Fixture, Inc. ("Fixture," "we," "us," or "our") provides a customer relationship management platform, including https://fixture.ai and https://fixture.app, our web app, APIs, browser extension, and related services (collectively, the "Services").
This Privacy Policy explains what we collect, how we use it, when we share it, and your choices.
1Scope and Roles
This policy applies to:
- Customers who use Fixture
- Individuals whose data our Customers store in Fixture
- Individuals whose information appears in research or enrichment results, even if they do not use Fixture or have not been saved in a Customer's CRM records
- Visitors to fixture.ai or fixture.app or sites that use Fixture tracking/forms
When Customers use Fixture to manage their CRM data, we generally act as a processor/service provider and the Customer acts as the controller/business.
When we process data for our own operations (for example, account administration, security, support, and compliance), we act as a controller.
For research and enrichment, our role depends on who determines the purposes and means of the processing. Obtaining information from a public source or third-party provider does not, by itself, determine that role.
2Information We Collect
We collect and process categories of information such as:
- Account and workspace information (for example, name, email, profile details, workspace membership)
- CRM data that Customers choose to store (for example, people, companies, leads, deals, notes, and activity data)
- Website and form data processed for Customers (for example, visitor identifiers, page/form interaction data, submission metadata)
- Cookie and similar technology data (for example, session identifiers, persistent visitor identifiers, referrer information, geolocation, and related attribution or identity-resolution data)
- Browser extension capture data from supported sources when a user chooses to capture data
- Research and enrichment data (for example, names, job titles, employers, professional profiles, locations, email addresses, phone numbers, source references, and provider-supplied do-not-call indicators)
- AI feature inputs and outputs, including specific MCP tool inputs and results
- Operational and diagnostic data (for example, product usage, performance, and error data)
These are high-level categories and examples, not an exhaustive list.
External Research Sources
Research and enrichment features obtain information from public websites, search services, professional profiles, and commercial company and contact-data providers. We may receive this information when a Customer or an AI feature requests research, even if the person has not provided their information directly to Fixture. Depending on the tool, we send search terms, profile URLs, or identifying details to the provider to retrieve relevant results.
3How We Use Information
We use information to:
- Provide and operate the Services
- Authenticate users and enforce workspace access controls
- Process Customer data according to Customer instructions
- Support and improve product performance, reliability, and security
- Provide and improve AI assistant features
- Find companies and people, research business relationships, and enrich CRM records with externally sourced information at Customer direction or through configured AI features
- Support visitor identification, attribution, audience enrichment, marketing measurement, and related outreach workflows
- Communicate with users about service and security matters
- Comply with legal obligations and enforce agreements
6Visitor Identification and Marketing
When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses. You may opt out of receiving this advertising by emailing privacy@fixture.app.
7AI Assistants and Connected Services
When you connect Fixture to an MCP-compatible AI assistant, Fixture receives the specific tool calls and inputs the client sends and returns the requested results. Depending on the tool, this may include CRM records, Tasks, organization users, Meeting details or transcripts, generated drafts, and external research results containing contact details or professional information.
Fixture does not request or receive your general assistant conversation history, memory, summaries, or uploaded files except when the connected client includes that content in a tool input. Copies received by the connected assistant provider are governed by that provider's terms, privacy policy, and controls.
Fixture logs MCP tool inputs and outputs. The Fixture MCP server's audit and usage records also contain diagnostic metadata such as user and organization identifiers, authorization scopes, tool name, success or error status, write status, and duration.
When you use Fixture's own AI features, Fixture processes feature inputs, outputs, and related context to provide the requested functionality. Relevant request data may be sent to model providers that support these features.
Research results may be included in AI context, responses, and MCP tool results. Customers may choose to save results in CRM records. Providing contact information does not establish the person's consent to outreach. Customers must comply with the research and contact-information requirements in our Terms of Service.
Google User Data and Limited Use
Fixture's use and transfer of raw or derived user data received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
We do not use this data to train generalized AI or machine learning models. We do not transfer this data to third-party services for such training, including aggregated or anonymized data. When our AI features process Google user data, we restrict routing to model provider endpoints that do not train on that data and enable OpenRouter's training-provider exclusion.
8Data Retention
We retain data as long as needed to provide the Services, satisfy legal obligations, resolve disputes, and protect the Services.
In general:
- Account/workspace data is retained while the account is active, plus a reasonable period for legal and operational needs
- Customer CRM/tracking/forms data is retained until deleted by the Customer or required to be retained by law
- Logs and diagnostics are retained according to operational and security needs
Research information may remain in AI conversations, MCP tool logs, or saved CRM records after a search ends. Retention depends on where the information is stored and whether it is needed for the purposes described above. Completing a search does not automatically delete those copies. Copies held by Customers or connected assistant providers are also subject to their own retention practices and applicable obligations.
9Security
We use technical and organizational safeguards designed to protect personal information, including encryption in transit, access controls, and security monitoring.
No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.
10International Data Transfers
Fixture is based in the United States. Data may be processed in the U.S. and other countries where we or our service providers operate.
Where required, we use appropriate safeguards for international data transfers.
11Your Rights and Choices
Depending on where you live, you may have rights such as access, correction, deletion, portability, restriction, objection, withdrawal of consent, and opting out of certain sales, sharing, or targeted advertising.
To submit a privacy request, email privacy@fixture.app.
You do not need a Fixture account to submit a request about information returned by our research or enrichment features. You may request access, correction, deletion, or exercise other rights that apply to you through the same email address. If available, include the profile URL or other source reference that helps us identify the information.
If your data is controlled by one of our Customers, you may contact that Customer directly. If you contact Fixture, we will respond to requests for processing we control and assist Customers with requests as required by law and contract. Rights and exceptions depend on applicable law. A request to Fixture does not itself unsubscribe you from a Customer's communications; you can also use the Customer's unsubscribe or privacy-request channel.
Global Privacy Control (GPC)
Where required by applicable law, we will process legally recognized browser-based opt-out preference signals, such as Global Privacy Control, as requests to opt out of relevant sale, sharing, or targeted-advertising activities for the browser or device that sent the signal.
12Children's Privacy
The Services are not directed to children under 16, and we do not knowingly collect personal information from children under 16.
13Changes to This Policy
We may update this Privacy Policy from time to time. If changes are material, we will provide notice by updating this page and, where appropriate, by email or in-product notice.
14Contact and DPA
Fixture, Inc.
2261 Market St, STE 46126
San Francisco, CA 94114
Email: privacy@fixture.app
A detailed subprocessor list and Data Processing Agreement (DPA) are available upon request. Email privacy@fixture.app.