Privacy Policy
How Frabo OS collects, uses, stores, and shares information when you use Adam, our website, apps, and services — including receipts, marketplace, CRM/leads, email features, connected social accounts, and AI processing.
Frabo OS operates globally. This document is our baseline policy in English. Where local law requires different terms, a region-specific addendum may apply and will be shown when relevant. Nothing here is legal advice.
Scope
This Privacy Policy describes how Frabo OS ("Frabo OS", "we", "us") handles personal information when you create an account, use our platform, or interact with our marketing sites.
Frabo OS is a subsidiary of USRA, LLC. It applies to consumers, businesses, marketplace participants, CRM and email marketing users, and API developers unless a separate notice says otherwise.
Our data promise
Your business data is yours. We built Frabo OS on data sovereignty — the information you connect and create stays inside your account and is used to run the service for you, not to be sold.
- We never sell your personal or business data. Ever.
- We do not share your data with third parties for their own marketing.
- We share data only with the processors needed to deliver a feature you use (for example Stripe for billing, or an AI/breach-intelligence provider strictly to complete an action you requested) — under contract, limited to that purpose.
- You can export or permanently delete your data at any time from Settings, or by emailing us. Deletion is honored across our systems.
- When Adam sends data to an AI provider to answer you, structured account credentials and identifiers are stripped first (data-sovereignty boundary) so your raw customer/account data never leaves.
Security monitoring (opt-in)
If you turn on Adam’s Security Center, we help protect your identity — always with your consent, and always honestly (we never invent a threat).
- Breach checks: for the email addresses and domains you choose to monitor, we query a breach-intelligence source (Have I Been Pwned) to tell you if they appear in a known data breach. You can remove any item or turn monitoring off at any time.
- Password checks: performed with k-anonymity — only the first five characters of a one-way hash of the password are sent; the password itself never leaves your session and is never stored.
- Account sign-in monitoring: we show you recent sign-ins to your own Frabo OS account (device and IP) so you can spot and revoke anything you don’t recognize.
- We do not sell, share, or use your monitored identifiers for anything other than showing you these results.
Who is responsible
Frabo OS, a subsidiary of USRA, LLC, is the controller of personal information processed through the platform, except where we act as a processor on behalf of a business customer (for example, lead or contact records you upload about your customers).
When you use Frabo OS on behalf of a company, your organization may also have policies that apply to you.
Information we collect
We collect information you provide and information generated by your use of the service.
- Account data: email address, name, login timestamps, plan tier, and acceptance records for terms and policies.
- Business and financial data you upload or connect: receipts, invoices, bank transaction metadata, marketplace listings, orders, messages, and savings or dispute records.
- CRM and leads data you enter or import: contact names, email addresses, phone numbers, companies, notes, follow-up dates, and pipeline status.
- Email marketing data (on eligible plans): audience lists, segments, campaign subject lines and body content you compose, send schedules, delivery and bounce metadata, and unsubscribe preferences.
- Connected social accounts (optional): when you link an account such as LinkedIn, X, YouTube, Facebook, Instagram, or TikTok, we receive OAuth access tokens and basic profile/account details (for example your name, handle, or member ID), the content you choose to publish, and — for accounts you own — engagement data such as comments on your own posts, so Adam can render your dashboard and complete actions you approve.
- Payment data: billing status and Stripe customer identifiers. Card numbers are handled by Stripe, not stored on Frabo OS servers.
- Technical data: device type, browser, IP address, security signals, error logs, and product usage needed to operate and secure the service.
- Communications: support requests, product feedback, and email we send you (login codes, billing, service notices, and — where you use email marketing — campaigns you approve to send).
How we use information
We use personal information to run Frabo OS, keep accounts secure, and improve the product.
- Provide features such as adding receipts and business information for review, AI insights from information you confirm (Adam), marketplace commerce, CRM/leads, email campaigns on eligible plans, SEO tools, billing, and in-product notifications.
- Authenticate users, prevent fraud and abuse, enforce plan limits, and maintain audit trails.
- Process payments and subscriptions through our payment provider.
- Send transactional email (for example, login codes, billing receipts, onboarding, and service notices) and, when you use email marketing features, broadcast messages you schedule or approve to your audiences.
- Help you manage connected social accounts you own — drafting and scheduling posts, and, where you enable it, surfacing comments on your own content so you can reply. Adam only drafts; nothing is published or replied to until you explicitly approve it.
- Analyze aggregated usage to improve reliability and performance. See our Cookie Policy for analytics tools on public pages.
Legal bases (where applicable)
Depending on your location, we rely on one or more legal bases to process personal information, such as performing our contract with you, legitimate interests in operating a secure platform, compliance with law, and consent where required.
You may withdraw consent where processing is consent-based, without affecting processing that is required to provide core account functions.
Connected accounts and social platforms
Linking a social account (such as LinkedIn, X, YouTube, Facebook, Instagram, or TikTok) is always optional and is initiated by you through the platform's standard OAuth authorization. We request only the minimum permissions needed for the features you use, and we only ever act on the account you authenticated — never on accounts or content you do not own.
Every action Adam takes on a connected account is approval-gated: Adam prepares drafts (posts, replies, schedules), and nothing is published, replied to, or otherwise sent until you explicitly approve it. We do not perform automated bulk posting, unsolicited messaging, scraping, or engagement you have not reviewed.
Access tokens are encrypted and stored only on our servers; they are never exposed to your browser or shared with third parties. You can disconnect any linked account at any time from Settings, which deletes the stored access and refresh tokens for that platform. We honor each platform's API terms and data-handling requirements, including deletion obligations.
International transfers
Frabo OS uses global cloud infrastructure. Personal information may be processed in countries other than where you live.
Where required, we use appropriate safeguards for cross-border transfers. Additional details may be provided in region-specific addenda.
Retention
We keep personal information for as long as your account is active or as needed to provide the service, comply with law, resolve disputes, and enforce agreements.
Retention settings may vary by feature and plan. You can request deletion of your account from Settings; some records may be retained where law requires.
For connected social accounts, disconnecting the account from Settings deletes the stored access and refresh tokens for that platform. Deleting your Frabo OS account removes connected-account tokens as part of account deletion.
Your choices and rights
Depending on your location, you may have rights to access, correct, delete, restrict, or export personal information, and to object to certain processing.
To exercise rights, contact [email protected]. We may need to verify your identity. If we process data on behalf of your employer, we may direct you to them for employee-related requests.
You may also have the right to lodge a complaint with a supervisory authority in your country.
Security
We use technical and organizational measures designed to protect personal information, including encryption in transit, access controls, and monitoring.
No online service can guarantee absolute security. Please use a strong login method, protect your email account, and report suspected unauthorized access promptly.
Children
Frabo OS is not directed at children under 16 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.
If you believe a child has provided us data, contact [email protected] and we will take appropriate steps.
Changes to this policy
We may update this Privacy Policy when our practices or legal requirements change. We will post the updated version with a new "Last updated" date.
Material changes may also be communicated by email or in-product notice where appropriate.
Contact
Questions about this Privacy Policy or our data practices: [email protected].
Email from Frabo OS is sent from @frabo.ai addresses (such as [email protected] for sign-in and account email, [email protected] for notifications and reports, and [email protected] for marketing). Our monitored support and legal inbox is [email protected].
Frabo OS is a subsidiary of USRA, LLC.