Privacy policy
fydbek (fydbek.com) is a service where agencies and their clients collect feedback on websites, and where people and AI agents work with that feedback. This policy explains what personal data we process, why, and for how long. The Czech version is the governing one, this is a translation.
Who processes the data
The service is operated by codebros design s.r.o., company ID 19971419, Pustkovecká 363/41, Pustkovec, 708 00 Ostrava, Czech Republic. Privacy contact: hello@fydbek.com.
For account and sign-in data we are the controller. For content that an agency and its clients put into fydbek (feedback, screenshots, comments, data about invited people), the agency that uses fydbek is the controller and we are its processor. We process that content only on the agency's instructions and under the terms of service. You can contact the agency directly about such data, or contact us and we will forward your request.
What data we process
- Account: email, name, and a profile photo if you sign in with Google. Membership in organizations and projects and your role.
- Sign-in: sessions with IP address and browser information, short-lived records for limiting sign-in attempts.
- Feedback from websites: the feedback text, suggested text edit, a screenshot of the visible part of the page when it was sent, page address and title, the selected element (its text, position and style), browser, operating system, window size, console error messages and failed network requests. Form field values are replaced with dots in the screenshot and in the context, and parameters such as token, key, secret, password and code are removed from addresses.
- Threads: comments, attachments and status changes, including who made them and, for actions by agents, through which app (for example Claude).
- Invitations and notifications: email addresses of invited people and email notification settings.
- Widget on a website: your browser stores a sign-in token for that website. The widget stores and sends nothing for regular visitors of the website.
Why we process it
- To provide the service: account, sign-in, collecting and managing feedback, email notifications (performance of a contract, Art. 6(1)(b) GDPR).
- For security and abuse prevention, for example limiting sign-in attempts and Cloudflare Turnstile checks that a form is not sent by a bot (legitimate interest, Art. 6(1)(f) GDPR).
- Content added by an agency and its clients is processed as a processor on the agency's instructions.
We do not use analytics, advertising or tracking tools. We do not sell data and do not use it to train AI models.
Who has access to the data
- Cloudflare, Inc.: hosting, database and file storage in the EU jurisdiction, sending emails and sign-in protection (Turnstile).
- Google LLC: only if you sign in with a Google account.
- AI agents and tools connected by the agency: an agency can connect its own agents (for example Claude or ChatGPT) or task tools to fydbek. They get access to feedback within the scope the agency approves. The agency decides about such connections, not us.
We store data in the EU. Cloudflare and Google are US companies. Where their services involve transfers to third countries, these are covered by the EU standard contractual clauses or the EU-US Data Privacy Framework.
How long we keep the data
- Your account and its data while you use the account. You can ask us to delete your account at hello@fydbek.com.
- Feedback, comments and files until the agency deletes them. A deleted project or organization can be restored for 30 days, then the data including files is deleted permanently.
- A sign-in link is valid for 10 minutes, a widget sign-in on a website for at most 30 days since its last use.
- Records for limiting sign-in attempts only briefly.
Cookies
The dashboard (app.fydbek.com) uses only a necessary sign-in cookie. Cloudflare Turnstile on the sign-in page may use its own technical data for the check. We use no other cookies.
Your rights
You have the right to access your data, to have it corrected or deleted, to restrict processing, to data portability, and to object to processing based on legitimate interest. Write to hello@fydbek.com, we reply within one month at the latest. You can also file a complaint with the Czech Office for Personal Data Protection (uoou.gov.cz) or with the supervisory authority in your country.
Changes
We may update this policy, for example when we add a feature or a supplier. We announce significant changes in advance by email or in the dashboard.
The Chrome extension has its own page: Chrome extension privacy (Czech).