Privacy Policy

Last modified: September 25, 2026

This Privacy Policy describes how R.E.A.L, LLC (“we”, “us”) collects, uses and protects personal information when you use FDD AI (fddai.org). How we treat the questions you ask and the documents you upload is set out in more detail in our Data Handling Policy, which forms part of this policy.

1. Information we collect

• Account information you give us: name, email address, password (stored hashed), organization name if provided, and organization membership.
• Billing information: your balance, charges, refills, discount codes used, and a Stripe customer reference. Card numbers are collected by Stripe directly and never stored by us.
• Usage information: the questions you ask, answers and reports produced, projects, share links, uploaded-document metadata (file name, type, size, dates), and the time and cost of each request.
• Policy acceptance: the version of our policies you accepted, when, and the IP address and browser used.
• Technical information: IP address, browser and device type, pages visited and server logs, collected automatically.
• Communications: emails we send you (logged for support) and messages you send us.

2. How we use it

To operate the service and your account; to process payments and prevent fraud; to answer your questions and produce reports; to send service emails (verification, receipts, low-balance and security notices, and if you opt in, research digests); to improve the library and the service using anonymised usage patterns; to provide support; and to meet legal obligations.

3. AI processing

Questions are processed by an AI model provider (currently Anthropic) under commercial terms that prohibit training on your content. Uploaded documents are processed through Amazon Bedrock under a zero-data-retention arrangement. Neither provider is permitted to use your content to train models. See the Data Handling Policy for details and retention periods.

4. Sharing

We share personal information only with: service providers who process it on our behalf (Stripe for payments, Amazon Web Services and Anthropic for AI processing, Mailgun, which delivers the emails we send you and nothing else, and our hosting provider); members and administrators of your organization account, who can see your name, how many questions you have asked and what they cost on the organization’s account, but never the text of your questions or your documents; recipients of share links you create; and authorities where required by law. We do not sell personal information and do not share it with advertisers.

5. Cookies

We use cookies that are necessary to keep you signed in and to protect forms against misuse. We do not use analytics or advertising cookies. You can block cookies in your browser, but the service will not work without the sign-in cookie.

6. Retention

Account and usage information is kept while your account is open. Uploaded documents are deleted 30 days after upload or when you delete them. Billing records are kept for 7 years. When an account is closed, personal information is deleted or anonymised within 90 days, except records we must keep by law.

7. Security

Traffic is encrypted in transit; documents and extracted text are stored on servers we control; access is restricted to staff who need it; passwords are hashed; email changes require confirmation from the new address. No method of storage or transmission is completely secure.

8. Your rights

You can view and change your account details and delete your questions, documents and projects from My Research. You can ask us to provide a copy of your personal information, correct it, or delete your account by contacting [email protected]. Residents of California, the EU/UK and other jurisdictions may have additional rights under local law, including the right to lodge a complaint with a supervisory authority.

9. Children

The service is for business users aged 18 and over. We do not knowingly collect information from children.

10. International transfers

Our servers and providers are located in the United States. If you use the service from elsewhere, your information will be transferred to and processed in that country.

11. Changes

We will post changes here and update the date above. For material changes we will ask you to accept the new version at sign-in, and record your acceptance.

12. Contact

R.E.A.L, LLC, 2414 Avenue A, Bradenton Beach, FL 34217, [email protected].