Privacy Policy

For personal data about account holders and website visitors, Fulcrum acts as the data controller.

For personal data inside the calls, messages, leads, and records we process on a customer's behalf (Customer Content), the business customer is the controller and Fulcrum is a processor acting on documented instructions under our Data Processing Addendum.

Contact for all privacy matters: [email protected].

Account and billing data you provide: name, business name, email, phone, role, and payment details. Card data is handled by our payment processor and is not stored by us.

Customer Content processed on your behalf: call audio and transcripts, chat threads, contact and lead details, appointments, quotes, and invoices.

Usage and technical data collected automatically: IP address, device and browser type, pages viewed, timestamps, and diagnostic logs. Cookies are described in the Cookie Policy.

To provide, maintain, and secure the Service and perform our contract with you. To prevent fraud and abuse and protect our users (legitimate interests). To communicate about your account and, where permitted, send marketing with an opt-out in every message. To meet legal obligations such as tax and accounting.

We do not use Customer Content to train third-party AI models. See the AI Data Training Policy.

With service providers and subprocessors that help us run the platform, such as cloud hosting, telephony and messaging carriers, payment processing, AI model providers, and error monitoring, under contracts requiring confidentiality and security.

With professional advisors and authorities where required by law, and in connection with a merger or acquisition subject to this Policy.

We do not sell personal data and do not share it for cross-context behavioral advertising.

We may process data in countries other than yours. Where we transfer personal data internationally we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses and equivalent mechanisms, consistent with Australian Privacy Principle 8.

We keep account and billing data while your account is active and for a reasonable period afterward to meet legal requirements, then delete or anonymize it.

Customer Content is retained according to your settings and instructions. After cancellation it is held for 90 days and then deleted, as described in the Refund and Cancellation Policy.

We apply technical and organizational measures appropriate to the risk, including encryption in transit and at rest, role-based access control, per-tenant isolation, and audit logging. The Security Overview describes our posture in more detail.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal data, to restrict or object to processing, and to withdraw consent.

EEA and UK residents may complain to their supervisory authority. Australian residents have rights under the Australian Privacy Principles and may complain to the OAIC. California residents may request to know, delete, and correct personal information without discrimination.

For rights over Customer Content, contact the business that uses Fulcrum to serve you. We will assist that business as its processor. For anything else, email [email protected].

The Service is for businesses and is not directed to children. We do not knowingly collect personal data from children under 16. If you believe a child has provided us data, contact us and we will delete it.

We may update this Policy and will post the new version here with a new effective date, with additional notice where appropriate.

Privacy enquiries and complaints: [email protected].