Feona

Security & privacy

Your data, your control

Exactly how we handle your data. No vague promises, no fine print.

What data we collect

  • Your public social media metrics (followers, engagement, post performance), only from accounts you explicitly connect
  • Contract documents you upload for review, analyzed by AI, stored encrypted
  • Deal details you share (brand names, rates, timelines), used to manage your pipeline
  • Conversation history with Feona, used to improve responses and remember your preferences
  • Relevant Gmail messages and YouTube channel analytics, only after you review Feona's disclosure and connect Google

How data is stored

  • All data is stored in Supabase with encryption at rest (AES-256)
  • Data in transit is encrypted via TLS 1.3
  • Database access uses row-level security, you can only see your own data
  • Infrastructure hosted on AWS in the United States

How OAuth tokens are handled

  • Social platform tokens are encrypted with AES-256-GCM before storage
  • Email OAuth tokens (Gmail, Outlook) use the same AES-256-GCM encryption
  • Tokens are automatically refreshed before expiry, you never need to reconnect
  • We request only the minimum permissions needed for each feature

What we never do

  • We never post, comment, or send messages unless you take the action or enable the specific automation
  • We never sell your data or permit connected Google or Meta data to train generalized AI models
  • Contracted infrastructure and AI providers process only the data needed to operate the features you request
  • We never store your passwords, all authentication goes through official OAuth flows
  • We never access data beyond what you have explicitly connected

Disconnecting accounts

  • You can disconnect any connected account instantly from Settings
  • Disconnecting stops future use; you can also revoke Feona from the provider's own account settings
  • Historical business records are retained after an ordinary disconnect unless you use a dedicated deletion action or request deletion

Data deletion

  • You can delete retained Gmail data from Settings → Connections or request assisted deletion by contacting us
  • Account deletion removes all your data, conversations, deals, and connected accounts
  • Deletion is permanent and processed within 30 days

Automatic token refresh

OAuth tokens expire periodically. Feona refreshes them automatically, and if a refresh fails, you'll be notified to reconnect. We never silently lose access.

Who's behind Feona

Feona is built by Wavefield LLC, a small team giving creators the tools agencies charge 20% for. We're creators ourselves, so we get what it means to trust a tool with your business.

Have a security concern? Reach out at security@feona.ai

Questions? Email us at hello@feona.ai