Privacy Policy

Fiddleo ("Fiddleo," "we," "us," or "our") is a brand operated by Brandon L Pickett LLC. This Privacy Policy explains what information we collect through fiddleo.co and the Fiddleo application (together, the "Service"), how we use it, and the choices you have. By using the Service, you agree to the practices described here.

1. Information We Collect

Account information

When you create an account, we collect your name, email address, and organization name, and we store a record of your login via our authentication provider (Supabase). We never store your password in plain text.

Content and usage data

To provide the Service, we store the keywords, briefs, drafts, and published content you create or generate, along with metadata about that content (status, scores, timestamps) and the connection details you configure for publishing to your own site or CMS. Publishing credentials (API keys, site URLs, webhook secrets) are encrypted at rest and are only decrypted server-side to perform the publishing action you request.

Billing information

Subscription payments are processed by Stripe. We do not receive or store your full card number — Stripe shares with us only what's needed to manage your subscription (plan, status, and a reference token).

Newsletter subscribers

If you subscribe to our blog newsletter, we store your email address, subscription status, and the date you subscribed, so we can send you updates and let you unsubscribe at any time.

Cookies and similar technologies

We use a strictly necessary session cookie (set by Supabase Auth) to keep you signed in. We do not use third-party advertising or cross-site tracking cookies.

Log and technical data

Our hosting provider (Vercel) automatically logs standard technical data (IP address, browser type, timestamps, requested URLs) for security, abuse prevention, and reliability purposes.

2. How We Use Information

• To provide, operate, and maintain the Service, including generating and publishing content you request.
• To process payments and manage subscriptions.
• To send you transactional messages (account, billing, and service notices) and, if you've opted in, newsletter emails.
• To monitor, secure, and improve the Service, including diagnosing technical issues.
• To comply with legal obligations and enforce our Terms of Service.

3. Legal Basis for Processing (EEA/UK Users)

If you are located in the European Economic Area or the UK, we process your personal data on the following legal bases: performance of a contract (providing the Service you signed up for), consent (for newsletter subscriptions and any optional cookies), and our legitimate interests (securing the Service, preventing fraud, and improving our product), balanced against your rights.

4. How We Share Information

We do not sell your personal information. We share information with the following categories of service providers, solely to operate the Service on our behalf:

• Supabase — authentication and database hosting.
• Stripe — payment processing.
• Anthropic — the AI model provider used to generate content on your behalf.
• Resend — transactional and newsletter email delivery.
• Inngest — background job processing for content generation.
• Vercel — application hosting.

Where you configure a publishing connection to your own website or CMS, we send your generated content to that destination at your direction — that transfer is one you control. We may also disclose information if required by law, or to protect the rights, property, or safety of Fiddleo, our users, or others.

5. International Data Transfers

Our service providers are primarily based in the United States. If you are located outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your home jurisdiction. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.

6. Data Retention

We retain account and content data for as long as your account is active, and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. Newsletter subscriber records are retained until you unsubscribe or request deletion.

7. Your Privacy Rights

All users

You can access, correct, or delete most of your account and content data directly within the Service, or by contacting us at the email below. Every newsletter email includes a one-click unsubscribe link.

EEA/UK residents (GDPR)

You have the right to access, correct, delete, or restrict processing of your personal data; to receive a copy of your data in a portable format; to object to processing based on legitimate interests; and to withdraw consent at any time where processing is based on consent. You also have the right to lodge a complaint with your local data protection supervisory authority.

California residents (CCPA/CPRA)

You have the right to know what personal information we collect, use, and disclose; to request deletion or correction of your personal information; and to opt out of the sale or sharing of personal information — we do not sell or share personal information as those terms are defined under California law. We will not discriminate against you for exercising any of these rights.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before completing certain requests.

8. Children's Privacy

The Service is not directed to individuals under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

9. Security

We use industry-standard safeguards — including encryption of sensitive data at rest and in transit — to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you directly.

11. Contact Us

Brandon L Pickett LLC, d/b/a Fiddleo
1250 Cherokee St. #1715, Denver, CO 80204
Email: privacy@fiddleo.co