Privacy Policy

1. Scope and who we are

Farisly is an AI-assisted communication tool for freelancers using Fiverr and Upwork. In this policy, “Farisly,” “we,” “our,” and “us” refer to the operator of the Farisly website, dashboard, API, and Chrome extension.

This policy applies when you visit farisly.com, use an account at app.farisly.com, connect or use the Farisly Chrome extension, request an AI action, or contact support.

Farisly is an independent product and is not affiliated with, endorsed by, or sponsored by Fiverr or Upwork. Your use of those marketplaces remains subject to their own terms and privacy policies.

2. Information we handle

Account and authentication information

When you create an account, we process your email address, email-verification status, account identifier, and authentication status. Password authentication and recovery are provided through Supabase. Farisly does not store your readable password in its own workspace database.

Workspace information

You may save a name, workspace name, business and service descriptions, pricing rules, communication preferences, instructions, quick responses, FAQs, knowledge notes, project notes, brief questions, signatures, and other settings that you choose to add. This information is stored so Farisly can personalize the features you request.

Conversation and draft content

When you deliberately use an AI feature, Farisly may process the visible Fiverr or Upwork conversation, your current draft, your instruction, the marketplace name, and the relevant Farisly workspace settings. This information is used to perform the specific action you selected, such as drafting, rewriting, translating, summarizing, preparing questions or offers, or checking conversation risk.

Farisly does not continuously record your browsing activity and does not persist raw marketplace conversation history or generated response text in the hosted Farisly workspace database. The extension temporarily holds the active context and result in the browser while you review or insert it.

Technical and security information

We process hashed session tokens, session type and expiry time, one-time extension connection codes, account identifiers, generation request identifiers, request status, and request timestamps. Our servers also receive ordinary network information such as an IP address and browser user agent when a request is made. Rate-limit counters are maintained temporarily to protect the service.

Support information

If you email us, we receive the information you include, such as your name, reply address, extension version, marketplace, screenshots, and issue description. The contact form on farisly.com prepares a message in your email application; the public website does not silently submit that form to a Farisly database.

3. Chrome extension access and permissions

The extension is designed to work only on supported Fiverr and Upwork pages, the Farisly account service, and explicit local development addresses. It uses the following Chrome permissions:

• activeTab and supported-site access: to identify the active marketplace conversation and reply editor when you use Farisly.
• storage: to keep extension settings, the Farisly service address, and the extension session token on your device. Extension storage access is restricted to trusted extension contexts where Chrome supports that control.
• clipboardWrite: to copy generated or saved text when you choose a copy or insertion action.
• identity: to complete the secure Chrome sign-in redirect between the extension and your Farisly account.

Farisly does not use these permissions to sell browsing data, build advertising profiles, determine creditworthiness, or monitor unrelated browsing. Marketplace page content is accessed only to provide the user-facing writing and conversation tools described in the extension.

4. How we use information

We use information to:

• create and secure your account, verify your identity, and keep you signed in;
• save and synchronize the workspace settings you choose;
• provide requested drafting, editing, translation, summarization, analysis, and insertion features;
• apply usage limits, prevent abuse, troubleshoot failures, and protect account security;
• respond to support, privacy, and security requests;
• maintain, test, and improve Farisly without using private conversation content for advertising.

We do not sell personal information. We do not transfer personal information to advertising networks or data brokers. We do not use marketplace conversation content for targeted advertising.

5. Service providers and disclosures

Farisly uses carefully scoped service providers to operate the product:

• OpenAI: conversation text, drafts, instructions, relevant workspace settings, and requested output parameters are sent through the OpenAI API only when you request an AI action. Farisly sets store: false. OpenAI states that API inputs and outputs are not used to train its models by default unless the API customer opts in. Standard API abuse-monitoring logs may be retained by OpenAI for up to 30 days unless a different retention control or legal requirement applies. See OpenAI API data controls.
• Supabase: provides hosted account authentication and database storage for account records, workspaces, sessions, credits, and generation request metadata. See the Supabase Privacy Policy.
• Hetzner: provides server infrastructure used to host the Farisly application and API.
• Cloudflare Turnstile: may process technical information during signup, login, or recovery to help prevent automated abuse.

We may also disclose information when reasonably necessary to comply with law, respond to valid legal process, protect users or the service, investigate fraud or abuse, or complete a business transfer subject to appropriate protections.

6. Retention

• Account and workspace information is retained while your account remains active and until it is deleted or no longer needed for the purposes described here.
• Portal sessions expire after seven days. Extension sessions may remain valid for up to one year so the extension can stay connected when the dashboard tab is closed. Signing out or using “Sign out all devices” can revoke sessions earlier.
• Single-use extension connection codes expire after five minutes.
• Completed generation metadata contains an identifier, account identifier, status, and timestamp, not the raw prompt or output. Operational cleanup is designed to remove completed metadata after 30 days.
• Raw marketplace conversation text and AI output are not retained in the hosted Farisly workspace database after the requested response is returned. OpenAI’s separate API retention practices are described above.
• Support emails may be retained as long as reasonably needed to resolve the request, maintain security records, and meet legal obligations.

Deletion from active systems may not immediately remove copies held in security logs or backups, where those copies exist. Such copies are not used for ordinary product activity and are deleted or overwritten under the applicable retention lifecycle.

7. Your choices and rights

You can update most workspace information in the Farisly dashboard, disconnect the extension, sign out, revoke all sessions, remove extension storage by uninstalling the extension, or stop using AI features.

You may request access, correction, export, restriction, objection, or deletion where applicable by emailing support@farisly.com. To protect your account, we may need to verify your identity before completing a request. Deleting an account removes its hosted workspace, sessions, extension codes, credit record, and generation metadata through linked database deletion. Some records may be retained where law or security requirements require it.

Depending on where you live, you may have additional privacy rights and the right to complain to a local data-protection authority. We will not discriminate against you for exercising a privacy right.

8. Security, transfers, and children

Farisly uses HTTPS in production, hashed session tokens, secure and HTTP-only portal cookies, scoped extension sessions, server-side API credentials, access controls, rate limits, and database row-level protections. No security method is perfect, and we cannot guarantee absolute security.

Our providers may process information in countries other than your own. Where required, those transfers are handled under the safeguards offered by the relevant provider and applicable law.

Farisly is intended for people who are legally able to operate a freelance marketplace account and enter into these Terms. It is not directed to children, and we do not knowingly collect personal information from children through the service.

9. Changes and contact

We may update this policy when the product, providers, or legal requirements change. The “Last updated” date will identify the latest version. If a change materially affects how existing account information is handled, we will provide additional notice where appropriate.

For privacy questions or requests, email support@farisly.com or visit the contact page.