Privacy policy

Who we are

Frontsheet is owned and operated by JRO Enterprises, LLC, a Washington limited liability company ("Frontsheet," "we," "us"). For the information described here, we are the controller of your personal information. This policy explains what we collect, why, who we share it with, how long we keep it, and the choices and rights you have.

When this policy applies

This policy covers our website at frontsheet.com and the Frontsheet service — one-time purchases and the Frontsheet workspace. It does not cover other companies' websites or services we link to, which have their own privacy practices.

Information we collect

We collect the following, and no more than we need:

Information you give us

• the public website address (URL) you submit for us to read;
• business details you enter, such as company name, industry, and notes;
• files you upload, such as a logo;
• your email address (we sign you in with a magic link);
• messages you send us, for support or otherwise.

Information we collect automatically

• usage and device data — pages viewed, actions taken, approximate location from IP address, browser and device type, and log data needed to run and secure the service;
• cookies and similar technologies, only as described in our cookie policy and, for anything beyond what's necessary, only with your consent.

Payment information

Payments are processed by Stripe. Your full card number is entered with Stripe and is never seen or stored by us. We receive limited billing details such as your name, email, the last four digits, card brand, and country, so we can confirm and record the purchase.

How we use your information

We use the information above to:

• read the website you submit and prepare and deliver your materials;
• create and run your account and workspace;
• take payment and keep records required for tax and accounting;
• provide support and respond to you;
• keep the service secure and prevent fraud and abuse;
• understand and improve how the service is used; and
• send you service messages, and — only if you opt in — marketing.

If you are in the EEA or UK, our legal bases are: performing our contract with you (providing the service and materials); our legitimate interests (securing the service, preventing abuse, and improving the product) balanced against your rights; your consent (analytics and marketing cookies, and marketing email), which you can withdraw at any time; and compliance with legal obligations (such as keeping financial records).

How Ai is involved

Frontsheet uses automated and Ai systems to turn the website and details you submit into finished materials. To do this, that content is processed by Ai providers acting on our behalf under contract (for example, Anthropic and OpenAI). We do not use your content to train our own models, and we do not permit these providers to use it to train their public models. Materials we generate are drafts for you to review before you rely on them.

Cookies and similar technologies

Necessary cookies keep the site working and are always on. Analytics and marketing cookies are set only after you opt in, and are never pre-checked. Every category, and how to change your choice at any time, is described in our cookie policy.

How we share information

We do not sell your personal information. We share it only in these ways:

Service providers who work for us

We use trusted companies to run the service, and they may process your information only on our instructions and for these purposes:

• Stripe — payment processing;
• Supabase — database, authentication, and file storage;
• Vercel — website and application hosting;
• Resend — delivery of email, such as your magic link and your materials;
• Inngest — running background jobs that prepare your materials;
• Ai providers such as Anthropic and OpenAI — generating your materials;
• Google Analytics — understanding site usage (only with your analytics consent);
• LinkedIn — measuring our ads (only with your marketing consent);
• error and performance monitoring — keeping the service reliable.

This list can change as we improve the service; email privacy@frontsheet.com for the current list.

Legal and safety

We may disclose information if required by law, to enforce our terms, or to protect the rights, safety, and property of Frontsheet, our users, or others.

Business transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that deal; we'll continue to protect it under this policy or give you notice of any change.

Where your information is processed

We are based in the United States and our providers may process information there and in other countries. Where we transfer personal information from the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

How long we keep it

We keep your information for as long as your account is active and as long as we need it for the purposes above. Generated materials are stored privately and served through short-lived signed links. We keep order records for as long as tax and accounting law requires, and we delete or anonymize information when it is no longer needed. You can ask us to delete your workspace at any time.

How we protect it

We use industry-standard measures to protect your information, including encryption in transit, passwordless magic-link sign-in, short-lived signed links for private files, and access controls. No method of storage or transmission is completely secure, so we can't guarantee absolute security, but we work to protect your information and to respond quickly if something goes wrong.

Your privacy rights

Wherever you live, you can ask us to:

• access the personal information we hold about you;
• correct information that is wrong or incomplete;
• delete your information;
• receive a copy of your information in a portable format;
• restrict or object to certain processing; and
• withdraw consent at any time, without affecting past processing.

To exercise any of these, email privacy@frontsheet.com. We may need to verify your identity before acting, and we'll respond within the time the law requires. You can use an authorized agent to make a request. We will never treat you differently for exercising your rights.

Additional rights for California

Under the CCPA/CPRA, California residents have the rights described above, including to know, delete, correct, and opt out. In the past 12 months we have collected these categories of personal information: identifiers (such as name and email), commercial information (purchases), internet and device activity (usage and cookies), and approximate location from IP. We collect this from you and automatically as you use the site, for the business purposes described above.

We do not sell personal information, and we do not knowingly "sell" or "share" it for cross-context behavioral advertising except through the marketing cookies you opt in to. You can opt out at any time using the "Do Not Sell or Share My Personal Information" link in the footer — and, again, we extend that choice to everyone, not just California residents.

Additional rights for the EEA and UK

If you are in the EEA or UK, you have the GDPR rights described above, and you may lodge a complaint with your local data protection authority. Our legal bases for processing are set out in "How we use your information." You can contact us about any of this at privacy@frontsheet.com.

Do Not Sell or Share My Personal Information

We don't sell your personal information. Marketing cookies that measure our ads may count as "sharing" under California law, and they run only if you opt in. You can turn them off at any time through the "Do Not Sell or Share My Personal Information" link in the footer or in your cookie settings. We also honor Global Privacy Control (GPC) signals from your browser.

Children's privacy

Frontsheet is for businesses and is not directed to children. We don't knowingly collect personal information from anyone under 16. If you believe a child has given us information, email privacy@frontsheet.com and we'll delete it.

Changes to this policy

We may update this policy as the service evolves. We'll post updates here with a new date, and for material changes we'll give reasonable notice.

Contact us

For any privacy question or request, email privacy@frontsheet.com. For anything else, reach us at hello@frontsheet.com. Frontsheet is operated by JRO Enterprises, LLC, Washington, USA.