Effective date: 17 April 2026 · Last updated: 17 April 2026
Contents
This Privacy Policy explains how Freemi collects, uses, discloses, and protects personal data in connection with the Freemi platform and related products ("Service"). It applies to visitors of our website, customers who sign up for the Service, and the End Users of our customers whose data is processed through the Service. We have designed our practices around the principles of the EU and UK General Data Protection Regulation (GDPR) and, where applicable, other privacy laws such as the California Consumer Privacy Act (CCPA).
Freemi is the trading name of the entity operating the Service. For the purposes of this policy, "Freemi", "we", "us", and "our" refer to Freemi as the data controller of personal data we collect about our website visitors and customer account holders, and as the data processor for personal data our customers process through the Service about their End Users. If you would like the legal entity details for a DPA or procurement process, contact privacy@freemi.ai.
This policy covers data we collect directly from you, data we collect automatically when you interact with our website or Service, and data our customers upload or route through the Service. It does not cover the privacy practices of third-party websites, tools, or integrations you connect to the Service, each of which is governed by its own privacy policy.
We collect the following categories of personal data:
We do not sell your data. We do not use End User conversations to train foundation models (see Section 15).
Where the GDPR applies, we rely on the following legal bases to process your personal data:
We use a carefully selected set of sub-processors to provide hosting, model inference, communications, analytics, and payments. An up-to-date list of sub-processors, their function, and their hosting region is available on request at privacy@freemi.ai. Customers who have signed a DPA will receive advance notice of new sub-processors and a right to object on reasonable grounds.
Freemi primarily hosts customer data in the European Economic Area (EEA). Some sub-processors may process data outside the EEA, including in the United States. When we transfer personal data outside the EEA or UK to a country that does not provide an adequate level of protection, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or equivalent mechanisms, and we carry out transfer risk assessments where required.
We apply technical and organisational measures designed to protect personal data against unauthorised access, loss, and misuse. These include encryption in transit (TLS) and at rest, network isolation, least-privilege access controls, single sign-on and MFA for internal systems, audit logging, regular vulnerability scanning, secure development practices, and vendor security reviews. No system can be guaranteed 100% secure; if we become aware of a personal data breach that is likely to affect you, we will notify you and the relevant supervisory authority in line with applicable law.
Subject to applicable law, you have the following rights in relation to your personal data:
If you are an End User of one of our customers, please contact that customer first, as they are the controller of the data processed through their account. To exercise your rights with Freemi directly, email privacy@freemi.ai. We will respond within 30 days, and we may ask for information to verify your identity.
Where permitted by law, we may send you product updates, tips, and promotional content by email. You can unsubscribe at any time using the link in the email or by emailing privacy@freemi.ai. We will continue to send transactional messages (billing, security, policy changes) that are necessary for the operation of your account.
Freemi uses both proprietary and third-party foundation models to power Agents. We do not use Customer Content, including End User conversations, to train or fine-tune foundation models. Our inference providers are contractually prohibited from retaining prompts or outputs beyond the time required to serve the request or to comply with their own abuse-monitoring obligations. Where we run internal analytics on aggregated or de-identified data to improve the Service, we do so in a way that does not re-identify individuals.
Our Agents generate automated responses on behalf of our customers. Freemi itself does not make decisions that produce legal or similarly significant effects on individuals solely by automated means. Customers are responsible for configuring appropriate human oversight where their use of the Service could have such effects on End Users.
The Service is intended for business use and is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
If you are a California resident, the CCPA gives you the right to know what personal information we collect, to access and delete it, to correct inaccurate information, to opt out of any "sale" or "sharing" of personal information (we do neither), and to not be discriminated against for exercising these rights. To exercise your rights, email privacy@freemi.ai. You may designate an authorised agent to make a request on your behalf.
We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date above. For material changes, we will provide more prominent notice, including by email where appropriate. We encourage you to review this policy periodically.
Privacy questions, rights requests, or DPA requests: privacy@freemi.ai. General inquiries: hello@freemi.ai. You can also read our Terms of Service.
Need formal documentation. a Data Processing Agreement (DPA), sub-processor list, or security overview. for your legal, procurement, or security team? Contact us and we'll send it over.