Privacy Policy

FracMO (“we”, “us”, “our”) is a product of NetWebMedia, a company incorporated in Chile and based in La Serena. FracMO operates fracmo.ai, its industry subdomains (for example health.fracmo.ai), and the CRM workspace at fracmo.ai/crm/. This policy explains what we collect, why, and what you can do about it.

1. What we collect

• Information you give us: name, email, phone, company, role and any message you send — through the signup flow, the free AI-visibility audit, or email.
• Account and billing data: your plan, subscription status and payment history. Card details are entered directly with Mercado Pago and never reach our servers.
• Workspace data: everything you put into your CRM — contacts, deals, notes, campaigns, automations. See section 2, because this is handled differently from the rest.
• Usage data: pages visited, time on site, device type, referring URL, IP address (anonymised).
• Analytics: Google Analytics 4 (property G-JG6YRWZ710) with IP anonymisation on. It is not loaded at all until you accept analytics cookies. No cross-site tracking.

2. Your workspace data

When you import contacts or run campaigns, you are handing us personal data about other people. That data is yours, not ours. In data-protection terms you are the controller and we act as your processor.

• It is isolated. Every workspace is scoped to its own organisation. No customer can read another customer’s records.
• We use it only to run the service. Storing it, showing it back to you, sending the messages you tell us to send, and running the automations you build.
• We do not market to your contacts. Your contact list is not our contact list, and we never add it to ours.
• You can take it with you. Export at any time from the workspace, or ask us and we will produce it.
• You are responsible for having the right to hold it. You confirm that you have a lawful basis for the personal data you upload, and that your own privacy notice covers it. Our acceptable use terms cover this too.

3. How we use it

• Provide the service you subscribed to, and keep your workspace running.
• Take payment, and tell you when something about your subscription changes.
• Answer you when you get in touch, and provide support.
• Understand how the product is used so we can improve it.
• Send transactional email (receipts, security and service notices). These are part of the service and are not marketing.
• Send marketing email only if you opted in, with an unsubscribe link in every message.

4. What we never do

• Sell your personal data, or your contacts’ personal data. Ever.
• Use your workspace data to train AI models — ours or anyone else’s.
• Share one customer’s data with another customer.
• Track you across other websites.

5. Who we share with

Only the providers needed to run the service, each under its own privacy policy and data-processing terms:

• Mercado Pago — subscription payments and card handling.
• Resend and Amazon SES — delivery of transactional and campaign email.
• Google Analytics — anonymised, consent-gated usage measurement.
• Anthropic — the AI features described in section 10.
• InMotion Hosting — the servers the application and databases run on.

We may also disclose data where we are legally required to, or to protect our rights or someone’s safety. If a legal request covers your workspace data we will tell you unless we are prohibited from doing so.

6. Data retention

• Workspace data: kept while your subscription is active. After termination it stays available for 30 days so you can export it, then is deleted. Ask us sooner and we will delete it sooner.
• Account and billing records: retained for 7 years for Chilean tax and accounting obligations.
• Enquiries and audit submissions: 3 years, or sooner on request.
• Analytics: 14 months (GA4 default).
• Email suppression list: retained indefinitely — an unsubscribe is only honoured if we remember it.

7. Your rights

• Access a copy of the data we hold about you.
• Correct anything inaccurate.
• Delete your data — we keep only what the law requires us to keep.
• Export your workspace data in a portable format.
• Opt out of marketing at any time.
• Object to or restrict processing, where that right applies to you.
• Complain to your local data-protection authority.

Email carlos@fracmo.ai and we will respond within 30 days. We may need to verify who you are first. If you are one of our customer’s contacts rather than our customer, contact that business directly — they control the record; we will help them action it.

8. Security

• HTTPS/TLS everywhere, with HSTS preloaded.
• Passwords stored hashed, never in plain text.
• Per-organisation isolation enforced in the application on every read and write.
• An enforced Content-Security-Policy, same-origin CSRF checks and strict session cookies.
• No card data on our servers — Mercado Pago handles it end to end.
• Daily database backups.

No system is perfectly secure, and we do not claim otherwise. Report a vulnerability to carlos@fracmo.ai — see security.txt.

9. CCPA / CPRA — California privacy rights

California residents have specific rights under the California Consumer Privacy Act as amended by the CPRA.

Categories we collect:

• Identifiers: name, email, phone, company, anonymised IP.
• Commercial information: subscription plan and payment history.
• Internet activity: pages visited, time on site, referrer, device type.

We do not sell or share personal information as those terms are defined by the CPRA. We run no advertising pixels on fracmo.ai and do no cross-context behavioural advertising. Analytics are consent-gated and anonymised.

Your rights: to know, to delete, to correct, to opt out of sale or sharing, and to non-discrimination for exercising any of them. Email carlos@fracmo.ai with “CCPA Request” in the subject. We respond within 45 days, extendable once by a further 45 for complex requests.

10. AI processing

FracMO is an AI product and uses Anthropic’s Claude API for features such as lead scoring, content drafting and the AI-visibility audit.

• Your data is not used to train models. Our agreement with our AI vendor restricts processing to delivering the feature you invoked.
• AI output can be wrong. Anything a model drafts or scores is a suggestion. Review it before you publish it, send it, or act on it.
• Automated scoring is not an automated decision about a person’s rights. Lead scores rank sales priority. They do not determine credit, employment or anything with a legal effect.

11. Children’s privacy

FracMO is a business tool intended for people aged 18 or over. We do not knowingly collect personal information from children under 13. If you believe we have, email carlos@fracmo.ai and we will delete it promptly.

12. Breach notification

If a security incident affects personal data we hold, we will notify affected customers without undue delay and within the timeframe applicable law requires, describing what happened, what data was involved, and what you can do. Where you are the controller of affected workspace data, we will notify you promptly enough for you to meet your own notification deadlines. For US residents we follow applicable state breach-notification statutes, including California Civil Code §1798.82.

13. Chile, Brazil & the EU

Chile. We operate under Ley 19.628 on the protection of private life and are aligning with Ley 21.719, which takes effect in 2026. Chilean residents may exercise rights of access, rectification, cancellation and opposition by emailing carlos@fracmo.ai.

Brazil. Personal data of Brazilian residents is processed in line with the LGPD (Lei 13.709/2018).

EU/UK. Where the GDPR or UK GDPR applies, our lawful bases are: performance of a contract (running your subscription), legitimate interests (securing and improving the product), consent (analytics and marketing), and legal obligation (tax records). Our servers are in the United States; transfers rely on Standard Contractual Clauses with our processors.

14. Cookies & consent

Two categories, and only two:

• Essential — your login session, security and CSRF protection, and your saved language choice. These cannot be switched off without breaking the product.
• Analytics — Google Analytics 4, entirely optional. Google Consent Mode v2 starts denied, and nothing is requested from Google until you press Accept.

Your choice is stored per hostname, so accepting on fracmo.ai does not silently accept on health.fracmo.ai — each asks once, on its own. Reset your choice on this site.

15. Contact

Questions about this policy, or about data we hold: carlos@fracmo.ai. FracMO is a product of NetWebMedia, La Serena, Chile.

16. Changes to this policy

We will update the date at the top, and for material changes we will email active customers at least 14 days before the change takes effect. This policy is published in English and Spanish; the English version is the governing one.