Privacy policy

Introduction

Faros AI provides an operational data platform that helps managers and their teams get visibility into their software development lifecycle (SDLC) and improve their efficiency and productivity.

We understand that you are aware of and care about your own personal privacy interests, and we take that seriously. This Privacy Policy describes Faros AI’ practices and policies regarding its collection and use of your personal data with respect to this website and (as described below) Faros AI’s operational data platform, and sets forth your privacy rights.

Changes to this privacy policy

We recognize that information privacy is an ongoing responsibility, and so we will from time to time update this Privacy Policy as we undertake new personal data practices or adopt new privacy policies. Any changes are effective when we post the revised Privacy Policy, and your continued use of our website and services following these changes means that you agree to the revised Privacy Policy.

Data protection officer

Faros AI is headquartered in San Francisco in the United States. Faros AI has appointed an internal data protection officer for you to contact if you have any questions or concerns about Faros AI’s personal data policies or practices. If you would like to exercise your privacy rights, please direct your inquiry to Faros AI’s data protection officer. Faros AI’s data protection officer’s contact information is as follows:

CTO
Attention: Privacy
Faros AI, Inc.
2261 Market Street, Suite 10290, San Francisco, CA 94114
[email protected]

How we collect and use (process) your personal information

Faros AI collects personal information about its website visitors and customers. With a few exceptions, this information is generally limited to:

• name
• job title
• employer name
• work address
• work email
• work phone number

We use this information to provide prospects and customers with information and services and to follow up and respond to requests.

We do not sell personal information to anyone and only share it with third parties who are facilitating the delivery of our services.

As is true of most other services and websites, Faros AI’s website collects certain information automatically (including through use of cookies – see below for more information about our use of cookies) and stores it in log files. The information may include internet protocol (IP) addresses, the region or general location where your computer or device is accessing the internet, browser type, operating system and other usage information about the use of Faros AI’s website, including a history of the pages you view. We use this information to help us design our site to better suit our users’ needs. We may also use your IP address to help diagnose problems with our server and to administer our website, analyze trends, track visitor movements, and gather broad demographic information that assists us in identifying visitor preferences.

Third-Party Analytics and Marketing Tools

Faros AI uses third-party services to help us understand website usage, improve user experience, and communicate with prospects and customers. These services include:

Google Services: We use various Google services including Analytics, Tag Manager, and Ads to analyze website traffic, measure advertising effectiveness, and manage marketing tags. Google may collect information such as your IP address, device information, pages visited, and time spent on pages.

HubSpot: We use HubSpot for customer relationship management (CRM), marketing automation, and website analytics. HubSpot's tracking code collects information about your interactions with our website, including pages viewed, forms submitted, and engagement with our content. This helps us personalize communications and improve our marketing efforts.

Microsoft Clarity: We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our public website through behavioral metrics, heatmaps, and session replay—helping us optimize the site, prevent fraud, and improve our products and marketing. Website usage data is collected via cookies and other tracking technologies. For more on Microsoft’s data practices, see the Microsoft Privacy Statement.

These third-party services may use cookies and similar tracking technologies to collect and analyze information. For more details about the cookies we use, please see our Cookie Policy.

From time to time, Faros AI receives personal information about individuals from third parties. Typically, information collected from third parties will include further details on your employer or industry. We may also collect your personal data from other third parties sources (e.g., LinkedIn, customer service inquiries, etc.).

Faros AI has a legitimate interest in understanding how customers and potential customers use its services and website. This assists Faros AI with providing more relevant products and services, with communicating value to our visitors and customers, and with providing appropriate staffing to meet our business requirements and customer needs.

Cookies and tracking technologies

Faros AI makes available a comprehensive cookie policy that describes the cookies and tracking technologies used on the Faros AI website and provides information on how users can accept or reject them. The complete policy can be reviewed on the Cookie Policy page.

