Privacy Policy

1. Who we are

Frederick AI (“Frederick”, “we”, “us”) provides a platform where companies run their business with AI agents. This policy covers our website frederick.ai, the Frederick app at app.frederick.aiand our APIs (together, the “Services”).

We are based in Sydney, Australia and handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth). Where the EU or UK GDPR or US state privacy laws apply to you, we also respect the rights they give you (see “Your rights”).

2. Information we collect

Information you give us

• Account details — name, email address and profile picture, usually from the Google or LinkedIn account you sign in with.
• Your content — prompts and chat messages, files and documents you upload, company context and memory, project and app code, schedules, and anything agents create for you.
• Team information — people you invite to a project and their roles.
• Payment details — handled by Stripe. We receive your billing name, country, plan and the last four digits of your card, never the full card number.
• Communications — messages you send us, feedback and survey answers.
• Public content — posts, comments and votes you publish in the Frederick community.

Information from accounts you connect

When you connect a third-party account (see “Connected accounts”), we receive an access token and basic profile details for that account, such as its ID, handle, display name and profile picture, plus the data needed for the feature you use.

Information collected automatically

• Usage and device data — pages and features used, actions taken, IP address, browser and device type, approximate location derived from IP, and timestamps.
• Product analytics — we use Vercel Analytics, Microsoft Clarity and PostHog to understand how the product is used and to fix problems. Session replays mask text you type into inputs.
• Agent activity — logs and traces of what agents did on your behalf, including tool calls and errors, used to run, debug and improve the Services.
• Browser and desktop sessions — when an agent uses a cloud browser or desktop for you, the session may be recorded as video so you can review what happened.
• Cookies — needed to keep you signed in and remember preferences, plus analytics cookies as described above.

3. How we use information

• Provide the Services: run agents, generate content, build and host apps, store files and keep your company context.
• Act on your instructions through connected accounts, such as publishing a post you approved.
• Process payments, credits, subscriptions and domain purchases.
• Keep the Services secure: prevent abuse, fraud and spam, and enforce our Terms.
• Understand usage, fix bugs and improve features.
• Send service messages (security, billing, invitations, agent notifications) and, if you have not opted out, product updates.
• Comply with legal obligations and resolve disputes.

AI training. We do not sell your content, and we do not use the content of your private projects to train generalised AI models. Our AI model providers process your content to return results to you under their API terms, which do not permit them to train their models on it.

If you are in the EU or UK, we rely on performance of our contract with you, our legitimate interests (security, improving the Services), your consent (for example optional cookies or marketing) and legal obligations.

4. AI agents and model providers

Frederick’s agents are powered by third-party AI models. To answer a request, the relevant prompts, files and context are sent to the model provider handling that task, such as OpenAI, Anthropic, Google (Gemini), Groq or Moonshot AI. Agents can also call search, media and voice services (for example Exa, Tavily, Stability AI, Together AI, Replicate and ElevenLabs) when a task needs them.

AI output can be wrong or incomplete. Review important content before relying on it, especially before an agent sends, publishes or deploys something on your behalf.

5. Connected accounts (X, Instagram, YouTube)

You can connect social media accounts to a project so agents can draft, schedule and publish content and read how it performs. Connections use each platform’s official OAuth sign-in. We never see or store your password for those platforms.

What we access and why

How we handle it

• Access tokens are encrypted at rest and only used by our servers to act on that one account. They are never shown to agents or other users.
• Agents never publish, reply, comment or delete on your behalf without your approval, unless you have explicitly turned on automatic publishing for that account where the platform allows it.
• We store only what is needed: the account’s ID, handle, display name and picture, tokens, the content you publish through Frederick and its performance data. We refresh or delete stored platform data at least every 30 days.
• We do not sell platform data, share it with other customers, or use it for advertising.

Disconnecting and deletion

You can disconnect an account at any time from your project’s Connectors page. We then revoke our access where the platform allows it and delete the stored tokens and account data within 7 days. You can also remove Frederick’s access from the platform itself:

• Google / YouTube: Google security settings
• X: Connected apps
• Instagram: Settings → Website permissions → Apps and websites

If you revoke access from the platform, we delete the related data within 30 days of noticing the revocation.

