Legal
Privacy Policy
The short version
This summary highlights key points. The full policy below controls.
- We collect what we need to run Feezible: your account details, the project data you choose to save, billing status, and limited usage and security data.
- We do not sell or “share” personal information for cross-context behavioral advertising, and we do not use advertising cookies or trackers.
- We do not use your data to train AI models. Feezible does not use AI; its model engine runs fixed formulas on your inputs.
- Payment card details go directly to Stripe. We never see or store your full card number.
- Usage events are kept for 90 days. We look up a coarse location (city, region, country) from your IP address when you visit, but we do not store the IP address with those events.
- You can access, correct, export, and delete your data. Email support@feezible.us.
- Your account and project data is stored in the United States.
1. Who we are and what this covers
This Privacy Policy explains how Barbieri Technology Group LLC, a Pennsylvania limited liability company doing business as BTG LLC (“BTG,” “we,” “us,” or “our”), collects, uses, shares, and protects personal information in connection with Feezible, including feezible.us, the Feezible application, the launch mailing list, our emails, and related services (the “Service”). It is part of, and should be read with, our Terms of Service. Capitalized terms not defined here have the meanings given in the Terms.
Our role. BTG is the controller (the business responsible for decisions about the data) for account, billing, usage, and marketing information. For content stored in a Firm Workspace, the firm that owns the workspace decides what is stored and who can access it, and BTG processes that content on the firm’s behalf as its service provider or processor. If you are a member of a Firm Workspace, the firm’s own privacy practices may also apply to you.
This policy does not cover third-party websites or services we link to, or how your firm or your clients handle information you share with them outside the Service.
2. Information we collect
2.1 Information you give us
| Category | Examples |
|---|---|
| Account and profile | Name, email address, company or firm name, password (stored only as a salted hash by our authentication provider), and account preferences such as theme, text size, and dashboard settings. |
| Project and scenario data | Scenario names, project inputs (such as construction budget, square footage, typology, construction type, fee, sheet counts, phases, roles, rates, and hours), saved results, custom rate libraries, custom typologies, and presets. |
| Calibration records | Project labels, typology, completion dates, actual hours by phase and role, actual sheets, actual fees, and notes you enter from completed projects. |
| Firm branding | Firm name, address, phone, email, website, colors, logo image, and footer note used on exports. |
| Team information | Firm Workspace name, member roles, and the email addresses of people you invite. |
| Billing | Plan, subscription status and dates, and Stripe customer and subscription identifiers. Card details are collected and stored by Stripe, not by us. |
| Communications | Messages you send to support, feedback, and requests you make under this policy. |
| Launch mailing list | Email address you submit on feezible.us, with the date, time, and IP address of the signup (used to prevent abuse). |
Project data may describe your clients or their projects. Please enter only what you need and have the right to share. The Service is not designed for, and we ask you not to submit, sensitive personal information such as government identification numbers, financial account numbers, health information, precise geolocation, or information about anyone’s race, religion, or other protected characteristics.
2.2 Information collected automatically
| Category | Details |
|---|---|
| Usage events | A limited set of product events, such as a visit, the start of a session, sign-up, saving a scenario, exporting, starting checkout, or sending an invite, with a random per-tab session identifier, the time, your user ID if you are signed in, and small event details (such as the page or export type). |
| Coarse location | City, region, and country derived from your IP address at the time of an event. We store only the coarse location with the event, not the IP address. |
| Security and rate-limit data | Your IP address, kept for up to 24 hours in rate-limiting records to prevent abuse, and technical logs kept by our hosting providers (such as IP address, browser type, requested URL, and timestamps). |
| Authentication data | Sign-in timestamps and session tokens managed by our authentication provider. |
2.3 Information from others
We receive payment status and billing details (such as the last four digits and expiration of your card, and billing country) from Stripe. If a Firm owner or admin invites you, we receive your email address from them.
3. How we use information
| Purpose | Legal basis (EEA/UK) |
|---|---|
| Provide the Service: create and run your Account, run the model engine, save scenarios, produce exports, and operate Firm Workspaces | Performance of our contract with you |
| Process payments, manage subscriptions, and prevent payment fraud | Contract; legitimate interests |
| Send transactional email: sign-up confirmation, sign-in links, password resets, team invitations, receipts, and notices about your Account or these policies | Contract; legal obligation |
| Provide support and respond to requests | Contract; legitimate interests |
| Keep the Service secure: rate limiting, abuse prevention, and investigating incidents | Legitimate interests; legal obligation |
| Understand and improve the Service using usage events and aggregated statistics | Legitimate interests |
| Send launch and product announcements to people who signed up for them | Consent (you can withdraw it at any time) |
| Comply with law, enforce our Terms, and establish or defend legal claims | Legal obligation; legitimate interests |
We do not use your information for targeted advertising, we do not build advertising profiles, and we do not sell it. We will ask for your consent before using personal information for a purpose materially different from those listed here.
