Lindle Privacy Policy

Lindle is operated by Fulton Industries Ltd. This Privacy Policy explains how we collect, use, store and protect personal data when you visit the Lindle website, create or use a Lindle workspace, communicate with us, or connect third-party services.

1. Who we are

Fulton Industries Ltd is the organisation responsible for Lindle.

For personal data relating to accounts, website visitors, commercial enquiries, service administration and our own business operations, Fulton Industries Ltd generally acts as the data controller.

Where an organisation connects, uploads or otherwise provides data to Lindle for processing within its workspace, that organisation may be the data controller and Fulton Industries Ltd may act as its data processor. The applicable customer agreement or data-processing terms will govern that processing.

Contact details:

2. What Lindle does

Lindle is an always-on commercial intelligence system for ecommerce and retail marketing teams.

It helps organisations understand how customers discover, compare and choose brands across AI assistants, search, advertising, reviews, websites and connected commercial systems. It can help users investigate changes, review supporting evidence, prepare actions and measure outcomes.

3. Information we collect

Depending on how you use Lindle, we may collect or process the following categories of information.

Account and authentication information

• name
• business email address
• account identifier
• authentication provider
• organisation and workspace membership
• role and permissions
• profile information supplied by an authentication provider

When an authentication provider is used, we receive only the information and permissions disclosed during the relevant sign-in or authorisation process.

Workspace and team information

• organisation name
• team membership
• workspace settings
• user roles
• access permissions
• invited-user information
• support and onboarding records

Conversations and customer content

• questions submitted to Lindle
• threads and conversation history
• documents, instructions and business context supplied by users
• recommendations, drafts and outputs generated through the service
• review, approval and action history

Users should only provide information that they are authorised to use within Lindle.

Connected-service data

Where you authorise a connection, Lindle may access data from services such as:

• Google Analytics 4
• Google Ads
• Google Search Console
• ecommerce platforms
• CRM systems
• lifecycle and email platforms
• collaboration tools
• other systems selected by your organisation

The exact information accessed depends on the service connected, the permissions approved, the features enabled, and the organisation’s workspace configuration.

We access only the data needed to provide the enabled Lindle features.

Website and usage information

• IP address
• browser and device information
• pages viewed
• interaction and diagnostic events
• error and security logs
• approximate location derived from IP address
• referral and campaign information

Commercial and communications information

• enquiries
• meeting and support correspondence
• contract and billing contacts
• feedback
• service requests
• information needed to manage a customer or prospective-customer relationship

4. How we obtain information

• directly from you
• from your organisation or workspace administrator
• from services you choose to connect
• from authentication providers
• from public sources where relevant to a requested Lindle feature
• automatically through use of the website or service
• from business partners acting with appropriate authority

5. How we use personal data

• create and administer accounts and workspaces
• authenticate users and manage access
• provide Lindle’s user-facing features
• connect and operate authorised third-party integrations
• answer questions and generate requested analysis
• maintain conversation and decision history
• prepare recommendations, drafts and actions
• measure outcomes and improve service relevance
• provide support and onboarding
• protect Lindle, customers and users from misuse and security threats
• diagnose faults and maintain service reliability
• manage contracts, billing and commercial relationships
• comply with legal and regulatory obligations
• communicate material service, privacy or security updates

We do not sell personal data.

We do not use Google user data for targeted advertising, creditworthiness assessment or the training of generalised AI models.

6. Lawful bases

Depending on the processing activity, we rely on one or more of the following lawful bases under UK data-protection law.

Contract

• provide the service
• administer an account
• operate a workspace
• fulfil an order or customer agreement
• provide requested support

Legitimate interests

• securing the service
• preventing abuse
• maintaining and improving product reliability
• understanding business use of Lindle
• managing business-to-business relationships
• responding to enquiries
• establishing, exercising or defending legal claims

We balance those interests against the rights and interests of affected individuals.

Legal obligation

We may process information where necessary to comply with applicable legal, accounting, regulatory or law-enforcement requirements.

Consent

Where consent is the appropriate basis, such as for certain optional communications or non-essential tracking, you may withdraw consent at any time.

