1. Who we are and what this policy covers
This Privacy Policy explains what personal information Fetelo collects, why we collect it, who we share it with, and the choices you have. It applies to:
- our website at fetelo.com (the “Website”);
- the Fetelo application at app.fetelo.com, including Buddy, agents, forms, campaigns, automations and the App Center (the “App”);
- our MCP server at mcp.fetelo.com, which lets AI assistants you choose (such as Claude, ChatGPT or Cursor) work in your Fetelo account; and
- the emails we send from info@fetelo.com.
Together we call these the “Services”. “Fetelo”, “we”, “us” and “our” mean Modern Requirements, the company that owns and operates Fetelo, located at 500-7030 Woodbine Ave, Markham, ON L3R 6G2, Canada.
Fetelo is used by teams. When an organisation or team owner creates an account and invites people, that account owner decides what data goes into Fetelo. For that content (“Customer Content”) we act as a service provider or processor on the account owner’s behalf. For account, usage and Website data we act as the controller.
If you have questions, email us at info@fetelo.com.
2. Information we collect
Account and profile information. When you sign up or are invited, we collect your name, email address and sign-in details. You can sign in with an email and password, a Google account, or a Microsoft work or school account; sign-in is handled by our identity provider, Auth0, and we do not see your Google or Microsoft password. Your profile can also hold your timezone, country, state or region and city.
Customer Content. Everything you and your team put into Fetelo: spaces, projects, boards, records, fields, documents, comments, files, forms, campaign messages and recipient lists, automations, agents, skills and agent memory. This can include personal information about other people, such as names and email addresses in a board or campaign audience.
Form and campaign responses. When someone fills in a Fetelo form, their answers (and any files or signatures they add) become records in the form owner’s board. When a campaign is sent, we record delivery and engagement events for each recipient: delivered, opened, clicked, bounced, spam complaint, started and submitted.
AI conversations. Messages you send to Buddy or to agents, the records, files and context you attach, voice input transcripts, and the responses and files the AI produces.
Connected app data. If a space admin connects an outside app through the App Center, we store an encrypted access token and process the data Buddy or an agent fetches from that app when asked (see section 4).
Usage and device information. Log data such as IP address, browser type, device, pages and features used, timestamps, and error reports. We keep activity and audit records, including record and board activity, automation run history, agent activity, and an audit log of MCP and App Center calls with sensitive arguments redacted.
Communications. Emails you send to info@fetelo.com or support@fetelo.com, and replies you send to Fetelo notification emails (for example, answering a record mention by email).
Website information. When you visit fetelo.com we may collect basic analytics such as pages viewed, referring site and approximate location from your IP address using Google Analytics.
3. How we use information
We use personal information to:
- create and run your account, sign you in and verify your email address;
- provide the Services you ask for, such as storing boards and documents, sending campaign emails and reminders, running automations and showing notifications;
- run Buddy and agents on your instructions, including reading and editing content you have permission to access;
- send service emails, such as invitations, role changes, mentions, assignments and deletion confirmations;
- keep the Services secure, enforce permissions and rate limits, detect abuse, and keep audit trails;
- fix bugs, monitor performance and improve the product; and
- answer support requests and meet legal obligations.
We do not sell personal information, and we do not use Customer Content for advertising.
AI processing. Buddy and agents are powered by OpenAI models. When you use them, the relevant parts of your request and Customer Content are sent to OpenAI to generate a response. Under OpenAI’s API terms, data sent through its API is not used to train OpenAI’s models. We do not use your Customer Content to train AI models. Buddy has no memory between chats; agents can keep memory entries, which you can view and remove from the agent’s Memory tab.
Legal bases (EEA and UK users). Where data protection law requires a legal basis, we rely on: performing our contract with you; our legitimate interests in running, securing and improving the Services; your consent, where we ask for it (for example, optional cookies); and compliance with legal obligations.
4. Connected apps and AI assistants
App Center connections. Space admins can connect outside apps, such as Microsoft 365 (Outlook, Outlook Calendar, OneDrive, OneNote, Excel, Microsoft To Do, SharePoint, Teams and Planner), Notion, Linear, GitHub, HubSpot and others, or their own MCP server. Each connection uses the app’s own sign-in and is shared by the whole space. We store the access token encrypted, with keys held in Azure Key Vault. Buddy and agents use a connection only to do what a person or an agent’s configured job asks, and only with the tools the admin has allowed. Fetelo’s Microsoft 365 tools cannot delete anything in your Microsoft account.
When you disconnect an app, we remove it from every agent, revoke the token at the provider where possible, and record the disconnection in an audit log. Your use of each outside app is also governed by that app’s own terms and privacy policy.
