Privacy Policy

This Privacy Policy explains how Fieldwork, Inc. (“Fieldwork”) collects, uses, shares, and protects personal data when you use our Service. For privacy questions or to exercise your rights, contact max@webmakers.cc.

1. Who is the controller

For account holders and visitors, Fieldwork is the data controller. When a Client uses Fieldwork to process personal data about its own prospects or Creators (“Customer Data”), the Client is the controller and Fieldwork acts as a processor on the Client’s behalf, governed by our Data Processing terms.

2. Data we collect

• Account & company data: name, email, company details, role, and authentication data.
• Billing data: processed by Stripe; we store limited records (plan, status, invoice identifiers), not full card numbers.
• Customer Data: information you upload or generate about prospect companies, contacts, and Creators — including names, business email addresses, social handles, and engagement metrics.
• Usage data: log data, device/browser information, pages viewed, and actions taken.
• Cookies: as described in our Cookie Policy.

3. How we use data

• To provide, operate, secure, and improve the Service.
• To run AI-assisted matching, drafting, classification, and analytics.
• To process payments and send transactional and service communications.
• To detect, prevent, and address fraud, abuse, and security incidents.
• To comply with legal obligations and enforce our Terms.

4. Legal bases (EEA/UK)

Where the GDPR or UK GDPR applies, we rely on: performance of a contract; our legitimate interests (operating and improving the Service, B2B outreach, security); consent (where required, e.g. certain cookies); and compliance with legal obligations.

5. AI processing

We use Anthropic’s Claude models to power matching, draft outreach, and classify replies. Content sent for these features is processed by Anthropic as our subprocessor. AI-generated output may be inaccurate and should be reviewed before use.

6. How we share data & subprocessors

We do not sell personal data. We share data with service providers who process it on our behalf under contract, and with authorities where required by law or to protect rights and safety. Our current subprocessors:

7. International transfers

We may process data in the United States and other countries. Where required, we rely on appropriate safeguards such as the EU Standard Contractual Clauses for transfers from the EEA/UK.

8. Data retention

We retain personal data for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Customer Data is retained per the Client’s instructions and deleted or returned on termination, subject to backups and legal requirements.

9. Security

We use technical and organizational measures including encryption in transit, access controls, row-level security, and least-privilege service credentials. No method of transmission or storage is 100% secure.

10. Your rights

Depending on your location, you may have rights to access, correct, delete, port, or restrict processing of your personal data, to object to certain processing, and to withdraw consent. California residents have rights under the CCPA/CPRA, including the right to know and delete and the right not to be discriminated against for exercising rights. To exercise any right, contact max@webmakers.cc. If we process Customer Data on a Client’s behalf, we will refer requests to that Client.

11. Recipients of outreach

If you received a message sent through Fieldwork and wish to opt out or have your data removed, use the unsubscribe link in the message or email max@webmakers.cc, and we will route your request to the responsible sender.

12. Children

The Service is not directed to children under 16, and we do not knowingly collect their data.

13. Changes

We may update this Policy and will post the new effective date here, notifying you of material changes where required.

14. Contact

Fieldwork, Inc., [Registered business address]. Privacy: max@webmakers.cc.