Privacy

Effective 21 October 2026. Figlix is operated by Vritul Pty Ltd (ABN on request), Australia.

Figlix is a marketing planning tool: you tell it about a business, it drafts marketing content and campaign plans, a person on your team approves them, and they are published — by copying the words yourself, or through accounts you choose to connect, where Figlix posts what was approved. This page says what Figlix keeps in order to do that, who else handles it, and what Figlix never does.

What Figlix stores

Your sign-in. The email address you sign in with. You sign in with a Google, GitHub or Apple account where each is offered, with a code Figlix emails you, or with a passkey you added in Settings. From those accounts Figlix also receives your name, which it shows you while you are signed in. Figlix has no password of its own; a code it emails you is kept only in scrambled form until it is used or runs out. For a passkey, Figlix keeps its public key, the name you gave it, and when it was added and last used; the passkey itself stays with your device or your password manager, and Figlix never sees it. When you agree to Figlix's terms, Figlix records which version you agreed to, when, and whether it was at sign-in or on the screen that asks; deleting your account deletes that record.
The phone app. If you sign in on the Figlix app, the phone's name, its platform, the app's version, when it last signed in, and the address notifications are sent to if you allow them. Signing out there ends that phone's access.
What you type. Your workspace and brand names, what you tell Figlix about the brand (its voice, offers, audience, competitors, words it never uses, and, if you give them, its phone number, email address, street address and opening hours), the people you describe as your audience, campaign goals and budgets, notes you keep about competitors, and the content you write, edit and approve.
Files you add. Pictures, videos, documents and fonts you upload to a brand's library, with each file's name, size, who added it, and the description and usage note you give it. Figlix reads the text of a document you ask it to learn from.
What Figlix drafts. Content, plans and pictures generated for you, with a record of what they were generated from, who asked, and how many credits the run used. The finished result of a run is also held for about a day so your screen can collect it.
Who did what. An audit trail of approvals, rejections, schedules, edits and deletions — who, when, what changed, and the note the person wrote — kept so a decision can always be explained.
Connected accounts. If you connect a channel — a Facebook Page, an Instagram account, a Google Ads account — Figlix stores the access token that platform issues, encrypted, together with the account's name and id, what the token allows and when it runs out. It never sees or stores your password for that platform. Disconnecting deletes the token at once. If a second brand in your workspace was connected to Google Ads with the same Google sign-in, that brand's connection holds its own copy, which is deleted when Google Ads is disconnected on that brand too.
What it reads back from a connected account. For each post Figlix put out: its address on the platform and the numbers the platform gives for it, such as reactions, comments, shares, views, clicks and saves. For a connected Facebook Page or Instagram account, its follower count. For an ad account, its campaigns and what they spent, shown when a person opens that screen.
Comments on your posts. For each post Figlix put out on a channel the Inbox reads, in the 28 days after it goes out, the comments people write under it: the name the platform shows, the words and when they wrote them; not their account id, picture or profile. Figlix deletes them 90 days after they were written. Answers your team writes in the Inbox are kept with who wrote and who sent them.
Google Ads. If you connect Google Ads, Figlix reads which ad accounts that Google sign-in can open (each one's number, name, currency and status) and, for the one connected to your brand, its time zone, its campaigns and how each is set (status, kind, bidding, budget, dates and networks), and each campaign's spend, impressions and clicks by day. It changes the account only when a person in your workspace sends an approved ad plan: Figlix then creates that campaign in the account, paused, for you to switch on in Google Ads. Figlix does not put your Google Ads data into any AI model, and does not sell it or use it for advertising. Figlix's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
TikTok. If you connect a TikTok account, Figlix stores the tokens TikTok issues, encrypted, and the account's name and id. Each time you post, it asks TikTok for the account's name and username, who it may let see a video, whether comments, Duet and Stitch are allowed, and the longest video it may post, and fills in the post screen with them. It keeps the choices you make for that post (who can see it, comments, Duet, Stitch, any commercial disclosure), who made them and when. When you post, it sends TikTok the approved video, its caption and those choices, then reads back whether TikTok published it. A standing approval never stands in for these choices: Figlix posts nothing to TikTok until a person has made them for that post.
Cookies and your browser. A session cookie so you stay signed in; for fifteen minutes after you tick the agreement box at sign-in, a cookie that carries that tick to the first page you open; and preferences: your theme, whether the sidebar is collapsed, the effort setting, which workspace and brand you last opened, and your time zone, so days and times read in your own. No advertising or tracking cookies. While an AI run is in progress, your browser's own session storage remembers which run it is, for up to a day, so a reloaded page can pick it up. The app loads its typefaces from Google Fonts, so Google receives your browser's request for them.
What Figlix reads from your own website. If someone in your workspace confirms your site's address, Figlix stores the text of its pages, the address of each one, and when it last read them. “Reading your website” below says how.
Your brand's mailing list. If you put a Figlix sign-up page in front of your own customers, the names and email addresses they give, the sentence each one agreed to and when, and whether they have since unsubscribed. See “If you join a business's list” below for what Figlix promises those people.
Visits and results on your own pages. If your website sends Figlix its results (a signup, a sale), each one arrives with its kind, time and value, the campaign tags on the link, the address of the page, and the visitor and session numbers your site chose to send. Figlix refuses an email address in those fields. On a links page or website Figlix hosts for you, it counts each page view and each click on a link, with the address of the page. It does not store visitors' IP addresses.
A website and its domain. The pages of a website or links page Figlix hosts for you, and the domain you point at it. If you register a domain through Figlix, the registrant's name, organisation, email address, phone number, postal address and ABN you give; Figlix keeps them and passes them to the registrar, and the registry may publish some of them as its rules require.
Questions you ask Figlix's help. The question, the answer and the help pages it was drawn from. A question the help cannot answer is emailed to Figlix's support inbox with your address, so a person can reply.
Operating records. Figlix's servers keep logs for a month: errors, and for some emails and background jobs the workspace or the member's address they concerned. Your IP address is used to limit abusive traffic and is not stored in Figlix's database; the hosting providers named below may record it in their own logs.

