Legal
Effective date: 1 January 2026 · Version 1.0
Contents
1FRX Ltd ("1FRX", "we", "us", "our") is the data controller responsible for your personal data in connection with the 1FRX platform and services. We are registered in England and Wales.
[PLACEHOLDER — Company registration number, registered address, ICO registration number.]
Questions or requests relating to this Privacy Policy should be sent to hello@1frx.com.
We collect the following categories of data, depending on how you interact with us:
| Category | Examples | Source |
|---|---|---|
| Account data | Name, email address, company name, billing address | Provided directly by you on sign-up |
| Authentication data | Hashed passwords, API key identifiers (not raw keys) | Generated on account creation |
| Usage data | API call timestamps, endpoint called, response codes, credit consumption | Automatically collected during API use |
| Technical data | IP address, browser type, device OS, referring URL | Automatically collected via server logs and analytics |
| Payment data | Last 4 digits, card type, billing postcode | Provided by payment processor (we do not store full card numbers) |
| Content data | Prompts, uploaded documents, configuration inputs submitted to the API | Provided directly by you during API use |
| Communications data | Emails, support messages | Provided directly by you |
We use your data for the following purposes:
| Purpose | Legal basis |
|---|---|
| Providing the contracted Services | Performance of a contract (Art. 6(1)(b)) |
| Billing and financial records | Legal obligation (Art. 6(1)(c)) |
| Security, fraud prevention | Legitimate interests (Art. 6(1)(f)) |
| Product analytics (aggregated) | Legitimate interests (Art. 6(1)(f)) |
| Marketing emails (opted-in) | Consent (Art. 6(1)(a)) |
| Marketing emails (existing customers) | Legitimate interests (Art. 6(1)(f)), subject to soft opt-out |
We do not sell your personal data. We may share data with the following categories of third parties as necessary to operate the platform:
Some of our service providers are located outside the UK and EEA. Where data is transferred internationally, we ensure that appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or equivalent standard contractual clauses. [PLACEHOLDER — list specific countries/regions if known.]
| Data type | Retention period |
|---|---|
| Account data | Duration of account + [X years] after deletion |
| API usage logs | [90 days] rolling |
| Billing records | 7 years (UK legal requirement) |
| Support correspondence | [2 years] from last interaction |
| Voice / camera frames | Not retained — processed in real time and discarded |
| Submitted content (prompts, documents) | [PLACEHOLDER — state whether you retain these and for how long] |
We implement appropriate technical and organisational measures to protect your data, including:
No transmission over the internet is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and affected individuals without undue delay where required.
Under the UK GDPR, you have the following rights with respect to your personal data:
To exercise any of these rights, email hello@1frx.com. We will respond within one calendar month. We may ask you to verify your identity before processing the request.
We use cookies and similar tracking technologies as follows:
| Cookie | Type | Purpose |
|---|---|---|
session | Strictly necessary | Maintains your authenticated session. |
| [PLACEHOLDER] | Analytics | Aggregated, anonymised usage statistics. |
Strictly necessary cookies cannot be disabled without impacting the functionality of the Services. Analytics cookies require your consent where applicable.
The Services are not directed at persons under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at hello@1frx.com and we will delete it.
We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and notify account holders by email at least 14 days before the changes take effect. The current version is always available at 1frx.com/privacy.html.
For privacy-related queries or to exercise your rights:
If you are not satisfied with how we handle your request, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.