Privacy & trust

Company information remains a company asset

Public intelligence is available without an account. Operational tools, documents and the private assistant require authenticated access at the appropriate membership level.

Optional public-page analytics

After you choose Allow analytics, Google Analytics loads only on public pages of the main domain for signed-out visitors. It receives the fixed page title and canonical URL, the referring origin without its path or parameters, and clicks to create an account, to measure visits and improve services. Analytics cookies use pseudonymous identifiers: this is not fully anonymous data, and your browser also sends technical connection information when contacting Google. Your choice and analytics cookies are retained for up to 30 days. You can withdraw consent through Analytics preferences; the page reloads to stop the tool completely. Declining analytics does not restrict site use. Automatic form measurement, session recording, advertising features and Google analytics on sign-in, registration, company workspaces and documents are not enabled.

In-site activity reporting

FANAB records in-site action types, approved categories, sessions and estimated active time to support membership and understand work needs. No screen recording, keystroke logging, unsent text, passwords, tokens or off-site monitoring is used. Declared interests are separate from behavioural inferences; missing history is never reconstructed. Behaviour retention is configurable, with a 180-day default. Periodic cleanup does not remove documents or administrative decisions.

Isolation and access control

Account, profile, conversation and document data are separated by the internal company identity. Anonymous sessions cannot use operational APIs or access documents.

Storage and AI data flow

Profile and operational metadata are stored in the database and files in tenant-scoped object storage. Content is sent to the configured online model only after an explicit analysis action, for that task, and the output requires human review.

Minimization and upload controls

Record only what the service needs. Request size, file count and storage are limited; permitted PDF, Office and image types are checked against their binary signatures before storage or model analysis.

Sensitive and personal data

Before recording specialist personal data, pricing, guarantees or confidential documents, verify authority, consent and contractual restrictions. FANAB does not replace the company's legal and security approval.

Passwords, sessions and caching

Passwords use a salted cryptographic derivation rather than plain text. Sessions use Secure, HttpOnly and SameSite cookies, and account API responses are marked private and no-store.