Privacy Policy
Last updated: October 14, 2026
What personal data Firebeam processes, why, and the rights you have over it — written to be read, not skimmed past.
1. Who this covers
The controller for this personal data is Mindpillar AB (Swedish company reg. no. 559546-6102), which operates Firebeam. This policy covers personal data processed when you visit our website, create an account, or use Firebeam. For data your organization syncs into Firebeam from connected tools, your organization is the data controller and we act as processor under our Data Processing Agreement — this policy explains our processing honestly either way.
2. Data we process
Account data: your name, email address, locale and role. Workspace content: the work items, comments and history synced from tools you connect, and the content your team creates in Firebeam. Billing data: handled by our payment provider Paddle — we never see or store your full card details. Technical data: logs and error reports needed to run the service securely.
3. Cookies
Firebeam uses functional cookies only: session authentication, theme, language and interface preferences. We do not run third-party advertising or cross-site tracking cookies.
4. Why we process it
To provide the service you signed up for (contract), to secure and improve it (legitimate interest), to meet legal obligations such as bookkeeping (legal obligation), and — only where we ask — with your consent. We do not sell personal data.
5. AI processing
When you trigger an AI feature, the relevant workspace content is sent to our AI provider to generate the output, and the generation is logged with token counts for billing. Our AI providers process this data to serve your request; they are not permitted to use your content to train their models.
6. Who we share data with
Subprocessors that help us run the service: payment processing (Paddle, as merchant of record), AI generation (Scaleway, on servers in Paris, France, by default; Google and Anthropic only for workspaces that choose AI models outside the EU), transactional email (Resend), and error monitoring (Sentry, where enabled). Each processes only what its function requires. Tools you connect via Integrations receive and return data under your own authorization and their own terms. Beyond that, we disclose data only if the law requires it.
7. International transfers
Where a subprocessor processes data outside the EU/EEA, we rely on adequacy decisions or standard contractual clauses to protect it. AI processing takes place in the EU by default. If a workspace administrator turns off EU model location, that workspace’s AI requests are processed by Google or Anthropic outside the EU on this basis.
8. How long we keep data
Account and workspace data is kept while your account is active. If a workspace becomes fully inactive for an extended period, we warn its members by email before deleting it — with a final reminder — and any login resets the process. When you delete your workspace or ask us to, the data is removed along with its module content. Disconnecting an integration invalidates its stored tokens immediately.
9. Security
Traffic is encrypted in transit, workspaces are isolated from each other at the database level, access follows role-based permissions you control, and administrative actions such as support impersonation are audited. The Security page describes our measures in more detail.
10. Your rights
You can access, correct, export or delete your personal data, object to or restrict certain processing, and withdraw consent where processing is based on it. Contact us and we will respond within the timelines the GDPR sets. You also have the right to lodge a complaint with your supervisory authority — in Sweden, the Swedish Authority for Privacy Protection (IMY).
11. Children
Firebeam is a workplace tool and not directed at children under 16. We do not knowingly process children's data.
12. Changes to this policy
If we change this policy in a way that matters, we will notify you by email or in the product before the change takes effect. The date at the top always tells you when it was last revised.
Questions about this page? support@firebeam.eu