account data: Email address, display name, hashed password (email accounts only), authentication provider (email/Google/GitHub), registration IP address, and account creation timestamp.

Usage data: Queries sent to the AI (text only), model used, token counts, estimated cost, timestamp, and plan tier. In Standard Mode your FPGA source code is never sent to our servers.

Hybrid mode code context: When you enable Hybrid Mode, your design files are transmitted for the duration of a single request. This content is held in RAM only and is discarded immediately after the response is generated. It is never written to disk or stored in any database.

Agent telemetry: CLI version, OS platform, public IP address, and heartbeat timestamps — used to show active agents in your dashboard and to diagnose connectivity issues.

Feedback: Optional thumbs-up/thumbs-down ratings and free-text comments you submit on AI responses.

Billing data: Managed entirely by Lemon Squeezy, our merchant of record. We store only the Lemon Squeezy customer and subscription IDs along with the country code Lemon Squeezy returns for tax purposes; we never see or store your full card number.

• Providing and improving the Service (query processing, model routing, RAG retrieval)
• Billing and subscription management via Lemon Squeezy (our merchant of record)
• Security monitoring, fraud prevention, and abuse detection
• Aggregate, anonymised analytics to improve retrieval quality and model selection
• Sending transactional emails (account verification, password reset, billing notices)

We do not sell your personal data to third parties. We do not use your data to train AI models without explicit consent.

Query logs and usage data are retained for 90 days by default (configurable by admin). Account data is retained for the lifetime of your account plus 30 days after deletion. Hybrid mode code context is never persisted — it exists only in RAM during request processing.

• Lemon Squeezy — merchant of record. Handles checkout, payment processing, tax collection, invoicing, and customer portal. Subject to Lemon Squeezy's Privacy Policy.
• Google / GitHub OAuth — if you choose social sign-in. We receive only email, name, and OAuth ID from these providers.
• LLM providers (Anthropic, DeepSeek) — your query text is sent to the selected provider to generate a response. Queries are subject to the provider's data-handling terms.
• AWS — our hosting infrastructure. Data is stored in the EU (Frankfurt) region.

If you are located in the EU or Turkey, you have the following rights:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate data via your account settings or by contacting us
• Erasure — request deletion of your account and associated data
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interests

To exercise these rights, email privacy@fpgaitool.com. We will respond within 30 days.

We use industry-standard measures: TLS in transit, bcrypt-hashed passwords, encrypted storage for sensitive tokens, network isolation for databases, and regular security audits. Despite these measures, no system is completely secure. Please use a strong, unique password.

The Service is not directed to children under 16. We do not knowingly collect data from children. If you believe we have inadvertently collected such data, please contact us immediately.

We may update this Policy periodically. Material changes will be communicated by email or via a notice on the website at least 14 days before they take effect.

Privacy questions or requests: privacy@fpgaitool.com

FPGAi, Istanbul, Turkey