Aggregated and de-identified data. We may create aggregated or de-identified statistics that do not identify you, your firm, your clients, or any project, and use them to operate and improve the Service. We will not attempt to re-identify that data. We will not use calibration records, project fees, or rates from your content to build benchmarks or defaults offered to other customers without your permission.
4. The model engine, AI, and automated decisions
- The Feezible model engine applies fixed, documented formulas to your inputs. It does not use artificial intelligence or machine learning, and it does not send your data to any AI provider.
- We do not use your inputs, saved scenarios, calibration records, or any other content to train, fine-tune, or improve any AI or machine-learning model, ours or anyone else’s.
- The Service does not make automated decisions that produce legal or similarly significant effects about you, and it does not profile you. Its outputs are estimates for your own review.
- How results are computed is explained in the user guide, and paid plans can export a math validation file that shows the calculation steps for a scenario.
If we ever introduce an AI-assisted feature, we will update this policy before it launches, describe the provider and what data it receives, and make it optional.
6. Service providers
These providers process personal information on our behalf. We will update this list before adding a provider that receives personal information for a new purpose.
| Provider | Purpose | Data involved | Location |
|---|---|---|---|
| Supabase, Inc. | Database, authentication, file storage (logos), and server functions | Account, profile, project, calibration, team, branding, billing status, usage events, rate-limit records | United States (Ohio region) |
| Stripe, Inc. | Payment processing, subscription billing, invoices, fraud prevention | Name, email, card and billing details, purchase history | United States and other countries where Stripe operates |
| Doteasy (web hosting) | Hosting feezible.us, sending account email from our mail server, storing the launch mailing list | Server logs, email addresses and message content of emails we send, launch list entries | North America (per Doteasy’s hosting infrastructure) |
| IPinfo, Inc. | Converting an IP address into a coarse city, region, and country for usage events | IP address (sent for lookup; not stored by us with the event) | United States |
| Google LLC (Google Fonts) | Delivering web fonts used by the Service | IP address and browser information sent by your browser when it requests a font | United States and other countries |
Stripe and Google also act as independent controllers for some processing under their own privacy policies (for example, Stripe’s fraud prevention). See stripe.com/privacy and policies.google.com/privacy.
8. Retention and deletion
We keep personal information only as long as needed for the purposes in this policy, then delete or de-identify it.
| Data | How long we keep it |
|---|---|
| Account and profile | While your Account is open; deleted within 30 days after an Account deletion request is verified |
| Scenarios, libraries, presets, calibration records | Until you delete them or your Account is deleted. Content in a Firm Workspace follows the firm’s settings and is deleted when the workspace or its creator’s Account is deleted |
| Firm branding and logos | Until replaced or deleted by a Firm owner or admin, or the Firm Workspace is deleted |
| Team invitations | Invitations expire after 7 days; the record is kept until the invitation is withdrawn or the Firm Workspace is deleted |
| Usage events | 90 days, then automatically deleted. Aggregated counts derived from them may be kept |
| Rate-limit records (with IP address) | Up to 24 hours |
| Hosting and email server logs | According to our providers’ standard log rotation, generally no more than 90 days |
| Billing and transaction records | As long as required for tax, accounting, and legal purposes, generally up to 7 years (Stripe keeps its own records under its policies) |
| Support correspondence | Up to 3 years after the matter is closed |
| Launch mailing list | Until you unsubscribe or ask to be removed, or we retire the list |
| Backups | Residual copies in provider backups are overwritten in the ordinary course, generally within 90 days |
We may keep information longer where the law requires it, to resolve disputes, to enforce our agreements, or where it is subject to a legal hold. To delete your Account and associated data, email support@feezible.us from the address on your Account. Deleting individual scenarios, presets, or records inside the app removes them from the live database immediately. If you delete your Account while you hold an active subscription, please cancel it first; Account deletion also ends your access to paid features without a refund.
9. Security
We use administrative, technical, and physical safeguards appropriate to the nature of the data, including:
- encryption in transit (HTTPS with HSTS) for all pages, the application, and our servers, and encryption at rest provided by our database host;
- database row-level security so each user and Firm Workspace can reach only its own records, with billing and entitlement fields protected from client-side changes;
- passwords of at least 10 characters, stored only as salted hashes, with email confirmation for new accounts;
- a private storage bucket for firm logos, readable only by members of that firm;
- payment card data handled entirely by Stripe, a PCI DSS Level 1 certified provider;
- rate limiting, a strict content security policy, and other browser security headers;
- secrets kept out of source code and the browser bundle, and administrative access limited to authorized BTG personnel.