YouTube

Frederick uses YouTube API Services. By connecting YouTube you also agree to the YouTube Terms of Service, and Google’s handling of your data is described in the Google Privacy Policy.

Google API Limited Use

Frederick’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to develop, improve or train generalised AI or machine-learning models.

6. Apps you build and their users

Frederick lets you build and publish your own apps, including apps with sign-in, databases, payments and custom domains. For the personal information of your app’s users, you are responsible for it (the “controller”) and Frederick processes it only on your behalf to host and run your app (the “processor”).

You are responsible for giving your users a privacy notice, having a lawful basis to collect their data, and handling their requests. We will help you respond where we reasonably can. Requests that reach us from your app’s users will be passed to you.

7. How we share information

We share personal information only as described here:

• With your team — members of a project can see that project’s content, chats, files and connected accounts (not their tokens).
• Publicly, when you choose — community posts, published apps and anything you or an approved agent publish to a connected account.
• With service providers who run parts of Frederick for us under contracts that limit their use of the data. They include:

• With connected platforms — content you approve for publishing is sent to that platform.
• For legal reasons — to comply with law or valid legal requests, or to protect the rights, safety and property of you, us or others.
• In a business transfer — if Frederick is involved in a merger, acquisition or sale of assets, under this policy’s protections.

We do not sell personal information or share it for cross-context behavioural advertising.

8. International transfers

Our team is in Australia and many of our providers are in the United States, Europe and elsewhere, so your information may be processed outside your country. We take reasonable steps to make sure overseas recipients protect it consistently with Australian law and, for EU and UK data, rely on appropriate safeguards such as Standard Contractual Clauses.

9. How long we keep information

• Account and project data: for as long as your account is active, and deleted within 30 days after you ask us to delete your account, except backups which roll off within a further 30 days.
• Files you delete: removed from storage after a short recovery window.
• Connected-account tokens and data: deleted within 7 days of disconnecting.
• Browser and desktop session recordings: kept so you can review them and deleted with the project or on request.
• Billing records: kept as long as tax and accounting laws require (generally 7 years in Australia).
• Security logs: kept for a limited period to protect the Services.

10. Security

We use encryption in transit, encryption at rest for sensitive secrets such as connected-account tokens and app secrets, access controls scoped to your projects, and least-privilege access for our team. No system is perfectly secure, so please use a strong, unique sign-in and tell us straight away at hello@frederick.ai if you suspect a problem. If a data breach is likely to cause you serious harm we will notify you and the regulator as the law requires.

11. Your rights and choices

Depending on where you live, you can ask us to:

• access the personal information we hold about you, or get a copy of it in a portable format
• correct information that is inaccurate or out of date
• delete your account and personal information
• restrict or object to certain processing, or withdraw consent you have given
• stop sending you marketing emails (use the unsubscribe link at any time)

Email hello@frederick.ai from the address on your account and we will respond within 30 days. We may need to confirm your identity first. We will not treat you differently for exercising your rights.

If you are unhappy with our response you can complain to the Office of the Australian Information Commissioner at oaic.gov.au, or your local data protection authority if you are in the EU or UK.

12. Deleting your data

To delete your Frederick account and its data:

• Disconnect any connected accounts from each project’s Connectors page (optional — account deletion removes them too).
• Email hello@frederick.ai with the subject “Delete my account” from the email address on your account.
• We confirm the request and delete your account, projects, files, connected-account tokens and related data within 30 days, except records we must keep by law.

To delete only the data we received from Instagram or another connected platform, disconnect that account in Frederick or remove Frederick from the platform’s app settings. Requests from Meta on your behalf are handled the same way, and you will receive a confirmation code you can use to check the status with us.

13. Children

Frederick is a business tool and is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.

14. Changes to this policy

We will update this policy as Frederick changes. If a change is significant we will tell you in the app or by email before it takes effect. The date at the top shows when it was last updated.

15. Contact us

Frederick AI · 11 York St, Sydney NSW 2000, Australia · hello@frederick.ai