Privacy Policy

Fihrist.io is operated by Fihrist. Fihrist is the controller of personal information covered by this policy. Contact sales@fihrist.io for privacy or data-protection requests.

The early-access form collects your company or agency name, full name, work email, optional website, and any note you provide. Information entered when booking through Google Calendar is handled under Google's own terms.

For security and abuse prevention, we may create irreversible hashes from IP and email addresses and process limited request, browser, and device information.

OpenPanel measures aggregate page views, referrers, campaign parameters, device categories, and interactions such as CTA clicks and form starts. We do not send names, email addresses, company domains, or form notes to analytics, and session replay is disabled.

We process information to respond to requests, run demos and early access, secure the service, prevent misuse, meet legal obligations, and improve Fihrist.

Depending on where you are located, the legal basis may include steps taken at your request before a contract, compliance with law, legitimate interests that do not override your rights, or consent where separately required under the GDPR, Türkiye's KVKK, or other applicable law.

Applications are delivered to a private Discord channel and may be stored in Twenty CRM to manage follow-up. Vercel hosts the site, OpenPanel provides privacy-focused analytics through our domain, and Google Calendar handles demo scheduling.

These providers may process data outside your country. Where required, we seek to use safeguards recognized by applicable data-protection law. We do not sell personal information or share it for behavioral advertising.

Cloudflare Turnstile protects the form from automated abuse. It may process limited technical signals such as IP address, TLS fingerprint, user agent, site key, and referring domain for security rather than advertising profiling.

See the Cloudflare Turnstile Privacy Policy for details.

We normally retain application information for no longer than 12 months after the last contact, unless law or an active dispute requires longer retention. Rate-limit hashes remain in process memory for roughly one hour and are not written to a permanent database.

We currently use no behavioral advertising cookies. Interface preferences may be stored locally on your device, while security and analytics providers may use limited technical identifiers.

Depending on applicable law, you may have rights to access, correct, delete, restrict, object, receive a portable copy, or withdraw consent. You may also complain to a relevant supervisory authority.

Send a request with enough information for us to verify your identity to sales@fihrist.io. We will respond within the period required by law.

We use reasonable technical and organizational measures against unauthorized access, loss, and misuse, but no internet transmission is perfectly secure. Fihrist is not intended for people under 18 and we do not knowingly collect children's data.

We may update this policy as the service or law changes. Material changes will be highlighted here. See our Terms of Use for the rules governing Fihrist.