No system is perfectly secure. We cannot guarantee that information will never be accessed, disclosed, altered, or destroyed by a breach of our safeguards. Please use a strong, unique password and tell us right away at support@feezible.us if you suspect unauthorized access. To report a security vulnerability, email the same address with the subject line “Security”; please give us a reasonable time to fix an issue before disclosing it. We have not experienced a data breach as of the date of this policy.
10. Who at BTG can see your data
Access to production data is limited to authorized BTG personnel who need it. Our administrative console shows account-level information (such as name, email, company, plan, sign-up and sign-in dates) and aggregated usage statistics, so we can support customers, manage billing, and understand how the Service is used. It does not display the contents of your saved scenarios or calibration records.
BTG personnel do not open or read the contents of your scenarios, calibration records, or firm branding except (a) at your request or with your permission, for example to resolve a support issue, (b) when needed to investigate a security incident, abuse, or a violation of our Terms, or (c) when required by law. Our service providers’ staff may have access to systems as needed to run their infrastructure, under their own confidentiality and security obligations.
11. Your choices and rights
Wherever you live, you can:
- Access and correct your profile in the app, or ask us for a copy of the personal information we hold about you;
- Export your scenarios using the export features on paid plans, or ask us for a machine-readable copy of your data;
- Delete individual items in the app, or ask us to delete your Account and personal information;
- Unsubscribe from launch and marketing emails using the link in the email or by contacting us (transactional emails about your Account continue while it is open);
- Leave a Firm Workspace or ask the firm owner to remove you.
How to make a request. Email support@feezible.us with the subject line “Privacy Request,” from the email address on your Account if you have one. We will verify your identity, usually by confirming control of that email address, before acting. You may use an authorized agent; we may require the agent to show written permission from you and may ask you to verify your identity directly. We respond within 30 days (45 days where U.S. state law allows), and we may extend that period where the law permits, telling you why. We do not charge for requests unless they are manifestly unfounded or excessive.
Requests about Firm Workspace content. Where we process content on behalf of a firm, we may refer your request to the firm and act on its instructions.
No discrimination. We will not deny you service, charge you a different price, or provide a different quality of service because you exercised a privacy right.
12. U.S. state privacy rights
Residents of California and other states with comprehensive privacy laws (including Colorado, Connecticut, Delaware, Oregon, Texas, Virginia, and New Jersey, among others) may have the right, subject to exceptions, to: know or confirm what personal information we process and access it; learn the categories of sources, purposes, and recipients; correct inaccuracies; delete personal information; obtain a portable copy; and opt out of the sale or sharing of personal information, targeted advertising, and profiling in furtherance of decisions with legal or similarly significant effects. We do not sell or share personal information, engage in targeted advertising, or conduct such profiling.
California notice at collection. In the past 12 months we have collected the following categories of personal information described in the California Consumer Privacy Act: identifiers (name, email, IP address, account and customer IDs); customer records (billing status and details); commercial information (plans purchased); internet or other electronic network activity (usage events and logs); coarse geolocation (city, region, country); and professional or employment-related information (company or firm name, role in a Firm Workspace). The sources, purposes, recipients, and retention periods are described in Sections 2, 3, 5, 6, and 8. We disclose these categories to service providers for business purposes. We do not collect sensitive personal information as defined by California law for the purpose of inferring characteristics, and we do not sell or share personal information, including of consumers under 16.
Appeals. If we decline your request, you may appeal by replying to our decision with the subject line “Privacy Appeal.” We will respond within the time required by your state’s law. If you are not satisfied with the result, you may contact your state attorney general.
Nevada. We do not sell covered information as defined by Nevada law.
13. EEA, UK, and Swiss users
If the EU or UK General Data Protection Regulation or Swiss data protection law applies to our processing of your personal information, you also have the right to object to processing based on legitimate interests, to restrict processing, to withdraw consent at any time (without affecting prior processing), and to lodge a complaint with your local data protection authority. The legal bases we rely on are listed in Section 3. Providing account information is necessary to enter into the Terms; without it we cannot provide the Service.
14. International transfers
BTG is based in the United States, and your information is stored and processed in the United States, and in the other countries where our service providers operate. Those countries may have data protection laws different from yours. Where required, we rely on appropriate safeguards for transfers, such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum offered by our providers.
