1. Who this policy covers
FunnelLingo is owned and operated by Moosh Works LLC. This policy covers FunnelLingo’s public pages, embedded application, API, visitor language switcher, and support communications.
Customers may use FunnelLingo on websites they control. Those customers remain responsible for their own website notices, forms, cookies, and personal-data practices.
2. Data we process
- Account and installation data: connected-account identifiers, authorized user name, email, role, company identifier, business-account identifier, and installation state.
- Reduced business profile: business name, website, city, state, country, and timezone when the connected account grants access. We discard phone, email, street address, social links, and other unused profile fields.
- Authored content: public page copy, page title and description, headings, calls to action, labels, placeholders, image descriptions, and context needed to translate that copy.
- Workspace data: projects, page context, locales, protected terms, glossary entries, translations, review states, registered domains, publication records, and usage counts.
- Brand data: a connected company name and an owned copy of a valid company logo, plus any brand settings a customer saves in FunnelLingo.
- Operations and security data: request identifiers, route, status, duration, service identifiers, aggregate counts, error type, and limited network metadata used for delivery, rate limits, fraud prevention, and security.
- Requested report data: when you ask us to email a preview report, we process your email, website address, selected preview language, request time and optional marketing preference. We save a lead and request notes in our own CRM. This is separate from customer-site translation discovery.
- Support data: messages and files a person chooses to send to support.
3. Data outside the product boundary
The translation system is designed not to collect or translate visitor form entries, CRM contacts, conversations, opportunities, appointments, payments, passwords, page query strings, or unrelated cookies. The language switcher skips editable fields and anything visitors enter. Our own optional report email form separately collects the email needed to fulfill the request. We do not send it to the translation model.
4. Why we use data
We use the data above to authenticate users; prepare editable context suggestions; generate, review, protect, and publish translations; enforce account and domain boundaries; measure service limits; secure and troubleshoot the service; respond to support; and comply with law.
Where applicable, processing is based on performing a customer agreement or requested service, legitimate interests in operating and protecting the service, consent for optional browser preferences, and legal obligations.
5. AI processing
FunnelLingo sends selected authored copy and the context needed to translate it to OpenAI’s API. Requests use the Responses API with application storage disabled through store: false. OpenAI states that API data is not used to train its models by default. Its standard abuse-monitoring logs may retain customer content for up to 30 days unless approved data controls apply.
FunnelLingo does not intentionally send visitor entries, contact records, OAuth credentials, or support messages to the translation model.
7. Visitor browser storage
If a visitor chooses a language, the language switcher may save that choice in the visitor’s browser. The preference stays on that device and is used only to restore the selected language. Visitors can remove it by clearing site data in their browser.
8. Retention and deletion
The free website preview processes a public page address, selected language, and a small sample of authored copy. Preview copy and results are not saved to a FunnelLingo project. When email reports are available, we encrypt the preview for up to 24 hours to fulfill an optional email request and remove it after the delivery attempt. The requested email report remains in the recipient’s mailbox. CRM request records are retained until deletion is requested or they are no longer needed. Optional marketing preferences are recorded separately; requesting a report does not enroll you in marketing. Short-lived, hashed request counters limit abuse; provider processing and retention described above still apply.
Active workspace data is kept while the connected account uses FunnelLingo. Disconnecting or uninstalling disables access and starts a 30-day cleanup period. Final cleanup removes tokens, projects, domains, glossaries, translations, and published bundles tied to that installation. A customer can delete a project sooner from the application.
Selected operational logs, provider abuse-monitoring records, backups, security evidence, and records required by law may follow their provider or legal retention periods. FunnelLingo does not store raw production webhook bodies. See Data deletion for request steps.
9. Security
Controls include encrypted OAuth tokens, short-lived signed sessions, tenant checks, least-privilege scopes, signed lifecycle events, registered-origin checks, rate limits, restrictive browser policies, structured model output, and deterministic translation guards. No system is risk-free, and this policy is not a certification under a security or privacy framework.
10. Privacy choices and rights
Depending on where you live, you may have rights to know, access, correct, delete, restrict, object to, or obtain a copy of personal data, and to appeal a denied request. FunnelLingo does not sell personal data or use it for targeted advertising.
Email [email protected] with “FunnelLingo privacy request” in the subject. We will verify the request without asking for a password, one-time code, OAuth token, or visitor form value. You may appeal a decision through the same channel.
11. Children
FunnelLingo is a business service for adults and is not directed to children. Do not use it to submit children’s personal data. Contact us if you believe such data was provided.
12. Changes and contact
We may update this policy as the service, providers, or law changes. The effective date at the top shows the current version. Material changes will be presented through an appropriate service or account notice when required.
Questions and privacy requests: [email protected]. Operational help is available on the support page.