Privacy Policy

Last updated: 3 July 2026

1. Who we are

This Privacy Policy describes how Fours AI ("Fours", "we", "us", "our") processes personal data through our website at https://foursai.app and the Fours marketing platform (the "Service"). Fours AI is operated from the United Kingdom and is the data controller for the personal data described in this policy.

Contact: foursaiapp@outlook.com

2. Scope

This policy applies to visitors, account holders, and authorised users of the Service. The Service is intended for users aged 18 or over and is not directed at children.

3. Personal data we collect

  • Account data: name, email address, password (hashed), avatar URL, role, marketing-consent flag.
  • Profile and business data: venue or brand name, location, audience information you choose to provide.
  • Connected social account data: profile metadata, post insights, follower-aggregate metrics, and access/refresh tokens obtained via OAuth from Meta (Instagram, Facebook) and YouTube. Tokens are encrypted at rest.
  • Uploaded media and campaign assets: images, logos, copy, references and any other content you upload.
  • Usage data: pages visited, features used, generations created, error logs, IP address, device and browser metadata.
  • Billing data: subscription plan, billing cycle, last-four payment card digits, billing address and invoice history. Card numbers are processed by Stripe and never stored on our servers.
  • Communications: messages you send us via email, support forms or in-app feedback.

4. How we use your personal data

  • Provide, secure and maintain the Service and your account.
  • Generate AI marketing outputs (copy, flyers, strategies, reports) on your behalf.
  • Pull analytics from your connected Meta or YouTube accounts to populate dashboards, reports and recommendations.
  • Process subscription payments, manage trials and renewals, and provide invoices.
  • Send transactional emails (account, billing, security) and, with your consent, marketing emails.
  • Detect, prevent and respond to abuse, fraud and security incidents, including verifying activity under our Referral Programme (e.g. detecting self-referrals, duplicate accounts, shared payment methods, artificial sign-ups, refunds, disputes and chargebacks) and issuing or withholding referral rewards.
  • Comply with legal obligations and enforce our Terms of Service and Referral Programme Terms.

5. Lawful bases (UK GDPR / EU GDPR)

  • Contract — to deliver the Service you have subscribed to.
  • Legitimate interests — to secure, improve and analyse the Service.
  • Consent — for non-essential cookies, optional integrations and marketing email.
  • Legal obligation — for tax, accounting and statutory disclosures.

6. AI processing and AI-generated content

Fours uses third-party AI providers (currently OpenAI and Anthropic) to generate marketing copy, flyers, campaign strategies and reports. Inputs you provide (prompts, uploaded references, account context) are transmitted to those providers solely to fulfil your request. AI outputs are produced automatically, may be inaccurate or incomplete, and must be reviewed by you before use. We do not knowingly use your inputs to train third-party foundation models; we rely on the providers' enterprise-grade no-training settings where available.

7. Cookies and tracking

We use strictly necessary cookies for session management and authentication, and limited first-party analytics cookies to understand product usage. You can control non-essential cookies in your browser. We do not run third-party advertising trackers on the Service.

8. Subprocessors and third parties

We share personal data with the following categories of processors, under written agreements that meet UK/EU GDPR standards:

  • Stripe — payments and subscription management.
  • Meta Platforms (Instagram Graph, Facebook Graph) — when you connect those accounts.
  • Google (YouTube Data API) — when you connect a YouTube account.
  • OpenAI, Anthropic — AI generation.
  • Cloud hosting and database providers — to host the Service and store account, billing and content data.
  • Email service providers — to deliver transactional and (with consent) marketing email.
  • Ticketing platforms — only where you explicitly connect them.

An up-to-date subprocessor list is available on request from foursaiapp@outlook.com.

9. International transfers

Some processors are located outside the UK and EEA, including the United States. Where this is the case we rely on UK International Data Transfer Addenda, EU Standard Contractual Clauses and equivalent safeguards.

10. Data retention

We retain account, content and analytics data for as long as your account is active. After cancellation we retain billing records for at least 6 years to comply with UK tax law, and other personal data for up to 90 days before secure deletion or anonymisation, unless a longer period is required by law or to resolve disputes.

11. Security

We apply industry-standard administrative, technical and organisational safeguards, including TLS in transit, encryption at rest for sensitive fields (including OAuth tokens), least-privilege access controls, audit logging and scoped service credentials. No system is completely secure; we will notify affected users and the ICO within statutory timeframes if a breach materially affects you.

12. Your rights

Under UK and EU GDPR you have the right to:

  • access the personal data we hold about you;
  • request rectification of inaccurate data;
  • request erasure of your data;
  • restrict or object to processing;
  • data portability;
  • withdraw consent at any time where processing is based on consent;
  • lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.

To exercise these rights, email foursaiapp@outlook.com. We respond within one month.

13. Children

The Service is not available to anyone under 18. We do not knowingly collect personal data from minors. If you believe we hold such data, contact us and we will delete it.

14. Changes

We may update this policy from time to time. Material changes will be notified by email or in-product banner at least 14 days before they take effect.

15. Contact

Fours AI
Email: foursaiapp@outlook.com
Governing law: England and Wales.

See also our Terms of Service.