Privacy Policy

From users: name, organization, and email; your onboarding answers and anything you add (text, links, documents, photos); an AI-derived profile (values fingerprint, themes, connection goal, completeness score); and usage data (match history, feedback, click events, and basic technical logs such as IP and timestamps for security).

From matchees: name, public role/organization/location, public profile/work links, the public page we found you on, AI-derived themes, and an internal relevance score — all from publicly available pages about your work.

We do not intentionally collect special-category data. Please don't paste it into onboarding.

• Run onboarding and build your profile — contract.
• Verify your email before matching — legitimate interest (anti-abuse).
• Discover and profile matchees and introduce them to you — legitimate interests, balanced against matchee rights, with notice and an unconditional opt-out (below).
• Send your digest and measure clicks to improve matching — legitimate interests / consent where required.
• Security, rate limiting, abuse prevention — legitimate interests.

We may build a short profile of you from public pages about your work and suggest a user reach out. We did this without contacting you first, relying on legitimate interests, and we make it easy to stop:

• We honor robots.txt and do not crawl pages a site disallows.
• Remove yourself with no account at the removal form or by emailing privacy@joinfrisbee.com. We delete your stored profile and add you to a permanent do-not-include list, so you aren't re-discovered.
• Every digest email includes one-click unsubscribe.

We don't sell personal data. We use these processors to operate the service: Supabase (database/hosting), Resend (email), Google Gemini (AI processing), Tavily/Exa (discovery search), and Vercel (hosting). Some may process data outside the EEA/UK under appropriate safeguards.

User data: while you have an account, then deleted within 30 days of a deletion request. Matchee data: kept only while relevant; cached page content and stale profiles are pruned on a rolling basis, while a removal/suppression record is kept indefinitely so removal is permanent. Logs and rate-limit counters are short-lived.

Depending on where you live (GDPR/UK GDPR, CCPA/CPRA, and similar) you can access, correct, delete, object to or restrict processing, and port your data, and withdraw consent. Contact privacy@joinfrisbee.com, or use the removal form. You may also complain to your data protection authority.

We use essential local storage to keep you signed in (an opaque session identifier). We do not use advertising or cross-site tracking cookies. If analytics are added later, we'll ask for consent first.

privacy@joinfrisbee.com. Frisbee is operated by the Frisbee team; our registered entity and address will be added here on incorporation.