This Privacy Policy describes how Need L.L.C-FZ, a limited liability company registered in the Meydan Free Zone, Dubai, United Arab Emirates, operating as Fabrika AI (“Fabrika”, “we”, “us”, “our”), collects, uses and discloses information about you in connection with the website https://fabrika.build (the “Website”), the @fabrika Telegram bot, the personal AI agents that we operate for you as Telegram bots (each, an “Agent”), the Fabrika mini app within Telegram (the “App”), and any services, content, tools, features and functionality offered on or through them (collectively, the “Services”). For the purposes of this Privacy Policy, “you” and “your” means you as the user of the Services.
Please read this Privacy Policy carefully. By using any of the Services, you acknowledge that your information will be collected, used and disclosed as described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use or access the Services.
Changes to this privacy policy
We may modify this Privacy Policy from time to time, in which case we will update the “Last revised” date at the top of this Privacy Policy. If we make material changes to how we use or disclose information we collect, we will use reasonable efforts to notify you, such as by sending you a message through the Services, and will take additional steps as required by applicable law, including obtaining your consent before using information received from Google in a new way. If you do not agree to any updates to this Privacy Policy, please do not continue using or accessing the Services.
Collection and use of information
When you use or access the Services, we collect certain categories of information about you from a variety of sources.
In addition to the specific uses described below, we use the information we collect to provide and maintain the Services, including to understand your requests, carry out tasks on your behalf, generate responses and remember information you share with your Agent; to communicate with you; to maintain the safety and security of the Services and prevent misuse; to diagnose and fix technical problems; to understand, in aggregate, how the Services are used; and to comply with applicable legal obligations and protect our rights and the rights of others. We do not sell your information, use it for advertising or use it to train artificial intelligence models.
Information you directly provide us
- Information you provide to your Agent, including messages, voice messages, photos, files and other content you send, information about yourself such as your name, city and preferences, and instructions, memory entries, reminders and scheduled tasks.
- Website logins you store in the App’s credential vault (“Vault”), such as account names, email addresses, phone numbers and passwords, which your Agent uses to sign in to websites on your behalf. Passwords are stored in encrypted form and are not disclosed to AI model providers.
- Communications with us, such as messages you send to our support and feedback you provide in the Services.
- Payment information. If you purchase a paid plan, payments are processed by a third-party payment processor or by Telegram. We receive information about your plan and the status of your payment, but not your full payment card details.
Information collected through your use of the Services
The Services include a personal AI agent that acts on your behalf when you instruct it to. Your Agent can search and browse the web, work with files in a cloud computing environment dedicated to it, remember information and use accounts that you connect.
To perform tasks for you, your Agent processes the information you make available to it, which may include the content of web pages it visits, information it enters into websites on your behalf, files it creates and data from services you connect. Where you enable this feature, your Agent’s browser retains session data, such as cookies, so that it can remain signed in to websites. Depending on how you use the Services, this may include information that is considered sensitive, for example, health-related information in a document you ask your Agent to summarize. We process such information only to carry out your requests.
Please note that the Services are not a professional advisor, and you should not rely on them for actions requiring financial, legal, medical or other professional advice or judgment.
AI model providers
The Services use artificial intelligence models provided by third parties, which we access through services such as OpenRouter. When you use the Services, we send these providers the information necessary to respond to your request, which may include your messages, information stored in your Agent’s memory, files and web content your Agent is working with and, where applicable, information received from Google. AI model providers process this information on our behalf to provide the Services and do not use it to train their models.
Information collected from Google
If you choose to connect your Google account, we request access to your Google Calendar events (calendar.events) and to your Google account email address and account identifier (userinfo.email and openid). We use this access to show, create and cancel events in your Google Calendar when you ask your Agent to do so, and to associate the connection with the correct Google account.
We use information received from Google only to provide the calendar features you request. We do not use it for advertising, we do not sell it, and we do not transfer it to third parties, except to service providers that help us provide the Services (including AI model providers that process it to respond to your request), where you instruct your Agent to share it, where required by law, or as part of a merger, acquisition or sale of assets with your prior consent.
OAuth tokens for your Google account are stored in encrypted form by our authorization provider, Nango, and are not visible to your Agent. Calendar information retrieved by your Agent is used to respond to your request and is stored in your conversation with your Agent and, where useful for your requests, in your Agent’s memory. Calendar information included in your Agent’s replies is delivered to you through Telegram. We do not create separate copies of your calendar.
Our personnel do not read information received from Google unless you give us explicit permission to view specific data, it is necessary for security purposes such as investigating a bug or abuse, it is necessary to comply with applicable law, or the information has been aggregated and anonymized for internal operations.
Fabrika does not use any data received from Google Workspace APIs — raw, aggregated, anonymized or derived — to create, train or improve generalized or foundational machine-learning or artificial intelligence models. Model behaviour is personalized only within the individual user’s own account.
Fabrika AI’s use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.
You may disconnect your Google account at any time within the Services, which stops our access and deletes the stored OAuth tokens. You may also revoke our access at any time at https://myaccount.google.com/permissions. You may request deletion of information collected from Google as described in the “Data retention and deletion” section below.
