We don’t
sell your data.
That’s the whole policy. The legal version is below. We tried to keep it under a page. Last updated 2026-05-03.
What we collect
When you use 4FRNT’s free assessment, we collect the URL you paste, anything you tell Frank during the conversation, and (if you provide it) your name, email, and phone number.
We also collect standard server logs (IP, user agent, timestamp) to keep the service running and to detect abuse. These are auto-pruned after 30 days.
What we do with it
- Generate your business assessment.
- Email you the report if you asked us to.
- Reach out about the strategy call if you booked one.
- Improve Frank’s prompt based on patterns we see across conversations.
That’s it. We do not sell, rent, or share your data with third parties for marketing. We do not run retargeting ads off your conversation.
Who else sees it
Three vendors process your data on our behalf:
- Anthropic — runs the AI that powers Frank. They process your conversation under their own privacy policy. They do not train models on your data.
- Supabase — stores your conversation history in a database hosted on AWS US-East.
- Vercel — hosts the website and runs server-side code.
- Resend — sends transactional email (your report, and account emails if you buy a plan). They process the email address you give us, only to deliver those messages.
Each is contractually bound to protect your data and process it only for our purposes.
What you can do
You can email hello@4frntlabs.com to:
- Get a copy of everything we have about you.
- Have it permanently deleted (we’ll confirm within 14 days).
- Correct anything that’s wrong.
- Opt out of any future communications.
If you’re a healthcare practitioner asking about HIPAA: 4FRNT is not a HIPAA business associate. Don’t share PHI (patient information) with Frank. Use generic operational descriptions instead.
Cookies and tracking
We use a single session cookie to keep your conversation context across page loads. For traffic measurement we use privacy-respecting, cookieless analytics (Vercel Web Analytics) that records aggregate visits and where they came from without cookies and without any personally identifying information. We do not use advertising or retargeting pixels on customer-facing pages, and we do not sell or share your data. The admin dashboard uses one signed cookie for authentication.
Children
4FRNT is for business owners. We don’t knowingly collect data from anyone under 18.
Changes
If we materially change this policy, we’ll email anyone whose email we have, and we’ll update the date at the top. Old versions are kept in our git history if you want to audit them.
Questions
Email hello@4frntlabs.com. We reply within 72 hours, usually faster.