Privacy Policy

1. Scope

This policy applies to Fig, the website at figaeo.com, the hosted MCP service, and related authentication, checkout, and support interactions. It does not apply to GitHub, Google, Stripe, or other services that have their own privacy policies.

2. Information we receive

Account and sign in information

• When you sign in with Google, Fig receives your Google account email and whether Google has verified that email. Fig requests only the OpenID Connect openid and email scopes.
• When you sign in with GitHub, Fig requests the user:email scope and uses a verified email returned by GitHub.
• Fig does not receive your Google or GitHub password, and does not request access to Gmail, Drive, Calendar, Contacts, repositories, or organization data.

Service and billing information

• Fig stores the verified email associated with your Fig account and the account's credit balance.
• When you use the service, Fig processes tool requests such as keywords, domains, locations, and related options so it can return the requested result.
• When you purchase credits, Fig receives payment and checkout identifiers from Stripe. Stripe processes payment card details. Fig does not store complete card numbers.
• Fig records usage receipts needed to calculate charges, including the tool name, provider request identifier, amount, and timestamp.
• Fig and its infrastructure providers may process technical information such as request time, IP address, user agent, errors, and security events.

3. How we use information

We use information to:

• authenticate you and connect your verified email to one Fig account;
• provide MCP tools and return SEO and answer engine results;
• maintain credit balances, process checkout, and prevent duplicate or abusive transactions;
• secure, troubleshoot, measure, and improve the service;
• communicate about the service, support requests, policy changes, and security issues; and
• comply with legal obligations and enforce our terms.

4. Google user data and Limited Use

Fig uses Google sign in only to establish your identity through a verified email address. Fig does not use Google user data for advertising, sell it, or transfer it to data brokers. Fig does not use Google user data to train or improve a general purpose artificial intelligence model. Google user data is used only to provide authentication and the Fig account associated with that authentication.

Fig handles Google user data consistently with the Google API Services User Data Policy, including its Limited Use requirements.

5. When we share information

We share information only as needed to operate Fig:

• with Google or GitHub during the sign in flow you choose;
• with Stripe to create checkout sessions and confirm payments;
• with infrastructure providers such as Vercel and Convex to host the application and account data;
• with data providers such as DataForSEO when a requested Fig tool requires a provider lookup; and
• when required to comply with law, protect the service, or prevent fraud and abuse.

We do not sell personal information and do not share it for third party advertising.

6. Retention and deletion

Temporary OAuth state and provider access tokens are used to complete sign in and expire. Account, credit, usage, payment, security, and legal records are retained for as long as reasonably necessary to operate Fig, resolve disputes, prevent abuse, and meet legal or accounting obligations.

To request deletion of your Fig account and associated personal information, email support@figaeo.com from the account email address. We may retain information where required by law or reasonably needed for security, fraud prevention, or financial records.

7. Security

Fig uses HTTPS, signed short lived OAuth credentials, access controls, and managed infrastructure. No internet service can guarantee absolute security. If you believe your account or a Fig security credential has been compromised, contact us promptly.

8. Cookies and local storage

Fig may use essential cookies for authentication and security. The website also stores a theme preference in browser local storage. We do not use advertising cookies. Fig uses Vercel Web Analytics for cookie-less page views and does not add extra tracking vendors.

9. Children

Fig is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

10. Changes

We may update this policy as Fig changes. We will update the date above and, when a change materially affects how we use personal information, provide notice through the service or another reasonable channel.