Privacy Policy
This policy explains what information Falcon Studio collects, why, who it is shared with, how long it is kept, and the choices you have. It includes a dedicated section on the Google user data Falcon Studio accesses.
In short, for Google users: when you sign in with Google, Falcon Studio receives only your name, email address and profile picture, and uses them only to sign you in and show who you are. Falcon Studio does not sell Google user data, does not use it for advertising, and does not use it to train AI models. Falcon Studio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke access at any time at myaccount.google.com/permissions, or ask us to delete your data by emailing noc@lead.com.
1. Who we are
Falcon Studio ("Falcon", "we", "us") is a service that lets companies build AI agents that talk to their customers. It is operated by Lead Capital. You can reach us at noc@lead.com.
We are the controller of the information we use to run Falcon for the people who sign in to it: account, sign-in, usage and billing records. Where we process information inside a company's workspace on that company's instructions, such as the messages its agents send and receive and the contacts it adds, the company is the controller and we act as its service provider (processor).
2. What we collect
- Account and sign-in data: your name, email address, profile picture, and the account identifier Google or Microsoft gives us when you sign in with them. We do not receive or store your Google or Microsoft password.
- Connected-account data: if you connect an account such as Gmail or a calendar, the access tokens that let Falcon act on it, and the data the workflows you set up need. See Google user data.
- Content companies put in Studio: agent settings, instructions, knowledge documents, files, identities and contacts a company adds.
- Messages: messages that agents send and receive on a company's behalf by email, text, voice and chat, with their delivery status and the consent and opt-out choices of the people they go to.
- Usage and billing records: which features are used, how much model and messaging capacity is consumed, and the records needed to enforce spending limits and bill for it.
- Technical logs: a minimal set of logs, such as request times, IP addresses, browser type and error details, kept to run and secure the service.
- Cookies: Falcon Studio uses only the cookies it needs to keep you signed in and secure. This public website sets no cookies, and neither uses advertising or analytics trackers.
- What you send us: emails and requests you send to us, and our replies.
3. How we use it, and our legal bases
We use information only for these purposes:
- To provide Falcon Studio: signing you in, running agents and workflows, and delivering the messages a company asks us to send. Legal basis: performance of our contract with you or your company.
- To keep the service secure: preventing abuse, investigating incidents and fixing problems. Legal basis: our legitimate interest in a safe, working service.
- To measure usage, enforce spending limits and bill. Legal basis: performance of contract, and our legitimate interest in accurate billing.
- To contact you about your account and the service, such as security notices and changes to these terms. Legal basis: performance of contract and legitimate interest.
- To act on connected accounts such as Gmail, only for the features you turn on. Legal basis: your consent, which you can withdraw at any time by disconnecting.
- To meet legal obligations, such as tax records and lawful requests. Legal basis: legal obligation.
We do not sell personal information, we do not use it for advertising, and we do not use company content or Google user data to train our own or anyone else's AI models.
4. Google user data
This section describes exactly what Falcon Studio accesses from your Google account, why, and how you stay in control of it.
What Falcon Studio accesses, and why
-
Google sign-in (the
openid,emailandprofilescopes): your name, email address and profile picture. We use them only to sign you in to Falcon Studio and to show who you are, for example next to your changes. - Reading mail and calendars through connected apps: only when you connect them, and only for the workflows you set up, such as drafting a reply to a new email or checking your availability. You can disconnect at any time.
How it is used
Only to provide the features you turned on. Google user data is never used for advertising, never sold, and never used to train AI models. People at Falcon do not read it unless you ask us to for support, it is needed to investigate security or abuse, or the law requires it.
How it is stored and protected
Access tokens are encrypted and kept in AWS Secrets Manager or an encrypted database. All Google user data is encrypted in transit and at rest, and access is limited to the parts of the service that need it to do what you asked.
Sharing
Falcon Studio does not sell, rent or trade Google user data, and does not share it with anyone except these service providers, only as needed to run the features you use:
- Amazon Web Services (United States) hosts Falcon Studio and stores all Google user data, encrypted. Your Google sign-in data (name, email address and profile picture) goes to no one else.
- AI model providers (Anthropic, OpenAI, Google and xAI, directly or through OpenRouter): only if you connect Gmail and turn on a workflow that drafts or answers email, the text of the messages involved is sent to the model your company chose, to write the reply, under terms that do not allow them to train models on it.
- Our app-connection service (United States): if you connect Gmail or Google Calendar through Falcon Studio's app connections, this service holds the connection and passes Falcon Studio the messages or events a workflow you turned on needs. It acts only on Falcon Studio's instructions.
- Law enforcement or regulators, only when the law requires it.
Each provider is bound by a contract that limits its use of the data to providing its service to Falcon Studio.
Retention and deletion
- Access tokens are deleted when you disconnect the account in Falcon Studio, or when you delete your Falcon account.
- You can revoke Falcon's access at any time from your Google Account at myaccount.google.com/permissions. Falcon stops using the connection as soon as Google revokes it, and deletes the stored token.
- To have your sign-in link and any other Google user data we hold deleted, email noc@lead.com from the address you sign in with. We delete it within 30 days and confirm when it is done.
Limited Use
Falcon Studio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
5. Who we share it with
We share information only with service providers that help us run Falcon, under contracts that limit how they may use it:
- Cloud hosting: Amazon Web Services, which hosts Falcon Studio and its data.
- Model providers: the AI model providers a company chooses for its agents, which process the content needed to answer each request.
- App-connection providers: services that connect agents to the apps a company authorises, such as email, calendar and CRM tools.
- Messaging providers: services that deliver email, text, voice and chat messages.
We may also disclose information where the law requires it, or to protect the rights, safety and security of our users and the service. If Falcon is ever sold or merged, information would move to the new operator only under this policy, and we would tell you first.
6. Where it is stored
Falcon runs on Amazon Web Services in the United States. A company can also choose to run its agents in its own AWS account.
7. How long we keep it
- Account information: while your account is active, and deleted within 30 days after you or your company close it.
- Connected-account tokens: until you disconnect the account or delete your Falcon account.
- Company content and messages: while the company uses Falcon. When a company closes its account, we delete its files, knowledge and memory within 30 days.
- Usage and billing records: as long as needed for accounting and legal purposes.
- Technical logs: a short period, unless needed to investigate an incident.
8. Security
Data is encrypted in transit and at rest. Secrets and access tokens are kept in AWS Secrets Manager or encrypted storage. Each company's data is kept separate, and access is limited to the people and systems that need it. No system is perfectly secure, but we work to protect information and will notify affected customers of a breach as the law requires.
9. Your rights and choices
Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict how it is used, and to withdraw consent at any time. To use any of these rights, email noc@lead.com. We may need to confirm it is you, and we reply within 30 days.
If your information is in a company's workspace, for example because one of its agents messaged you, please contact that company first; we will help them respond. You can opt out of messages by replying STOP to a text, or by using the unsubscribe link in an email.
You can also complain to your local data protection authority. We do not sell personal information or share it for targeted advertising.
10. Children
Falcon is a business service and is not meant for anyone under 16. We do not knowingly collect information from children under 16. If you believe a child has given us information, contact us and we will delete it.
11. Changes to this policy
We will update this page when our practices change and revise the date at the top. For significant changes, we will notify account holders before they take effect.
12. Contact
Lead Capital, operator of Falcon Studio
Questions or requests: noc@lead.com