Privacy Policy

Scope

This policy covers the Fig website — the pages served from fig4.ai, operated by Fig. It describes what happens when you visit this site and nothing more; it does not cover the Fig desktop application.

This site links out to third parties, such as GitHub. Once you leave fig4.ai, their policies apply, not this one.

Analytics, only if you say yes

We use PostHog to understand how this site is used, and it is strictly opt-in. Before you consent, no analytics script loads, no analytics data leaves the page, and nothing is stored except your answer once you give one. If you don’t opt in, you aren’t tracked.

If you do opt in, we record:

• Page views — which page you visited and the page you arrived from.
• Clicks on specific links — the navigation links and outbound buttons we’ve marked, so we know which paths get used.
• Sections read — which parts of a page were on screen and roughly how long, so we know what actually gets read.
• Technical context — browser, operating system, device type, screen size, language, timezone, and an approximate location (country or region) derived from your IP address.

And what we don’t do:

• No session recording, heatmaps, or surveys — all disabled.
• No automatic capture of everything you click or type — disabled.
• No advertising and no cross-site tracking of any kind.
• No selling or sharing of your data for marketing.

We don’t ask who you are, so analytics events stay anonymous — no name, email, or account is attached to them. As an extra guard, sensitive-looking URL parameters (tokens, auth codes, and the like) are stripped from every event before it is sent.

What lives in your browser

This site sets no cookies. It uses your browser’s local storage for exactly two things:

• Your consent choice (fig.analytics.consent) — stored once you answer, so we don’t ask again.
• PostHog’s anonymous ID (keys starting with ph_) — only if you opted in.

Declining — or switching the toggle off later — removes the PostHog entries immediately. You can also clear this site’s data from your browser settings at any time.

Where the data goes

Analytics events are sent to this domain and relayed to PostHog’s cloud in the United States, where they are processed and stored by PostHog Inc. acting on our behalf, under PostHog’s privacy policy. Events are kept only as long as they remain useful for understanding how the site is used.

The site itself is hosted by Vercel. Like nearly every host, Vercel keeps short-lived server logs — IP address, browser identifier, requested URL — as needed to serve the site and protect it from abuse. We do not combine those logs with analytics.

Security

The site is served over HTTPS, and our main safeguard is collecting as little as possible — data that never exists can’t leak. No transmission or storage is perfectly secure, but because everything we collect is minimal and anonymous, there is very little that could ever be exposed.

Your choices and your rights

The toggle at the top of this page grants or withdraws consent at any time, and withdrawing takes effect immediately. Because nothing runs without opt-in, privacy signals like Global Privacy Control are honored by default — there is no tracking to turn off unless you turned it on.

Depending on where you live, laws such as the EU and UK GDPR or US state privacy laws (including the California CCPA/CPRA) give you rights over personal data: to access it, correct it, delete it, receive a copy of it, object to its processing, withdraw consent, and complain to your local supervisory authority. Where the GDPR applies, our legal basis for analytics is your consent, and for hosting logs it is our legitimate interest in serving and securing the site.

To exercise any of these rights, email contact@fig4.ai. One honest caveat: analytics data here is anonymous by design, so in most cases we have no way to find records that belong to you — if we can’t identify your data, we’ll tell you exactly that.

Children

This site is not directed at children under 13 (or under 16 where the GDPR applies), and we do not knowingly collect their data. If you believe a child has provided us data, email contact@fig4.ai and we will delete it.

Changes

If this policy changes, the new version will be posted here with an updated effective date, and material changes will be called out prominently on this page.

Contact

Questions, concerns, requests: contact@fig4.ai.