15. Legal requests
We disclose personal information to government authorities, law enforcement, or private litigants only when we believe in good faith that the law requires it, such as in response to a valid subpoena, court order, or warrant, and we review each request for legal sufficiency. Where the law allows, we will notify the affected user before disclosing so they can seek protection, and we will disclose only the information the request requires. We may also disclose information when needed to prevent an imminent risk of death or serious injury, to protect against fraud, or to protect the rights and property of BTG and our users. As of the date of this policy, we have not received any government request for user data.
16. Breach notification
If we become aware of a security incident that compromises your personal information, we will investigate, take steps to contain it, and notify you and any relevant authorities as required by applicable law, including Pennsylvania’s Breach of Personal Information Notification Act, without unreasonable delay. Where a Firm Workspace is affected, we will also notify the firm owner.
17. Differences between plans
The same privacy protections apply on every plan. Free, Pro, Lifetime Pro, and Firm accounts are stored, secured, and retained the same way, and none of them is used for advertising or AI training. The differences are functional: Free accounts cannot save scenarios, so project inputs stay in your browser; Pro and Lifetime Pro accounts store saved content that only you can access; and Firm accounts store content that members of the Firm Workspace can access according to their roles, controlled by the Firm owner.
18. Compliance and certifications
We design our practices to meet the requirements of the privacy laws that apply to us, including the California Consumer Privacy Act as amended by the California Privacy Rights Act, other U.S. state privacy laws, the New Jersey Data Privacy Act, the CAN-SPAM Act, and, where applicable, the GDPR and UK GDPR. BTG does not currently hold an independent security certification such as SOC 2 or ISO 27001, and we do not claim one. Our infrastructure providers maintain their own certifications: Stripe is certified to PCI DSS Level 1, and Supabase maintains a SOC 2 Type II report. Firms that need a data processing agreement can request one at support@feezible.us.
19. Children
The Service is for professionals and is not directed to children. You must be at least 18 to use it. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us personal information, contact us and we will delete it.
20. Changes to this policy
We review this policy at least once a year and whenever we change how the Service handles personal information, such as adding a new provider, feature, or data use. The “Last updated” date shows when it last changed. For material changes, we will notify you by email or in the Service at least 30 days before the change takes effect, unless a shorter period is required by law or for security reasons. We will not apply a material change to information collected before the change without your consent where the law requires it.
21. Contact
For privacy questions, requests, or complaints:
Barbieri Technology Group LLC (BTG LLC)
Attn: Privacy — Feezible
1501 S PA-611
Philadelphia, PA 19147
support@feezible.us (subject line “Privacy Request”)
22. Quick reference
Where this policy and our Terms of Service address common privacy and data questions:
| Question | Answer | Where |
|---|---|---|
| Who owns what I enter? | You do. We get only a limited license to run the Service. | Terms 8.1–8.2 |
| Who owns the results and exports? | You may use your outputs freely for your business, including after your plan ends. | Terms 9 |
| Is my data used to train AI? | No. Feezible does not use AI, and your data is never used to train models. | Privacy 4; Terms 8.3 |
| How long is data kept, and can I delete it? | See the retention table. Yes, you can delete items or your whole Account. | Privacy 8, 11 |
| Is my data sold or shared with third parties? | Never sold. Shared only with the service providers listed, your Firm Workspace, or as the law requires. | Privacy 5, 6 |
| Can I opt out? | There is no sale, targeted advertising, or training to opt out of. You can unsubscribe from marketing and delete your data. | Privacy 7, 11 |
| What compliance frameworks apply? | U.S. state privacy laws, CAN-SPAM, and GDPR/UK GDPR where applicable. No SOC 2 or ISO certification is claimed by BTG. | Privacy 18 |
| How are results produced? | Fixed, documented formulas. No automated decisions about you. | Privacy 4; Terms 3 |
| How is data secured? Any breaches? | Encryption, row-level security, Stripe for cards. No breaches to date. | Privacy 9, 16 |
| Do paid plans get different privacy treatment? | No. Same protections on every plan. | Privacy 17 |
| Does anyone at BTG read my projects? | No, except at your request, for security or abuse investigations, or when legally required. | Privacy 10 |
| What about government requests? | Disclosed only when legally required, with notice to you where allowed. None received to date. | Privacy 15 |
| What personal information is collected? Anything sensitive? | Account, project, billing status, and limited usage data. No sensitive personal information is requested. | Privacy 2, 12 |
| Is this policy current? | Reviewed at least yearly and before any change in data handling. | Privacy 20 |
| Do the Terms and Privacy Policy agree? | They are written together. If they ever conflict on personal information, this Privacy Policy controls. | Terms 28 |