Sharing information with third parties

Except as described in this Privacy Policy, we do not otherwise reveal your personal data to non-Faros AI persons or businesses for their independent use unless: (1) you request or authorize it; (2) it is in connection with providing the services you requested; (3) the information is provided to comply with the law (for example, compelled by law enforcement to comply with a search warrant, subpoena, or court order), enforce an agreement we have with you, or to protect our rights, property or safety, or the rights, property or safety of our employees or others; (4) the information is provided to our agents, vendors or service providers who perform functions on our behalf; (5) to address emergencies or acts of God; or (6) to address disputes, claims, or to persons demonstrating legal authority to act on your behalf. We may also gather aggregated data about our services and website visitors and users and disclose the results of such aggregated (but not personally identifiable) information to our partners, service providers, advertisers, and/or other third parties for marketing or promotional purposes.

Links to third party websites

The Faros AI website connects with third-party services such as Facebook, LinkedIn, Twitter and others. If you choose to share information from the Faros AI website through these services, you should review the privacy policy of that service. If you are a member of a third-party service, the aforementioned connections may allow that service to connect your visit to our site to your personal data. We also use third-party analytics and marketing platforms such as Google Analytics, Google Tag Manager, Google Ads, and HubSpot, which may collect data about your use of our website through cookies and similar technologies. These services have their own privacy policies governing their use of your information.

Users of the Services

Additionally, in the course of providing our operational data platform (the “Faros AI Services” or the “Services”) to our customers (“Customers”), Faros AI collects data and metadata from authorized users (“Users”) through the use of the Faros AI Services. This information includes the following:

• Service Data: Data provided by User when using the Faros Services
• Account Information: Name, email address, and similar account details
• Log Data: Information logged by the Faros Services including User IP address and User device information
• Location Data: Data approximated from IP address or employee addresses
• Cookie Data: See our Cookie Policy for more details
• Third-party data: Information from third parties such as usernames and/or similar data

Such information may be collected under the direction of Customers, and Faros AI has no direct relationship with those Users whose personal data it processes in such circumstances. Faros AI will use and disclose your personal information as provided in our agreement (including a data processing agreement) regarding the Services with the Customer, which may differ from this Privacy Policy.  If you are a User of one of our Customers and would like more information about our use and disclosure of your information, or if you wish to correct, amend or delete inaccurate data, please contact the Customer.

A list of our third party sub processors for the Faros AI Services can be found here: https://security.faros.ai.

Transferring personal data to the U.S.

Faros AI has its headquarters in the United States. Information we collect about you will be processed in the United States. By using Faros AI’s website and services, you acknowledge that your personal information will be processed in the United States. The United States has not sought nor received a finding of “adequacy” from the European Union under Article 45 of the GDPR. Pursuant to Article 46 of the GDPR, Faros AI is providing for appropriate safeguards by entering binding, standard data protection clauses, enforceable by data subjects in the EEA and the UK. These clauses have been enhanced based on the guidance of the European Data Protection Board and will be updated when the new draft model clauses are approved.

Depending on the circumstance, Faros AI also collects and transfers to the U.S. personal data with consent; to perform a contract with you; or to fulfill a compelling legitimate interest of Faros AI in a manner that does not outweigh your rights and freedoms. Faros AI endeavors to apply suitable safeguards to protect the privacy and security of your personal data and to use it only consistent with your relationship with Faros AI and the practices described in this Privacy Policy. Faros AI also enters into data processing agreements and model clauses with its vendors whenever feasible and appropriate. Since it was founded, Faros AI has received zero government requests for information.

For more information or if you have any questions, please contact us at [email protected].

Data Subject rights

The European Union’s General Data Protection Regulation (GDPR) and other countries’ privacy laws provide certain rights for data subjects. Data Subject rights under GDPR include the following:

• Right to be informed
• Right of access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right of data portability
• Right to object
• Rights related to automated decision making including profiling

This Privacy Policy is intended to provide you with information about what personal data Faros AI collects about you and how it is used.

If you wish to confirm that Faros AI is processing your personal data, or to have access to the personal data Faros AI may have about you, please contact us.

