Privacy Policy

figtree is a product of Forgewell, LLC, 56 Broad St STE 14266, Boston, MA 02109. Forgewell, LLC is the controller of personal information described in this policy unless another arrangement is stated in writing.

We collect account information such as your name, email address, password hash, plan, subscription status, and communications with us. We also process the family information you choose to add, including names, relationships, dates, places, occupations, biographical stories, tree descriptions, and conversations with the family historian.

When you use voice mode, microphone audio is transmitted to our AI service provider so the conversation can take place. figtree stores conversation messages or transcripts and resulting tree updates, but does not store raw microphone audio as part of your family tree. We also receive basic technical and security information such as session data, request logs, IP-derived information, browser type, and error details.

We use information to create and secure accounts; display, organize, and maintain family trees; provide text and voice historian features; remember conversation history; process subscriptions; respond to requests; prevent fraud and abuse; diagnose failures; comply with law; and improve the reliability and usefulness of figtree.

We use PostHog to understand which product features are used and where people encounter friction. PostHog receives a pseudonymous account identifier, plan and access status, browser and device information, page paths without query strings, and product actions such as creating a tree, sending a historian message, starting voice mode, or beginning checkout.

We also use Swell Web Analytics to measure page views, website performance, and interactions such as link clicks, button clicks, and form submissions. Swell session replay is enabled with input values and all displayed application text masked in the browser before replay data is sent. Email verification and password-reset token pages are excluded from Swell collection.

PostHog session replay is configured with maximum masking: input values, displayed text, images, video, canvas content, request and response bodies, headers, query strings, and console logs are not recorded. Masking happens in your browser before replay data is sent. We do not include family names, people's names, stories, historian messages, photo content, tree names, or form values in our custom analytics events. Browser Do Not Track preferences are honored.

To provide the family historian, we send relevant prompts, conversation history, and family-tree context to OpenAI. Voice mode also sends live audio needed for transcription and response. AI systems can make mistakes, so you should review suggested people, dates, relationships, and stories before relying on them. Please avoid submitting secrets or information you are not authorized to share.

Stripe processes checkout, payment methods, billing contact information, invoices, taxes, and subscription status. figtree receives identifiers and subscription details needed to manage access, but does not store full payment card numbers. Stripe processes payment information under its own privacy terms.

We share information only as needed with service providers that support hosting, databases, security, communications, payments, and AI features; when you direct us to share it; to protect users, Forgewell, or others; in connection with a merger, financing, acquisition, or sale of assets; or when required by law.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. Family-tree content is private to the account unless you intentionally use a feature that makes it available to others.

figtree uses an HTTP-only session cookie to keep you signed in and protect access to your account. We use administrative, technical, and organizational safeguards designed to protect information, but no online service can guarantee absolute security. You are responsible for using a strong, unique password and protecting access to your account.

We retain account and family information while your account is active and as reasonably needed to provide the service. You can permanently delete your account from Settings; this deletes your family trees, people, relationships, stories, and historian conversations from the primary application database and cancels an active subscription. Limited records may remain temporarily in backups or longer where necessary for billing, fraud prevention, security, dispute resolution, or legal compliance.

You may update your account and family information in figtree and delete your account from Settings. Depending on where you live, you may also have rights to access, correct, export, delete, restrict, or object to certain processing, or to appeal a privacy-request decision. To make a verified request, email legal@usefigtree.com. We will not discriminate against you for exercising applicable privacy rights.

figtree is not directed to children under 13, and children under 13 may not create accounts. An adult account holder may add information about family members, including children, only when authorized and appropriate. Please consider the privacy of living relatives before adding sensitive stories or making information available to others.

Forgewell is based in the United States, and information may be processed in the United States and other countries where our service providers operate. Those countries may have different data-protection laws from your home jurisdiction.

We may update this policy as figtree evolves. We will post the revised policy here and change the “Last updated” date, and will provide additional notice when required by law. Privacy, export, deletion, and legal requests may be emailed to legal@usefigtree.com or mailed to Forgewell, LLC, 56 Broad St STE 14266, Boston, MA 02109. Forgewell, LLC's registered agent is Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713 US.