The restrictions in this section apply to information received from Google notwithstanding any broader provision of this Privacy Policy.
Information we collect automatically
We automatically collect certain information about your interaction with the Services (“Usage Data”), including:
- Usage information, such as the requests you make, the features you use and the resources consumed.
- Log data, network and device information, such as IP address, device type, operating system, app version, time zone and date and time stamps, as well as logs and error reports, which may include portions of your requests.
We use Usage Data to operate, maintain and secure the Services, to diagnose and fix problems and to understand, in aggregate, how the Services are used. The App stores certain settings, such as language and theme, on your device. The Website does not use cookies or other tracking technologies.
Information collected from other sources
We receive information about you from Telegram when you use our bots or the App, including your Telegram user ID, name, username, language and profile photo. Telegram does not share your phone number with us. If you join our waitlist, we record your Telegram user ID and the time you joined. We also receive information from services you connect, as described above. Any information we receive from other sources will be treated in accordance with this Privacy Policy.
Deidentified information
We may deidentify or aggregate information so that it can no longer reasonably be linked to you, and may use such information to operate and improve the Services. We will not attempt to re-identify such information.
Legal bases for processing
Where applicable law requires a legal basis for processing, we rely on the performance of our contract with you, to provide the Services; our legitimate interests, to secure, maintain and improve the Services; compliance with our legal obligations; and your consent, where we ask for it.
Disclosure of your information
We may disclose your information to the following categories of third parties:
- Service providers who help us provide the Services, including providers of hosting and cloud infrastructure (such as DigitalOcean and Cloudflare), AI model providers (such as OpenRouter), web browsing and search services, secure storage of access tokens (Nango), analytics and error monitoring for the App (PostHog and Sentry), and email (Google Workspace).
- Third parties with whom your Agent interacts on your behalf, for example, websites your Agent visits or submits information to at your request.
- Third parties to whom you request or direct us to disclose information.
- Payment processors, including Telegram, when you purchase a paid plan.
- Third parties in connection with or in anticipation of a business transaction such as a merger, acquisition or sale of assets. Information received from Google will be transferred in such a transaction only with your prior consent.
- Professional advisors, such as auditors, law firms and accounting firms.
We may also disclose your information for legal and security reasons, including to comply with applicable law and lawful requests, to detect and prevent fraudulent or illegal activity, to exercise or defend legal claims, and to protect the safety and security of our users, the Services and our business.
Access by our personnel
We do not review the content of your conversations with your Agent. Access to user information is limited to a small number of authorized personnel and is permitted only where necessary to respond to a request you make, to investigate and resolve technical problems, to maintain the security of the Services and prevent abuse, or to comply with applicable law. Access to information received from Google is further limited as described above.
Data retention and deletion
We retain your information for as long as your account is active or as needed to provide the Services, unless a longer retention period is required by law. You may delete memory entries, files, scheduled tasks and saved logins within the App at any time. When you delete an Agent, we delete its conversations, memory, files and saved logins within 30 days. You may request deletion of all of your information, or a copy of it, by contacting us at support@fabrika.build; we will verify your request through Telegram and respond within one month. Logs are retained for up to 30 days and backups for up to 7 days, after which deleted information is removed from them. We retain payment records for as long as required by applicable law.
International transfers
We are located in the United Arab Emirates. We store information primarily in Germany, and our service providers may process information in other countries, including the United States. Where required by applicable law, we protect such transfers with appropriate safeguards, such as the standard contractual clauses approved by the European Commission. You may request more information about these safeguards by contacting us.
Your rights
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your information, to object to or restrict certain processing, and to withdraw any consent you have given. To exercise these rights, please contact us at support@fabrika.build. We will respond within one month. You also have the right to lodge a complaint with your local data protection authority. We do not make decisions based solely on automated processing that produce legal or similarly significant effects concerning you.
Third-party websites and links
The Services may link to or interact with websites and platforms that we do not control. If you follow such links or instruct your Agent to use such websites, you should review their privacy policies and terms. We are not responsible for the privacy or security of, or information found on, these websites or platforms. Your use of Telegram is governed by Telegram’s own terms and privacy policy. This Privacy Policy applies to our bots and the App in place of Telegram’s standard privacy policy for bots and mini apps.
Children’s privacy
Our Services are not intended for anyone under 18 years of age, and we do not knowingly collect information from anyone under 18. If we become aware that we have collected information from a person under 18, we will delete it.
Data security
We use reasonable technical and organizational measures to protect your information, including encryption in transit, encryption of stored credentials and restricted access to our systems. However, no security measures are impenetrable, and we cannot guarantee perfect security.
AI agent features may present additional privacy and security considerations because they can perform tasks on your behalf based on your instructions. These include the possibility of unintended actions, incorrect or incomplete outputs, and interactions with third parties who may include misleading instructions intended to influence AI agents. We encourage you to review actions taken by your Agent and to remain attentive while using the Services.
How to contact us
If you have any questions about our privacy practices or this Privacy Policy, please contact us at support@fabrika.build or write to us at Need L.L.C-FZ, Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates.