Skip to content
Furnace

Data processing summary

Effective October 9, 2026

In short

For the contacts in your workspace, you decide what’s collected and why; we process that data only to provide the service to you. This page summarises the commitments in our data processing terms. Enterprise customers can request the full agreement.

Roles

For personal data in your workspace — contacts, form submissions, messages and analytics — you are the controller and Furnace is the processor. For your account and billing information, Furnace is the controller (see the privacy policy).

What we process, and why

  • Subjects: your team members, your contacts and leads, and visitors to your cards.
  • Data: contact details people share, notes and activity you record, consent records, message delivery events and anonymous interaction events.
  • Purpose: hosting and publishing cards, capturing and organising leads, sending messages you approve, running automations and reporting.
  • Duration: for as long as your workspace exists, then deletion from live systems.

Our commitments

  • Process data only on your documented instructions, which include your use of the product and its settings.
  • Keep personnel with access under confidentiality obligations.
  • Apply technical and organisational security measures — described on our security page.
  • Use sub-processors only under written terms with equivalent protections, and keep a current list available on request.
  • Help you respond to data subject requests, with in-product export and deletion for contacts.
  • Notify you without undue delay after becoming aware of a personal data breach affecting your data.
  • Delete or return your data when the service ends.

Sub-processor categories

  • Cloud hosting and database
  • File and media storage
  • Email and SMS delivery
  • Payment processing (Square)
  • AI processing (Anthropic), used only when your workspace uses AI features

International transfers

Where data is transferred across borders, we rely on appropriate safeguards such as standard contractual clauses.

Request the agreement

To sign our data processing agreement or request the sub-processor list, contact us.