Legal
Privacy Policy
Effective date: March 1, 2026 · Last updated: March 1, 2026
Furtune ("we", "us", or "our") operates the website furtune.app and provides a free AI assistant service. This Privacy Policy explains what information we collect, why we collect it, how we use it, and what rights you have regarding your data.
By using Furtune, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the service.
1. Information We Collect
1.1 Account Information
When you create an account, we collect your name and email address. If you register via Google OAuth, we receive your name, email, and profile picture URL from Google. We do not store your Google password.
1.2 Conversation Data
We store the messages you send to Furtune and the responses generated by the AI, including any images you upload. This data is associated with your account and is used to display your conversation history and to provide the service.
1.3 Usage Data
We may collect standard server-side logs including IP addresses, browser type, operating system, referring URLs, and timestamps of requests. This information is used for security, performance monitoring, and abuse prevention.
1.4 Cookies and Session Data
We use cookies and similar technologies to maintain your login session and remember your application preferences (such as sidebar state and color theme). These are strictly functional cookies; we do not use advertising or tracking cookies.
2. How We Use Your Information
- To provide, operate, and maintain the Furtune service
- To authenticate your identity and secure your account
- To display your conversation history across sessions
- To process your requests through third-party AI models (see Section 4)
- To detect and prevent abuse, fraud, or violations of our terms
- To send transactional emails (e.g., account invitations) — no marketing emails without consent
- To improve the service based on aggregated, anonymized usage patterns
3. Legal Basis for Processing (EEA / UK Users)
If you are located in the European Economic Area or the United Kingdom, we process your personal data under the following legal bases:
- Contract performance: Processing necessary to provide the service you signed up for.
- Legitimate interests: Security monitoring, fraud prevention, and service improvement.
- Consent: Where you have explicitly provided consent (e.g., optional communications).
4. Third-Party Services
4.1 Microsoft Azure OpenAI
Furtune uses Microsoft Azure OpenAI Service to generate AI responses. Messages you send are transmitted to Azure OpenAI servers for processing. Microsoft's data handling is governed by the Microsoft Azure terms. By default, prompts and completions are not used to train Microsoft's models.
4.2 Google OAuth
If you choose to sign in with Google, authentication is handled by Google Identity Services. We only receive the profile data Google provides (name, email, profile picture). We do not receive your Google password and cannot access your Google account beyond authentication.
4.3 Tavily Web Search
When Furtune performs a web search on your behalf, your query is sent to Tavily (tavily.com) for processing. Search queries may be logged by Tavily subject to their own privacy policy.
4.4 Hosting Infrastructure
Furtune is hosted on Vercel (frontend/API) and uses a managed PostgreSQL database. Data is stored in servers located in the United States. By using Furtune, you consent to the transfer of your data to the United States.
5. Data Retention
We retain your account information and conversation history for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by applicable law or for legitimate security purposes (such as fraud investigation logs).
6. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may disclose your information in the following limited circumstances:
- Service providers: Third-party vendors listed in Section 4 who assist in operating the service, under data processing agreements.
- Legal obligations: When required by law, court order, or to protect the rights and safety of Furtune, its users, or the public.
- Business transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction.
7. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request that we correct inaccurate or incomplete data.
- Deletion: Request that we delete your personal data ("right to be forgotten").
- Portability: Receive your data in a structured, machine-readable format.
- Objection: Object to processing based on legitimate interests.
- Withdrawal of consent: Withdraw consent at any time where processing is consent-based.
To exercise any of these rights, please contact us at privacy@furtune.app. We will respond within 30 days.
8. Data Security
We implement industry-standard security measures including HTTPS encryption in transit, hashed passwords, and access controls on our database. However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security and encourage you to use a strong, unique password for your account.
9. Children's Privacy
Furtune is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of Furtune after any changes constitutes your acceptance of the updated policy.
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us: