Privacy Policy
Last updated September 2026
This Privacy Policy explains how Furnus (“Furnus,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you visit furnus.ai, complete an Assessment or Request a Proposal, contact us, or otherwise interact with the site. Please read it carefully.
1. Who we are
Furnus is a business-systems firm. This site is used to describe our work and to collect the information needed to recommend a starting point or scope a proposal.
Questions about this policy: email info@furnus.ai or call +1 (708) 363-3037.
2. Information we collect directly from you
Depending on how you use the site, you may provide:
- Contact details — name, work email, phone, company, role or title, and a website URL.
- Assessment and proposal answers — the services you select, descriptions of current work and desired outcomes, systems and URLs, budget range, ownership and delivery details, and other structured answers that can change scope, architecture, timing, or price.
- Project material — optional links and uploaded files such as requirements, screenshots, diagrams, process maps, analytics exports, policies, procedures, questionnaires, or architecture notes. These may include sensitive or regulated context if you choose to include it. Do not upload information you are not authorized to share.
- Save-and-resume email — if you choose “Save and finish later” on a proposal request, the email address we use to send a private link back to that request.
- Communications — the contents of messages you send through the contact form or by email.
You do not have to create an account to complete an Assessment or Request a Proposal. We do not collect payment card numbers on this site.
3. Information we collect automatically
When you visit the site, we and our analytics providers may collect usage data using cookies, pixels, and similar technologies, including device and browser type, IP address, pages viewed, links and buttons clicked, referring page, and marketing identifiers passed in the URL (such as utm_*, fbclid, and gclid). For intake we may also record first-touch fields such as entry page, entry call-to-action, campaign parameters, and referrer — without attaching them to your name until you submit a form. See our Cookie Notice.
4. Information we receive from third parties
- Google and Meta — if advertising or analytics tools are active, advertising and measurement identifiers associated with our ads and pixels.
- Email delivery — our mail provider may return delivery status for transactional messages we send you.
5. How we use your information
- Respond and scope — review Assessment and proposal answers, inspect material you share, decide whether we can do the work, and reply with a recommendation, a scoping conversation, or a proposal.
- Save and resume — store a draft of a proposal request and email you a private link so you can finish later. That message is transactional. We do not add the address to a marketing list because you asked for the link.
- Operate the site — keep the site working, prevent spam and abuse, and understand how the public pages are used so we can improve them.
- Analytics and advertising measurement — if those tools are enabled, measure site use and advertising. You can opt out at Your Privacy Choices.
- Legal and security — protect the site, enforce our terms, and comply with the law.
We do not sell your personal information for money. We do not use Assessment or proposal contents to train public AI models.
6. Intake data flow
When you submit an Assessment or Request a Proposal:
- Your answers are emailed to our intake mailbox (info@furnus.ai) so a person can review them.
- A record of the submission (including contact details and answers) is stored so we can continue the conversation without asking you to repeat yourself.
- Uploaded files are attached to that email. File names may be stored with the submission; file contents are not kept as a long-term object store on this site.
- If you save a proposal draft, we store the answers (not uploaded files) against a hashed token and email you the raw link. Drafts expire after 30 days.
Because this intake can include company systems, URLs, and sometimes security or compliance context, treat it as confidential business information. Share only what you are allowed to share. If a document is too sensitive for email, say so in the form and we will arrange a narrower channel.
7. Analytics and advertising technologies
When configured, we may use:
| Tool | Purpose | Data involved |
|---|---|---|
| Google Analytics 4 | Site analytics and intake funnel measurement | Usage data, device/browser, approximate location from IP, intake step events without names or emails |
| Meta (Facebook) Pixel | Advertising measurement, if enabled | Page views and conversion events |
Under some U.S. state privacy laws, disclosing identifiers to advertising platforms may be considered a “sale” or “sharing” of personal information, or “targeted advertising.” You can opt out at Your Privacy Choices. We honor the Global Privacy Control (GPC) signal.
8. Email
We send transactional email (intake confirmations, private resume links, and replies to requests) because you asked us to. Where we send non-transactional announcements, you can opt out using the unsubscribe option in the message or by emailing us. Saving a proposal request is not consent to marketing.
9. How we disclose your information
- Service providers that host the site, send email, or provide analytics — only as needed to perform those functions.
- Advertising partners (if those tools are enabled) for the measurement described above.
- Legal and safety — to comply with law, respond to lawful requests, or protect rights and safety.
- Business transfers — in connection with a merger, acquisition, or sale of assets.
We do not sell intake answers, uploaded documents, or resume-link addresses as a list. We do not share proposal materials with other clients.
10. Retention
Submitted Assessments and proposal requests are kept as long as needed to evaluate the work, correspond with you, meet legal and accounting obligations, and then deleted or archived. Saved drafts expire after 30 days and are then removed. Analytics data follows the retention settings of those providers.
11. Security
We use reasonable administrative and technical measures to protect personal information, including hashed resume tokens and rate limits on intake and draft endpoints. No method of transmission or storage is perfectly secure. Do not send secrets, passwords, or unrestricted production credentials through the public forms. If we learn of a security breach involving your personal identifying information, we will notify you as applicable law requires, including C.R.S. 6-1-716 where it applies.
12. Children’s privacy
This site is for a business audience. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.
13. Your privacy rights
Depending on where you live, you may have rights to access or know the personal information we hold about you, request deletion, request correction, and opt out of the “sale” or “sharing” of personal information and of targeted advertising. We will not discriminate against you for exercising these rights.
Colorado residents. The Colorado Privacy Act gives consumers rights to access, correct, and delete personal data, and to opt out of the sale of personal data and of targeted advertising. To opt out of advertising and analytics on this site, use Your Privacy Choices. If you visit with the Global Privacy Control signal enabled, we treat it as a valid opt-out for that browser. To exercise any other right, email info@furnus.ai. We will respond within 45 days (or tell you if we need more time). If we decline a request, you may appeal by emailing us again with “privacy appeal” in the subject. If you still disagree after the appeal, you may contact the Colorado Attorney General at stopfraudcolorado.gov.
California residents (CCPA/CPRA) may exercise the rights above, including the right to opt out of the sale/sharing of personal information for cross-context behavioral advertising, using Your Privacy Choices.
To exercise any right, email info@furnus.ai. We may need to verify your identity before responding, and you may use an authorized agent where permitted by law.
14. Third-party links
The site may link to third-party sites. Their privacy practices are governed by their own policies, and we are not responsible for them.
15. Changes
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice.
16. Contact us
Furnus
furnus.ai
Email: info@furnus.ai
Phone: +1 (708) 363-3037