7. Google account and Google Analytics data

Lindle may use Google OAuth to support account authentication and authorised connections to Google services.

Where you connect Google Analytics 4, Lindle may request read-only access through the scope shown on Google’s consent screen, which may include:

https://www.googleapis.com/auth/analytics.readonly

Read-only Google Analytics information may include:

• properties selected by the authorising user
• traffic and acquisition information
• channel performance
• conversion and event metrics
• aggregated website behaviour
• related reporting dimensions and metrics

Lindle does not use read-only access to:

• modify Google Analytics data
• delete Google Analytics data
• change the customer’s Google Analytics configuration
• write data back to the connected property

Access is limited to the permissions that the user or organisation authorises.

Google-connected information may be visible to other authorised members of the same Lindle workspace according to their roles and permissions.

8. AI processing and connected data

Some Lindle features use contracted AI model or inference providers to generate user-facing answers, summaries, explanations, recommendations and drafts.

Where a user requests a feature that requires connected or uploaded data, Lindle may process the information reasonably necessary to provide that feature.

We require service providers to process data under appropriate contractual restrictions.

We do not:

• sell Google user data
• use Google user data for advertising
• use Google user data to determine creditworthiness
• use Google user data to train generalised AI models

9. How we share information

We may share information with categories of recipients including:

• cloud hosting and infrastructure providers
• database and storage providers
• authentication providers
• integration and connectivity providers
• AI model and inference providers
• security, monitoring and diagnostic providers
• payment and billing providers
• professional advisers
• contractors supporting service delivery
• regulators, courts or law-enforcement bodies where legally required
• a buyer or successor in connection with a genuine corporate transaction

These recipients may act as processors, independent controllers or joint controllers depending on the service and circumstances.

We do not permit processors to use personal data for their own unrelated purposes.

10. International transfers

Some service providers may process information outside the United Kingdom.

Where personal data is transferred internationally, we use an appropriate legal mechanism where required, such as:

• UK adequacy regulations
• the UK International Data Transfer Agreement
• the UK Addendum to standard contractual clauses
• another lawful transfer safeguard

You may contact us for more information about relevant safeguards.

11. Data retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy.

The period applied depends on factors including:

• whether an account or workspace remains active
• contractual requirements
• the type of connected service
• security and diagnostic requirements
• legal and accounting obligations
• dispute and claims periods
• customer instructions where we act as a processor

When a user revokes a connected service, we stop new collection through that authorisation.

Associated credentials are disabled or removed in accordance with our operational processes. Connected data is deleted, anonymised or retained according to the applicable customer agreement, workspace configuration, backup cycle and legal requirements.

12. Security

We use technical and organisational measures designed to protect personal data, including measures such as:

• encrypted network connections
• access controls
• workspace permissions
• protected credential and token storage
• logging and monitoring
• environment separation
• vulnerability and incident-management processes
• access limited to authorised personnel and services

No online service can guarantee absolute security.

13. Your rights

Depending on the circumstances, individuals may have rights including:

• access to personal data
• correction of inaccurate data
• erasure
• restriction of processing
• data portability
• objection to processing
• withdrawal of consent
• the right not to be subject to certain solely automated decisions with legal or similarly significant effects

Where Fulton Industries Ltd processes information on behalf of a customer, we may refer a request to that customer as the relevant controller.

To exercise a right, email: hannah@frameai.tech

We may need to verify identity before completing a request.

Your right to object

Where we rely on legitimate interests, you have the right to object to processing in circumstances provided by law.

Where personal data is used for direct marketing, you may object at any time.

14. Complaints

Please contact us first so we can try to resolve your concern.

You also have the right to complain to the UK Information Commissioner’s Office:

https://ico.org.uk/make-a-complaint/

15. Cookies and similar technologies

The Lindle website and service may use:

• essential browser storage
• authentication storage
• security technologies
• preference storage
• analytics technologies where enabled

Where consent is legally required for non-essential technologies, they should not be activated until the required choice has been obtained.

16. Children

Lindle is intended for business users and is not directed at children.

17. Changes to this Policy

We may update this Privacy Policy as Lindle, our providers or legal requirements change.

We will update the date at the top of the page and provide additional notice where appropriate.

18. Contact