The short version
Your company's data belongs to your company. We do not sell it, mine it, train on it, or share it with anybody. We do not run advertising and there is no third party inside this product watching you use it. The only reason we hold anything at all is to show it back to the people you chose to show it to.
What we hold
Your name and email address, because an invitation has to reach somebody. Whatever you choose to put in your profile — a headline, contact details, what you can help with. The companies you belong to and your role in each. The asks and offers you write or receive, and the record of what was delivered and confirmed. Nothing else. There is no tracking, no behavioral profile, and no attempt to work out anything about you that you did not type in yourself.
Who can see it
People in the same company as you, and only to the extent the product shows them. An ask sent to one audience is not readable by somebody outside it — that is enforced by database rules, not only by what the screen draws. Your contact details are visible to the people in the same company by default, and you can hold any of them back from everybody except whoever runs the company — they can always see them, because they have to be able to reach you to ask you for anything. Somebody at a different company cannot see you at all.
And us, because we run it. We can reach your company's data the way anybody hosting a product can, and pretending otherwise would be the kind of half-truth this page is supposed to be the opposite of. What we actually look at day to day is counts — how many companies, how busy each one is, whose free period is ending — and, for the person who administers a company, their name and address, so we can reach them. Not the people they invited, and not anything anybody wrote: no asks, no offers, no ideas, no ledger entries. That is not a promise about our manners, it is what the tool we use is able to load.
Who we share it with
Nobody, and there are exactly two companies involved in running this. Google Firebase stores the data and handles sign-in. Stripe takes the payment from the company — and only from the company, so if you were invited here, Stripe has nothing of yours at all.
What Stripe gets is the billing contact and the card, and nothing else. No stakeholder list, no member, no ask, no offer, no ledger entry, no message. It cannot see any of it. We never hold your card number ourselves; Stripe holds it and we hold a reference.
We do not pass anything to advertisers, data brokers, analytics companies, or AI training sets. If that list of two ever grows it will be by asking you first, not by amending this page quietly.
A founder decides what leaves this product, every time. Nothing is sent on anybody's behalf without them choosing it for that specific batch of people, in that moment. There is no automatic outreach, no sequence running in the background, and no message we decide to send for you.
When a founder invites people, they choose how it goes out. Either it opens a draft in their own mail client, from their own address — the default, because an invitation from a person is trusted and one from a no-reply address is not. Or FULLStrength sends it, and the founder is copied on every single message, so nothing exists that they have not seen.
When you write to us from the support screen, it goes the same way and you are copied on it. It leaves as support@fullstrength.app and carries who you are, which company you were in and which screen you were on, so that nobody has to ask you for them. Anything that has gone wrong in your browser goes with it, with names and addresses already taken out. Your copy is what proves exactly what we received.
When that changes, it will only ever be about your own account — something waiting on you, a contribution confirmed, a question put to you. Never marketing, and never to tell you this product exists.
The off switch already exists, before anything can send. From your profile, any time: all of it, or just one company while you stay reachable at the others. Nobody else can switch it back on — not a founder, not an administrator, not us. Turning it off changes nothing about what is waiting for you here. It only stops us telling you.
When something goes wrong
If the product breaks while you are using it, it tells us. A short report — what broke, and which screen you were on — goes to our own inbox so that a fault you hit is something we fix rather than something you put up with.
It is stripped before it leaves your browser, not after. Email addresses, company names and anything you typed are removed first, because a stakeholder list is the sensitive part of this product and an error message is quite capable of carrying one. Removing it after it arrived would not be removing it.
It goes to us, on our own Google Workspace account. No error-tracking company is involved, and adding one would mean changing this page first.
Taking your data with you
Any time, from your profile. Download everything gives you a complete JSON file of your account, your memberships, everything you wrote or received, and every contribution credited to you. An administrator can export their whole company the same way. No request, no waiting, no format nobody can open.
Deleting your account
Also from your profile, also immediately. It erases your profile, your contact details, your declared capabilities and your ability to sign in. It does not erase the record of work you actually delivered. Each company keeps a row carrying your name and what you did for them, because that is their own business record and the whole reason they use this — a confirmed contribution that could be revoked afterwards would be worth nothing to either side. Everything that is you goes; what you did for somebody else stays with them.
Where it lives
Google Firebase, in the United States. If you are in the UK or the EU, that is an international transfer and you should know it is happening.
This is early software
FULLStrength is in beta and small enough that the person reading your support email wrote the code. Keep your own copy of anything you would be upset to lose — the export button exists for exactly that.