Privacy Policy

1. If you have a Fyrro account

We collect:

• Your email address, used to sign you in (we use passwordless, magic-link sign-in — see below) and to send you notifications about your own projects.
• Whatever you enter about your projects and clients — project names, client names/emails if you add them, the images or URLs you upload or capture.
• Basic usage data needed to run the product — when a project was created or updated, which plan you're on.

2. If you're a reviewer on someone else's Fyrro link

If a Fyrro customer shares a Pinpoint or Studio link with you, we collect what you enter on that page: your name, optionally your email, any comments or replies you write, any file you attach, and (for Studio) the color/font selection you make. We collect this on that person's instructions, as their data processor, not because you signed up for anything with us — see our Data Processing Agreement for how that relationship works. If you have questions about how your feedback is being used, the person who sent you the link is who to ask first, since they control that project.

3. Cookies and sign-in

We use a session cookie to keep you signed in after you click a magic-link email — that's it, no advertising or cross-site tracking cookies. Reviewers using a public share link don't need to sign in and aren't issued a session cookie; instead, edit/delete access to their own comments is proven by a private token stored in their browser's local storage, not a cookie.

4. Who else sees this data

We use a small number of infrastructure providers to run the Service, each only for the specific job below:

• Hosting — Vercel, which runs the application itself and (via Vercel Blob) stores uploaded images, screenshots, and comment attachments.
• Database — a managed PostgreSQL provider (Neon), which stores account, project, and comment data.
• Email delivery — Resend, used to send sign-in links and notification emails (a client left feedback, approved a version, and similar).
• Browser automation — used to capture a screenshot of a URL you ask us to review, and to generate PDF exports; this may run on our own infrastructure or a specialized third-party browser service.
• Payments — Stripe, used to process subscription payments. Fyrro never sees or stores your full card number.
• Error monitoring — Sentry, used to catch and diagnose bugs; error reports can include technical details like your browser version and the page you were on, not your project content.

We don't sell personal data, and we don't share it with anyone else for their own marketing purposes.

5. How long we keep it

We keep project and comment data for as long as the project exists in an account. If you delete a project or your account, we delete the associated data, other than what we're required to keep for legal or accounting reasons.

6. Your rights

If GDPR or a similar law applies to you, you have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these, email [email protected]. If you're a reviewer and your request concerns feedback you left on someone else's project, we may need to involve that account holder, since they're the data controller for that project.

7. Security

Data is encrypted in transit (HTTPS) and access to production systems is limited to people who need it to operate the Service. No system is perfectly secure, and we'll notify affected users if we become aware of a breach that affects their personal data, as required by law.

8. Children

Fyrro isn't directed at children, and we don't knowingly collect personal data from anyone under 16.

9. Changes to this policy

If we make a material change to this policy, we'll notify account holders by email before it takes effect.

10. Contact

Beveled Edge AB, org. no. 559089-2559 (VAT no. SE559089255901), Fiskare Glans gata 5, 193 41 Sigtuna, Sweden is the data controller for account-holder data described in section 1. Questions or requests: [email protected].