Last updated: 22 October 2026.
Who we are
F200.ai is the brand of F200AI LLC. F200AI LLC is the controller of the personal data described here: the f200.ai website and the LinkedIn application F200.ai uses for its company page. To contact us about privacy, use the contact form.
What we collect and why
We collect only what the website needs to answer you and to work well. You can read every public page without giving us any personal details.
| What | Why | Legal basis |
|---|---|---|
| Contact form: your name, email address, company (optional), the offerings you select and your message | To answer your inquiry and talk with you about it | Your consent, given when you confirm and send the form; and steps you ask us to take before a possible contract |
| Text you type into the site's search or goal finder, and questions sent to our public MCP interface | To answer your question and find relevant pages | Our legitimate interest in answering the questions you ask us |
| Usage analytics: pages you visit, links and buttons you use, how far you read, device and browser, approximate location and the page that referred you | To understand which content is useful and improve the site | Our legitimate interest in understanding how the site is used |
| Technical data: IP address, browser headers and request details | To deliver the site, protect it against abuse (rate limits) and troubleshoot errors | Our legitimate interest in running a secure, working website |
When you use search, the goal finder or our MCP interface, we remove email addresses, phone numbers, card and bank numbers, ID numbers, secrets and links with tokens before the text reaches a hosted model. If the text still looks personal after that, we do not send it. Names you enter in the contact form are never sent to a model; the form is stored, not analysed.
Submitting the contact form does not book a meeting or make a purchase. The “Book a 30-min call with the founders” link opens Google’s booking page, where Google’s privacy policy applies.
Cookies and similar technologies
Our own code sets no cookies while you browse the site. Google Tag Manager loads Google Analytics 4 and Contentsquare when a page loads, and these services set their own cookies and similar identifiers to measure visits. You can block or delete them in your browser settings, or use Google’s opt-out browser add-on for Google Analytics.
Our fonts are served from f200.ai, not from a third-party font service.
Processors and third parties
We use these service providers to run the website. They process personal data on our behalf, for the purposes described here.
| Provider | What it does for us | Data |
|---|---|---|
| Cloudflare | Hosts the website and its APIs, stores contact-form inquiries (D1 database), runs the AI search and model gateway (Workers AI, AI Search, AI Gateway), and keeps sampled request logs | Everything the site processes |
| Google (Google Tag Manager and Google Analytics 4) | Usage analytics, loaded through a first-party address on f200.ai with IP concealment enabled | Usage analytics |
| Contentsquare | Usage analytics, loaded through Google Tag Manager | Usage analytics |
| An AI model provider | Runs the model that chooses which approved content to show for your question, reached through Cloudflare's AI Gateway with logging and caching turned off | Search, goal finder and MCP question text, after personal details are removed |
We do not sell personal data, and we do not share it with anyone else unless the law requires us to.
International transfers
Our providers run global infrastructure. Your data may be processed outside your country, including in the United States and the European Union.
How long we keep data
| Data | How long |
|---|---|
| Contact-form inquiries | 90 days from when you send them, then deleted automatically |
| Search, goal finder and MCP questions | Not stored by us: used to answer the request and then discarded |
| Rate-limit records | When used, a one-way hash of your IP address, kept for a few minutes |
| Aggregate usage counts (requests, results, errors, latency) | 90 days; they contain no text, IP addresses, cookies or visitor identifiers |
| Analytics data | According to the retention settings of Google Analytics and Contentsquare |
| Cloudflare request logs | A sample of about one request in ten, kept for a limited period set by Cloudflare |
Your rights
Depending on where you live, including in the European Economic Area and the United Kingdom, you have the right to:
- ask what personal data we hold about you and get a copy;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to our processing, including processing based on our legitimate interests;
- receive data you gave us in a portable format;
- withdraw your consent at any time, without affecting processing that took place before;
- complain to your local data protection authority.
To exercise any of these rights, use the contact form. We answer within 30 days.