Google user data. When Google apps are available in the App Center, Fetelo’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we will:
- use Google user data only to provide and improve the features you ask Buddy or an agent to perform;
- not transfer it to others except as needed to provide those features, for security, to comply with law, or as part of a merger or acquisition with notice to you;
- not use it for advertising, and not sell it; and
- not allow humans to read it, except with your consent, for security purposes, to comply with law, or when it is aggregated and anonymised for internal operations.
We do not use Google user data to train generalised AI or machine learning models.
Microsoft account data. Data we receive through Microsoft Graph is used only to perform the actions you or your agents request, under the same limits described above.
Fetelo’s MCP server. If you connect an AI assistant such as Claude, ChatGPT or Cursor to mcp.fetelo.com, you sign in with OAuth and the assistant can read and write in Fetelo with your permissions; it cannot delete anything. Data the assistant retrieves is then handled under that assistant provider’s own terms and privacy policy. We log each call, with sensitive arguments redacted, for 90 days.
5. Who we share information with
We share personal information only with the service providers below, who process it on our behalf under contract, and in the other cases listed after the table.
- Microsoft Azure (US) — Hosting of the App and API, file storage, and key management
- MongoDB Atlas — Database hosting
- Auth0 (Okta) — Sign-in and identity
- OpenAI — AI models behind Buddy and agents
- Postmark — Sending product and campaign emails, and delivery and open tracking
- Qdrant — Search index for content and the help library
- Framer — Hosting the fetelo.com website
Other sharing.
- Within your account. Content you add is visible to the people your account, space, project, board and document permissions allow.
- Apps and assistants you connect. Data goes to outside apps and AI assistants only when you or your space admin connect them and use them (section 4).
- Form and campaign owners. If you answer a Fetelo form or campaign, your answers go to the account that owns the form.
- Legal reasons. To comply with law, a court order or a lawful request, or to protect the rights, safety and property of Fetelo, our users or others.
- Business transfers. In a merger, acquisition or sale of assets, with notice to you where required.
6. Where data is stored, how we protect it, and how long we keep it
Location and transfers. Modern Requirements is based in Canada, and Fetelo is hosted on Microsoft Azure in the United States. If you use Fetelo from outside the US, your information will be transferred to and processed in the US and in other countries where our providers operate. Where the law requires it, we use appropriate safeguards for these transfers, such as the European Commission’s Standard Contractual Clauses.
Security. We protect information with measures including: scoping every database query to its space and project; re-checking a person’s permissions on every request, including every AI and MCP tool call; storing files in a private container served through short-lived signed links; encrypting connected-app credentials with keys held in Azure Key Vault; protecting outbound calls against server-side request forgery; limiting uploads to an allowlist of file types; rate limits on AI use; and audit trails. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Retention. We keep information for as long as your account is active or as needed to provide the Services, and then as required for legal, security or dispute purposes.
- Deleted projects, boards, documents, records, automations, agents and skills go to the Recycle Bin, and deleted spaces go to Deleted Spaces. They stay there until someone with permission restores or permanently deletes them.
- MCP and App Center audit logs are kept for 90 days.
- Forgotten agent memories are kept in Recently forgotten for 30 days before removal.
- Space exports are kept for 7 days.
- When an account is deleted, we delete or anonymise its data within 30 days, except where we must keep it longer by law.
7. Your rights and choices
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. California residents may also have the right to know what we collect and to not be discriminated against for using their rights. We do not sell or “share” personal information for cross-context behavioural advertising.
To make a request, email info@fetelo.com. We will verify your identity and respond within the time the law requires. If your information is in an account owned by an organisation, we may refer your request to that organisation, because it controls that content.
You can also act directly in the App: edit your profile, choose your email and in-app notification categories, remove agent memories, and, if you are the account owner, delete your account. You may complain to your local data protection authority. In Canada, that is the Office of the Privacy Commissioner of Canada.
8. Cookies
The App uses essential cookies and similar storage to keep you signed in and to remember settings such as your theme. The Website may use Google Analytics cookies. You can control cookies in your browser settings; blocking essential cookies may stop the App from working.
9. Children
The Services are not intended for anyone under 16, and we do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. We will change the “Last updated” date at the top and, for material changes, notify account owners by email or in the App before the change takes effect.
11. Contact us
Modern Requirements
500-7030 Woodbine Ave, Markham, ON L3R 6G2, Canada
Phone: 416.469.3131
Email: info@modernrequirements.com
Fetelo product support: info@fetelo.com
Account and space deletion questions: support@fetelo.com