What Figlix does with it

Runs the product for you and the people you invite to your workspace. Each workspace's data is separate from every other customer's. Everyone in a workspace can see its brands and content, as far as their role allows.
Posts to a connected account only what a person in your workspace approved: one post at a time, or in advance through a standing approval that anyone who may approve can turn off. Nothing goes out without an approval, and what is posted reaches the audience you chose on that platform. For the posts it put out, Figlix reads back how they did; each night it reads the follower count of a connected Facebook Page or Instagram account; it renews an account's access where the platform allows; and it checks that an account still works when someone in your workspace asks.
Posts an answer under a comment only when a person in your workspace who may approve sends it.
Emails the people in your workspace: sign-in codes, invitations, billing notices, and a daily summary each person can switch off.

Artificial intelligence

To draft for you, Figlix sends an AI provider what the draft needs: what you told it about the brand (including competitors and the words it never uses), the audience you described, the campaign's goal and budget, passages from your own website and from documents you asked it to learn from, the content you ask it to write or improve, and a picture you ask it to change. A question to Figlix's help is sent with your brand names, your recent notices, and your plan and credit balance. Your mailing list, your connected accounts' tokens and the numbers and comments on your posts are never sent.

One provider, in the United States, does the writing, the pictures, the search index over your own material, and a safety check that every request and every answer passes through. To make a video with an AI presenter, Figlix sends a second provider the approved script, a short direction drawn from your brand and audience, and the presenter's picture, which is a face Figlix generated and nobody's own; the finished sound goes back to the first to be checked against the script.

Vritul uses only providers whose terms do not allow your content to be used to train or improve their models, and keeps the setting that would share it switched off. The provider that writes keeps a record of each request and its answer in Vritul's account with it, which Vritul can read and delete and the provider may not use for training. A provider also keeps a log held for up to 30 days to detect abuse, after which that log is deleted. Vritul names the current providers on request.

Reading your website

When a person in your workspace confirms your website's address, Figlix reads that site so its drafts can be about your actual business rather than a plausible one, and so it can show you which page a line came from. It reads only that one site (with or without “www”), up to fifty pages, a page at a time, identifying itself as Vritul and naming your brand, and it stops at what your robots.txtasks. It does not follow links away from your own site, sends no cookies and does not sign in anywhere, so it reads nothing behind a login. While the address stays confirmed it reads the site again from time to time, weekly at most, and reads one page of it each night for the brand's health score. The words on a page are handed to the AI marked as quoted material about your business, with a standing rule that nothing in them changes what Figlix does.

The free check on figlix.com is different: it reads one page of whatever address a visitor types and reports on it. It keeps nothing about that page; an address that could not be read may appear in a log.

Some screens show published figures about the platforms themselves — how many people use Instagram, for example. Figlix reads those from the publishers' own public pages and filings about once a week, and names the publisher and the date next to each figure. That reading involves no data of yours: the request carries only Vritul's name and contact address, as those publishers ask.

Apps you connect

You can connect an app such as Claude to Figlix, by signing in with Figlix and choosing Allow, or with a token you make in Settings. Either way it reads what your role lets you read in that workspace, and it cannot change, approve or post anything. What it reads goes to that app, under that app's own terms. Figlix keeps the app's name, where it sends you back to, the workspace, when you allowed it and when it last read anything, and a record of each read; it keeps only a hash of each token, never the tokens themselves in readable form. You can disconnect an app at any time in Settings, under Connected apps, or turn off a token there under Tokens, and it stops working from its next request. Leaving the workspace, or deleting your account, ends them too.

