Effective date: 1 April 2026

This Privacy Policy explains how FCOS Think Tank ("FCOS", "we", "us", or "our") collects, uses, stores, and protects your personal data when you use the FCOS platform and its products. FCOS stands for Founder Clarity Operating System.

We are committed to protecting your privacy and handling your data responsibly. This policy should be read alongside our Terms of Service.

1. Who We Are

FCOS Think Tank is a United Kingdom-based company that operates the Founder Clarity Operating System (FCOS) — a suite of AI-powered business tools for founders and teams.

Our platform is available at builder-api.fcosthinktank.co.uk and includes the following products: FCOS Synapse (document workspace), FCOS Sprint (file manager), FCOS Build (coding IDE), and FCOS Think Tank (AI chat).

For the purposes of UK data protection law (UK GDPR), FCOS Think Tank is the data controller for the personal data we process through the platform.

2. What Data We Collect

2.1 Account Information

When you create an account, we collect:

• Your name or display name
• Email address
• Password (stored in hashed form)
• Account preferences and settings
• Subscription tier and billing information (if applicable)

2.2 Content You Create

When you use our products, we store the content you create, including:

• Pages and documents created in FCOS Synapse
• Files uploaded to FCOS Sprint
• Code written in FCOS Build
• Chat conversations in FCOS Think Tank

2.3 Usage Data

We collect basic usage data to help us operate and improve the platform, including:

• Pages and features accessed
• Timestamps of activity
• Browser type and device information
• IP address

2.4 API Keys

If you provide API keys for third-party services (such as AI provider keys), these are stored in your browser's local storage only. We do not transmit or store your API keys on our servers. Your API keys remain entirely under your control.

2.5 Cookies and Local Storage

We use minimal, functional cookies and browser local storage only. See Section 8 for full details.

3. How We Use Your Data

We use the data we collect for the following purposes:

• To provide the service. Storing and serving your content, authenticating your account, and delivering the features you use.
• To improve the platform. Understanding how the platform is used so we can fix issues, improve performance, and develop new features.
• To communicate with you. Sending service-related messages such as account notifications, security alerts, and updates about changes to our terms or policies.
• To ensure security. Detecting and preventing abuse, fraud, and unauthorised access.
• To comply with legal obligations. Meeting our legal and regulatory requirements under UK law.

We do not use your data for advertising, profiling, or automated decision-making.

4. AI Processing

FCOS integrates AI features across its products. When you use AI-powered features, please be aware of the following:

4.1 How AI Processing Works

When you use AI features (such as AI-assisted writing in Synapse, code suggestions in Build, or conversations in Think Tank), the relevant content — such as your prompt, selected text, or context — may be sent to third-party AI providers for processing. Our current AI providers include:

• OpenAI — OpenAI Privacy Policy
• Anthropic — Anthropic Privacy Policy

4.2 What We Do Not Do

• FCOS does not use your data to train AI models.
• FCOS does not provide your data to AI providers for the purpose of training their models.
• We only send the minimum content necessary to fulfil your AI request.

4.3 Third-Party AI Provider Policies

Third-party AI providers process data according to their own privacy policies and terms of service. We encourage you to review their policies. We select providers that offer appropriate data handling commitments, but we cannot control how third parties process data once it leaves our platform.

5. Data Storage

5.1 Location

Your data is stored on servers located in the United Kingdom. We do not intentionally transfer your data outside the UK, except where necessary for AI processing (see Section 4) or where a third-party provider operates infrastructure in other jurisdictions.

5.2 Storage Method

User content is stored as JSON files on disk on our servers. This approach keeps your data structured and accessible for export.

5.3 No Sharing with Third Parties

We do not sell, rent, or share your personal data or content with third parties, except:

• With AI providers as described in Section 4, solely to provide AI features you actively use.
• With our hosting provider, solely for the purpose of infrastructure and server operation.
• Where required by law, regulation, or valid legal process.

6. Data Retention

We retain your data for as long as your account is active and you continue to use the platform.

If your account is terminated (whether by you or by us):

• Your data will remain available for export for thirty (30) days after termination.
• After the 30-day period, we may permanently delete your data from our servers.
• Certain data may be retained for longer if required by law or for legitimate legal purposes (such as resolving disputes).

You may request deletion of your data at any time by contacting us (see Section 13).

7. Your Rights (UK GDPR)

Under the UK General Data Protection Regulation (UK GDPR), you have the following rights regarding your personal data:

• Right of access. You have the right to request a copy of the personal data we hold about you.
• Right to rectification. You have the right to request correction of any inaccurate or incomplete personal data.
• Right to erasure. You have the right to request deletion of your personal data, subject to certain legal exceptions.
• Right to data portability. You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
• Right to restriction of processing. You have the right to request that we limit how we use your data in certain circumstances.
• Right to object. You have the right to object to our processing of your personal data in certain circumstances.

To exercise any of these rights, please contact us at support@fcosthinktank.co.uk. We will respond to your request within one month, as required by law.

If you are not satisfied with how we handle your request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) — the UK's data protection authority. You can contact the ICO at ico.org.uk.

8. Cookies

FCOS uses a minimal approach to cookies and browser storage:

8.1 What We Use

• Functional cookies only. We use cookies and browser local storage strictly for functional purposes — such as keeping you logged in and remembering your preferences.
• Local storage for settings. User preferences, theme settings, and API keys (if provided) are stored in your browser's localStorage. This data never leaves your browser unless you explicitly use a feature that requires it.

8.2 What We Do Not Use

• We do not use tracking cookies.
• We do not use advertising cookies.
• We do not use third-party analytics cookies.
• We do not participate in cross-site tracking or retargeting.

9. Third Parties

We work with a limited number of third parties to operate the platform:

• AI providers (OpenAI, Anthropic). Used to power AI features when you actively use them. Content is sent only when you trigger an AI action. See Section 4 for details.
• Hosting provider. Our servers are hosted by a third-party infrastructure provider located in the United Kingdom. They provide server infrastructure only and do not access your content.

We do not sell your data to any third party. We do not share your data with advertisers, data brokers, or any party not described in this policy.

10. Children

FCOS is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children under 18.

If we become aware that we have collected personal data from a person under 18, we will take steps to delete that data promptly. If you believe that a child under 18 has provided us with personal data, please contact us at support@fcosthinktank.co.uk.

11. Security

We take the security of your data seriously and implement appropriate technical and organisational measures to protect it, including:

• HTTPS. All connections to the FCOS platform are encrypted using HTTPS/TLS.
• Encrypted connections. Data in transit between your browser, our servers, and third-party AI providers is encrypted.
• Access controls. Access to user data on our servers is restricted to authorised personnel and systems only.
• Authentication. User passwords are stored in hashed form. We never store passwords in plain text.

While we take reasonable steps to protect your data, no system is completely secure. We cannot guarantee absolute security, and you use the platform at your own risk.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons.

When we make material changes, we will:

• Update the "Effective date" at the top of this page.
• Post the revised policy on the platform.
• Where appropriate, notify you by email or through an in-app notification.

Your continued use of the platform after the updated policy takes effect constitutes your acceptance of the revised Privacy Policy. If you do not agree to the changes, you should stop using the platform.

13. Contact

If you have any questions about this Privacy Policy, want to exercise your data rights, or need to contact us for any reason, please reach out to:

• Email: support@fcosthinktank.co.uk
• Platform: FCOS Think Tank — builder-api.fcosthinktank.co.uk

We aim to respond to all enquiries within a reasonable timeframe and within the legally required periods for data subject requests.

FCOS Think Tank — Founder Clarity Operating System. This Privacy Policy was last updated on 1 April 2026.