Security
The site is served only over HTTPS. Rate limiting uses your IP address only in memory or as a short-lived one-way hash. Personal details are removed from text before it reaches a hosted model, and model gateway logging is turned off for visitor requests. Credentials are kept in an encrypted secret store, never in source code, and administrative endpoints require authentication.
Children
The website is meant for businesses and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, use the contact form and we will delete it.
Changes to this policy
We update this page when the way we process personal data changes. The date at the top shows the latest change.
LinkedIn company page content
F200.ai uses a LinkedIn application registered to F200AI LLC to publish posts on the F200.ai company page, to read that page’s statistics, and to read and answer comments on its posts through LinkedIn’s official Community Management API. This section explains what the application reads, what it stores, and for how long.
What the application does
- Publishes posts on the F200.ai company page. Every post is written for F200.ai, reviewed by a person at F200.ai, and approved before it is published. The application never publishes anything that has not been approved.
- Reads statistics for the F200.ai company page and its posts. These are totals that LinkedIn provides to page administrators: impressions, reactions, comments, reposts and follower counts.
- Reads comments and reactions on F200.ai company posts. We show them to the people at F200.ai who answer comments, with the commenter’s name, headline and profile link.
- Replies to comments as F200.ai. A person at F200.ai reviews and approves every reply before it is posted. The application never posts a reply that has not been approved.
What the application does not do
- It does not post on behalf of any individual member, and it does not post on any page other than the F200.ai company page.
- It does not read members’ connections, messages or feeds, and it reads no profile details beyond the name, headline and profile link of people who comment on our posts.
- It uses commenters’ details only to show and answer comments on our own posts. It never uses them for advertising, sales, recruiting, lead lists or a CRM, and never combines them with other data.
- It does not sell LinkedIn data or share it with third parties.
- It does not process customer data. Our posts are about our own work; they do not name customers, and we check every post for customer and personal details before it is approved.
What we store
| Data | Why | Where |
|---|---|---|
| The text and image of each company post, and when it was approved and published | To keep a record of what F200.ai has published and to avoid repeating topics | Cloudflare (D1 database and R2 storage), the United States and the European Union |
| The post's LinkedIn address (URL) | To match statistics to the post | Same |
| The company page's own posts as LinkedIn returns them | To match published posts and their statistics to our records | Same |
| Totals per post and per day: impressions, reactions, comments, reposts, new followers | To learn which topics are useful to our readers | Same |
| Comment text and other members' reactions on our posts | To show comments to the person who answers them | Same |
| Commenters' name, headline and profile link | To show who wrote a comment | A short-lived cache only; never stored in the database |
| LinkedIn member IDs and comment IDs | To link our replies to the comments they answer | Cloudflare (D1 database), the United States and the European Union |
| Our own replies, and when they were approved and posted | To keep a record of what F200.ai has said in public | Same |
| The access token LinkedIn issues to the application | To call the API on behalf of the F200.ai company page | An encrypted secret store; never in logs, messages or source code |
How long we keep it
- Our records of our own posts (text, image, approval and publish times): 365 days.
- The company page’s own posts as read back from LinkedIn: 6 months.
- Statistics totals for the page and its posts: 365 days.
- Comment text and other members’ reactions: at most 48 hours.
- Commenters’ name, headline and profile link: cached for at most 24 hours, never stored.
- Member IDs and comment IDs: 365 days, the same as our post records.
- Our own replies: 365 days.
- Access tokens: until they expire or the application is disconnected, whichever comes first. They are deleted when the application is disconnected.
- When a post is deleted from the company page, we delete its stored statistics within 30 days.
Permissions the application asks for
w_organization_socialandr_organization_social: publish posts and replies as F200.ai, and read the page’s posts, comments and reactions.w_organization_social_feedandr_organization_social_feed: post and read comments on the page’s posts.rw_organization_admin: confirm the connected person administers the F200.ai page, and read page and follower statistics.
The application asks for no permission to post as, or read, an individual member’s profile (no w_member_social).
Your choices
- A company page administrator can disconnect the application at any time in LinkedIn’s settings. The application then stops reading and posting immediately.
- To ask what we hold, or to ask us to delete data, use the contact form. We answer within 30 days.