Privacy Policy

This draft describes the proposed privacy practices of [full legal entity name], doing business as Fabrication AI ("we," "us," or "our"), for our marketing website and Fabrication OS (the "Services"). Fabrication OS connects manufacturing concepts, sourced answers, and supplier and facility records.

Fabrication OS is in development. References to accounts, hosted conversations, uploads, or paid features apply only if made available to you. The marketing walkthrough is illustrative and does not submit questions to an AI provider.

When we process information for a business customer under a separate written agreement, that agreement and any data processing addendum govern that processing. This notice does not authorize a customer to share information it has no right to disclose.

Depending on the features you use, information involved may include:

• Information you provide: name, business contact details, organization, support correspondence, and feedback. If accounts are offered, this may include account identifiers, roles, and preferences.
• Service content: prompts, conversations, uploaded documents, manufacturing requirements, and other material submitted through an enabled feature. These may contain personal or confidential information.
• Technical information: IP address, browser and device characteristics, request timestamps, pages requested, error reports, and security events. Actual logging depends on the hosting configuration.
• Source information: business and professional information from permitted public sources, licensed materials, or authorized contributors, including supplier names, facility details, source references, and business contacts. Public availability does not remove privacy obligations.
• Transaction information, if paid services are introduced: billing contacts, purchase records, and payment status. Payment-provider arrangements and payment-data collection must be disclosed before checkout is enabled.

The proposed purposes are to provide requested features, respond to inquiries, maintain accounts where available, retrieve manufacturing information, preserve source and revision context, troubleshoot problems, protect the Services, meet legal obligations, and improve reliability and usability.

Optional marketing communications would be subject to applicable notice and consent requirements and an unsubscribe mechanism. Access would not be conditioned on unrelated marketing consent where prohibited.

An enabled AI feature may send your prompt and relevant retrieved context to a configured model provider to generate a response. Do not include personal information, proprietary drawings, or sensitive business information unless the feature is approved for that material and you have authority to share it.

The proposed default is not to use private customer content to train general-purpose AI models without a separate, explicit opt-in. This commitment must be verified against selected providers, contracts, retention settings, and implementation before becoming effective. This draft makes no provider-specific training or zero-retention guarantee.

Generated answers may contain errors or personal information from their sources. Correction or removal requests should use the confirmed privacy contact below, subject to applicable rights and legitimate recordkeeping needs.

The current marketing site uses local browser storage to remember appearance preferences, including light or dark mode and saved theme settings. Clearing site storage in your browser resets those preferences. Fonts are served with the site rather than requested from a remote font service.

The current marketing application does not include advertising pixels, analytics integrations, account registration, or lead-capture forms. A production hosting layer may process technical request information separately from the page code; that configuration must be confirmed before launch.

If tracking is added, this notice and any required consent controls must be updated first. The current application does not implement a special response to Do Not Track or Global Privacy Control signals and has no advertising sale or sharing feature. Applicable signal-handling duties must be evaluated before adding such processing.

The proposed disclosure categories are limited to these purposes:

• Service providers: hosting, storage, security, support, communications, and, for enabled AI features, model providers, under appropriate instructions and contractual safeguards.
• Authorized recipients: people or organizations you explicitly choose to share with through an available feature. A supplier listing or graph connection alone does not authorize sharing private content.
• Legal and safety needs: where required by law or reasonably necessary to address fraud, protect rights and safety, or establish or defend legal claims, with appropriate safeguards.
• Business changes: a financing, merger, acquisition, or asset transfer, subject to confidentiality and applicable notice requirements.
• Your direction or consent: another specifically disclosed purpose you authorize. The proposed policy is not to sell personal information or share it for cross-context behavioral advertising; actual vendors and practices must be verified before adopting that commitment.

The proposed approach is to retain information only as long as reasonably necessary for these purposes, considering the service relationship, source permissions, security, legal duties, and dispute resolution. Retention periods for conversations, source excerpts, logs, backups, and account records must be documented before hosted use.

Deletion may be subject to limited legal or security exceptions. Backup copies may persist until scheduled expiration, and a minimal audit record may remain where justified. Removing a record from search results does not necessarily erase every historical copy. This draft does not promise an unimplemented deletion deadline or self-service tool.

We propose maintaining administrative, technical, and organizational safeguards appropriate to the information and risks involved. No system is completely secure. This draft does not represent that Fabrication AI holds a security certification or meets a particular regulated-industry standard.

Processing locations depend on the selected hosting and service providers. Before transferring personal information across borders, we must identify destinations and legally required transfer mechanisms. [Confirm processing countries and applicable transfer safeguards before this policy takes effect.]

Depending on your location and the laws applicable to us, you may have rights to know about, access, correct, delete, or obtain a copy of personal information; object to or restrict processing; withdraw consent; or opt out of specified sales, sharing, targeted advertising, or profiling. Exceptions and verification requirements may apply.

Use the confirmed contact in section 12 to submit a request. We may need information sufficient to verify your identity and authority without requesting unnecessary sensitive data. Where applicable, authorized agents may act for you, and an appeal route will be provided for a denied request. We will not unlawfully discriminate for exercising a privacy right.

Where applicable, you may contact your privacy regulator. This draft does not establish that the CCPA, GDPR, or a particular regional law applies to Fabrication AI. Regional notices, legal bases, deadlines, and request mechanisms require counsel's review.

The Services are intended for adults acting in a professional or business capacity, not children under 18. The proposed policy is not to knowingly collect children's personal information. If you believe a child has provided information, use the confirmed contact below so the situation can be assessed and addressed.

Manufacturer websites and external resources have their own privacy practices. A link takes you to a service we do not control; review its policy before providing information. A link is not an endorsement or promise about that site's practices.

An approved policy will identify its effective date. Material changes will be communicated through an appropriate notice, and additional consent obtained where required. New data practices should not apply retroactively where notice or permission is required. This draft remains inactive until outstanding decisions are resolved.

Complete these details and test the request channel before this becomes an effective policy. These placeholders are not working contact information.

• Responsible entity: [full legal entity name and business address].
• Privacy requests and appeals: [monitored privacy email or request URL].
• Effective date: [date approved by Fabrication AI and legal counsel].