Clear about the data
the workflow needs.

Scope of this notice.

Followary is currently an invite-only private test for service-business inquiry and follow-up workflows. It is not yet a public consumer service or a generally available commercial product.

Marteinn Hilmarsson is the operator of Followary. Current private-test contact arrangements are described on the Contact page. The permanent public privacy contact and the remaining business disclosures are being finalized before public enrollment and live commercial billing.

Information the product can process.

• Account information: sign-in email, user identity and workspace role.
• Business settings: business name, category, service labels, timezone, intake settings and follow-up wording.
• Inquiry information: customer name, email, phone, subject, request details, service label, priority and inquiry state when supplied by the business or customer.
• Communication data: prepared messages, sent-message state, customer replies, opt-out events and follow-up timing.
• Delivery and safety data: delivery, bounce, failure, suppression and complaint state needed to prevent unsafe repeat sending.
• Billing state: subscription identifiers and status received from the test billing flow. Payment-card details are handled by the checkout provider rather than stored in the Followary browser client.
• Operational records: limited automation, webhook and rate-limit records used to keep the service working and diagnose failures.

Why the data is used.

Data is used to provide the workspace, organize inquiries, prepare follow-ups, route replies, stop future follow-up when appropriate, enforce access controls, show delivery state, maintain email safety, test subscription status and diagnose technical problems.

Followary is not currently using the public website to run third-party advertising or behavioral analytics.

Current technical providers.

Retention during private testing.

Daily operational housekeeping removes automation worker-run summaries older than 30 days, Followary Operator event records older than 30 days, email delivery webhook receipt records older than 90 days, public-intake rate-limit rows older than 2 days and hashed account-email rate-limit fingerprints older than 2 days. These age thresholds are applied by scheduled cleanup, not a promise of deletion at the exact second the threshold is reached. Inquiry and message history is separate from those operational cleanup rules and is retained with the workspace during private testing until deliberate workspace removal.

Workspace owners and administrators can export workspace data as JSON. The export excludes Followary routing secrets. A workspace owner can request workspace deletion by confirming the workspace name or slug; the request starts a 24-hour cooling-off period and can be cancelled during that period. Deletion does not happen merely because that period has elapsed: an authorized service operation must complete the request. That operation removes the workspace and its workspace-owned inquiry, message and configuration records from the primary database. Separate sign-in accounts, deletion-request records and records held independently by technical providers are not automatically erased by that workspace operation.

The selected Supabase Pro plan provides daily database backups with seven-day retention. Records present in a protected backup snapshot can remain until that snapshot ages out. Verification of Followary’s managed-backup availability and full recovery path is still being completed; the isolated application-data restore test did not include password hashes or provider secrets.

The final rule for how long an inactive or ended workspace remains available before deletion is still an owner decision for public launch. It will be stated explicitly rather than inferred from these technical cleanup schedules.

Your choices and current limits.

Do not place information in Followary that you are not authorized to process. Businesses using the private test are responsible for the customer information they enter or collect through their request form.

If a customer opts out, Followary records suppression state so later email follow-up can be blocked. Workspace owners and administrators can export workspace data; workspace owners can also start or cancel a guarded deletion request from the workspace.