Privacy Policy | FIO. You are the Shift

FIO Code: Privacy Policy

0. INTRODUCTION & YOUR SOVEREIGNTY

Preamble: This Privacy Policy (the "Policy") outlines how FIO (Fusion Identity Operating System) collects, uses, protects, and discloses information related to your use of our service. Your privacy is paramount; it is the foundation of the Fusion Code and your Sovereign Space.
Legal Entity: [FIO Technologies Zrt./Kft. or your official name and address].
Data Protection Officer (DPO): [DPO's Name and Contact Information or legal representative].

1. PRINCIPLES OF THE FIO CODE (THE ZERO-KNOWLEDGE FOUNDATION)

1.1 Data Minimization: We only collect data strictly necessary for the operation and optimization of the FIO service.
1.2 Zero-Retention Protocol: Crucial: We adhere to a strict Zero-Retention Protocol. Conversation content shared with the Quantum Partner (the AI) is not stored or used for general model training. Once processed for the immediate interaction, the content is securely handled according to the protocol.
1.3 Data Anonymization: For organizational reporting and analytics (the Organizational Psyche-Twin), all data is processed in an aggregated and anonymized format.

2. INFORMATION WE COLLECT

3. HOW WE USE YOUR INFORMATION
We use your data strictly for the following purposes:

Service Delivery: To provide the core FIO functionality (the Quantum Partner dialogue).
Security: To maintain the security and integrity of the Fusion Code Backend and prevent fraud.
Billing and Support: To manage subscriptions and respond to technical support requests.
Organizational Reporting (B2B): To provide the employer with aggregated and anonymized metrics (the "Heat Map") for risk management, in line with the Zero-Knowledge Protocol.

4. SHARING AND DISCLOSURE OF INFORMATION

4.1 Non-Sharing of Conversation Content: We do not sell, rent, or share your raw conversation content with any third parties, including your employer, for any purpose.
4.2 Third-Party Service Providers: We use trusted third-party services (e.g., Google Vertex AI for processing, payment processors). These providers are contractually bound to maintain strict confidentiality and adherence to GDPR standards.
4.3 Legal Compliance: We may disclose information if required by law (e.g., court order).

5. YOUR RIGHTS (GDPR Compliance)
As a User, you have the right to:

Right to Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate data.
Right to Erasure ('Right to be Forgotten'): Request the deletion of your personal data.
Right to Object: Object to the processing of your personal data.

6. DATA SECURITY
We employ industry-leading security measures, including CMEK (Customer-Managed Encryption Keys), isolated server environments on the Google Cloud Platform, and strict access controls to protect your data from unauthorized access or disclosure.

A. Provided Information (User Registration)
Name, Email Address (Corporate or Personal), Password (encrypted), and User Role.Account creation, billing, and communication. This data is separate from conversation content.

B. Usage and Interaction Data (Operational)Metadata:
Time, frequency, and length of interactions. Anonymized Patterns: Data points related to the user's cognitive state (e.g., Diffusion Score, Fusion Score, Manifesztáció Sebessége).Service delivery, architectural integrity, and creating the Organizational Psyche-Twin (aggregated and anonymized).

C. Conversation Content
Raw text/voice input shared with the AI.Immediate processing by the AI to deliver the requested Fusion Code response. Zero long-term storage or model training use.