You may also request information about: the purpose of the processing; the categories of personal data concerned; who else outside Faros AI might have received the data from Faros AI; what the source of the information was (if you didn’t provide it directly to Faros AI); and how long it will be stored. You have a right to correct (rectify) the record of your personal data maintained by Faros AI if it is inaccurate. You may request that Faros AI erase that data or cease processing it, subject to certain exceptions. Please note that if you do this and we have no alternative lawful reason to process your personal data, this may adversely affect your ability to access and use the website. You may also request that Faros AI cease using your data for direct marketing purposes. In many countries, you have a right to lodge a complaint with the appropriate data protection authority if you have concerns about how Faros AI processes your personal data. When technically feasible, Faros AI will—at your request—provide your personal data to you.

Reasonable access to your personal data will be provided at no cost. If access cannot be provided within a reasonable time frame, Faros AI will provide you with a date when the information will be provided. If for some reason access is denied, Faros AI will provide an explanation as to why access has been denied.

With respect to personal data of Users of the Faros AI Services, the Customer is the “data controller”, and Faros AI is the “data processor.”  If you are a User of one of our Customers and would like more information about our use and disclosure of your personal data, or if you wish to correct, amend or delete inaccurate data, please contact the Customer.

For questions or complaints concerning the processing of your personal data, you can email us at [email protected]. Alternatively, if you are located in the European Union, you can also have recourse to the European Data Protection Supervisor or with your nation’s data protection authority.

Data storage and retention

Your personal data is stored by Faros AI on its servers, and on the servers of the cloud-based database management services that Faros AI engages, located in the United States. Faros AI retains service data for the duration of the customer’s business relationship with Faros AI and for a period of time thereafter, to analyze the data for Faros AI’s own operations, and for historical and archiving purposes associated with Faros AI’s services. Faros AI retains prospect data until such time as it no longer has business value and is purged from Faros AI systems. In addition, Faros AI may have obligations to its Customers with regard to retention or destruction of data pursuant to our agreements with our Customers. All personal data that Faros AI controls may be deleted upon verified request from Data Subjects or their authorized agents. For more information on where and how long your personal data is stored, and for more information on your rights of erasure and portability, please contact us at [email protected].

Security

We have implemented reasonable measures to secure personal data from accidental loss or destruction and from unauthorized access, use, alteration and disclosure. While we follow generally accepted standards to protect such information, no method of storage or transmission is 100% secure.

Children’s data

Our website and Services are not intended for persons under the age of 18.  We do not knowingly attempt to solicit or receive information from children. If you are aware that children’s information has been collected through our website or Services, please contact us at [email protected].

California privacy rights

California’s ‘Shine the Light” law (California Civil Code Section 1798.83) permits California residents to request and obtain information from certain business entities about such entities’ disclosures of their customers’ personal information, in the prior 12-month period, to third parties for such third party’s direct marketing purposes. Faros AI does not disclose personal information of customers to third parties for third party direct marketing purposes.

Also, the California Consumer Privacy Act of 2018 (“CCPA”), as amended by the California Privacy Rights Act of 2020 (“CPRA”), provides certain rights to California residents with respect to certain business entities’ collection, disclosure and use of such residents’ personal information.  As of the date of this Privacy Policy, Faros does not currently satisfy the threshold to be regulated by the CCPA.

If you believe you have legal rights under these or other laws you wish to exercise related to our website or Services, please contact us at [email protected].  We will strive to consider such requests and comply to the extent required under then-current law.

Questions, concerns, or complaints

If you have questions, concerns, complaints, or would like to exercise your rights, please contact us at:
Faros AI, Inc.
2261 Market Street, Suite 10290, San Francisco, CA 94114
[email protected]
(415) 715-1817

We have appointed GDPR Local LTD as Faros's EU representative under Article 27 of the GDPR. You may contact our EU representative at [email protected].

This policy is effective as of October 24, 2025