Who else handles it

Figlix does not sell your data and does not show advertising. Your data reaches only these:

The platforms you connect. What a person approved to post, sent to that platform under your account, an answer a person sent under a comment, and the requests that read your posts' numbers and comments back.
Amazon Web Services, which holds the database, the files and the logs, and sends Figlix's email.
Vercel, which serves the web app, figlix.com and the pages Figlix hosts for a business.
The AI providers, as “Artificial intelligence” above describes.
A domain registrar, if you register a domain through Figlix, which is given the registrant's details that registering a name requires.
Stripe, which takes payments.
Google and Apple, when you choose to sign in with them, and Google for the app's typefaces.
A business whose list you joined, which sees and can export what you gave it.

If you ask for early access

Asking for early access on figlix.com keeps the email address you give and anything else you choose to add — your name, business, website, the channels you use and your note — with the date you asked and how many times. A copy goes to Figlix's team inbox so someone can reply. It is used only to answer you about Figlix: it is not added to a mailing list, and figlix.com sets no cookies and runs no trackers. To have it deleted, email hello@figlix.com from the address you gave.

If you join a business's list

A business that uses Figlix can put a sign-up page for its own mailing list on figlix.com. If you give your name and email address on one of those pages, Figlix stores them for that business, together with the exact sentence you agreed to, the date, and how many times you signed up. The business can see and export what you gave and is the one who will email you. Figlix never emails you on its own behalf, never sells the list, never uses it to train models, and never gives it to another business.

The page gives you an unsubscribe link that works at any time without signing in. Using it marks you as unsubscribed rather than deleting you, so that Figlix keeps the record that you left; signing up again from the page is the only way back onto the list Figlix holds. A list the business exported shows who has unsubscribed, but what the business does with a file it has taken out of Figlix is its own responsibility. To have everything about you deleted from the list Figlix holds, ask the business, which can delete you there, or email hello@figlix.com from the address you gave, and it is deleted within 30 days.

Where it lives

Figlix runs on Amazon Web Services in the United States, in northern Virginia (data and the API), and on Vercel (the web app). Backups are kept for seven days in the same place. So your data is held outside Australia, and so is what the providers above handle: the AI providers, Stripe, the domain registrar and Figlix's outgoing email in the United States, and Vercel, Google and Apple on their own networks around the world.

Access tokens for connected accounts are encrypted at rest with a key that is held separately from the database.

Payments — for a plan, AI credits, or a website and its domain — are made on Stripe's own pages. Figlix keeps the workspace's Stripe customer reference, its subscription, the amount and credits of each purchase and who made it, the card's brand and last four digits when a card is saved, and the email address billing notices go to. Card numbers and your billing address stay with Stripe, whose handling of them is described in its own privacy policy.

How long

For as long as your workspace exists. Removing content, a campaign, a persona or a brand archives it, keeping the audit trail; the trail exists so approvals stay accountable. Deleting a file or a person on your mailing list really deletes it, and disconnecting an account really deletes that connection's token. When someone leaves a workspace their access ends, and what they wrote and approved stays as the record, with their address on it. Comments read into the Inbox are deleted 90 days after they were written, with the answers under them. Logs are kept for a month, backups for seven days, and an earlier copy of a deleted file for up to thirty days.

Deleting your data

To remove a connected account's token, open Connections in Figlix and choose Disconnect — that deletes it at once. A Google sign-in a second brand was connected with is held by that brand's connection too, so disconnect Google Ads there as well. To delete everything Figlix holds about your workspace or about you, email support@figlix.com from the address you sign in with. To delete your own account you can also ask in the Figlix phone app, under Settings → Delete my account: a request made there deletes nothing by itself, and can be canceled there while it is open. Either way, a person at Figlix does it and confirms to you by email, within 30 days. A platform such as Facebook sends you here for the same thing: the request is that email.

Deleting a workspace removes all of it: its brands, content, files, lists, audit trail and Figlix's record of its purchases. Deleting only you removes your sign-ins, your phones and your access; on records a workspace still needs, such as who approved a post, your address is replaced with a mark that names nobody. Some copies go later: backups within seven days, logs within a month, earlier copies of files within thirty days, and any email you sent Figlix when a person removes it. Figlix cannot delete what has already been published on a platform, what a business exported, or Stripe's own records of a payment.

Your rights and complaints

You can ask what Figlix holds about you, have it corrected, or have it deleted, at support@figlix.com. Vritul Pty Ltd follows the Australian Privacy Principles. If you think Figlix has mishandled your information or a request, write to the same address and say it is a privacy complaint: a person reads it, looks into it and answers within 30 days. If the answer does not settle it, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

When this page changes in a way that matters, the effective date above changes with it.