Privacy

Privacy policy

Operator: Brox AI, Inc.
Last updated: 31 October 2026
Questions: privacy@faure.ai

1. Overview

Fauré is a research panel operated by Brox AI, Inc. ("Brox", "we", "us", "our"). Brox is the data controller responsible for protecting the privacy of Fauré members and applicants ("members", "you"). This policy explains how we collect, use, store, share, and protect your personal information when you use Fauré, including the website at faure.ai and its subdomains, the membership application, and the Fauré research programme.

We operate on a simple principle: your identity is never sold nor shared with third parties in identifiable form.

This policy applies to all individuals who visit our website, submit an application, or participate in the research panel, regardless of location. It covers our obligations under the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and other applicable privacy laws.

Contact details:
Brox AI, Inc.
Los Angeles, California, USA
Privacy enquiries: privacy@faure.ai

2. Information we collect

We collect the following categories of personal information:

Information you provide directly:

Identifiers: name and email address
Application data: your responses on the membership application form, including your LinkedIn profile if you choose to share it, your country and city, and how you describe your professional background
Professional information gathered during verification and membership: background, roles, and areas of experience
Interview content: audio and video recordings of research sessions, and transcripts derived from them
Communications: emails and messages you send to us

Information we generate:

Profiles and behavioural models ("digital twins") created from your interview responses using AI
Peer benchmarking data: how your perspectives compare to others in the panel
Inferences and insights: decision-making patterns, communication style analysis, and perspective mapping

Information collected automatically:

Usage data: session frequency, feature usage, pages visited (collected via Plausible Analytics, which sets no cookies, collects no personal data, and performs no cross-site tracking)
Device and browser information: browser type, operating system, and the device type you apply from

Sensitive personal information:

Fauré sessions are conversations about how you think: money, legacy, family, risk, taste, time. Your responses may therefore include information about your finances, investments, and family, and depending on the topics discussed may include information relating to health, political opinions, or other categories considered sensitive under GDPR (Article 9) or CCPA. We process such data only with your explicit consent (see Section 4).

We do not ask for bank account details, government identification numbers, or other financial identifiers on this website. If SARs you hold reach settlement, we may at that point need information required for tax reporting; we will ask you directly at the time and use it only for that purpose.

3. How we use your information

Your information is used for the following purposes:

Evaluate your membership application
Conduct AI-powered research conversations, video interviews, and in-person research sessions
Generate your personal insights, profile, and behavioural model (digital twin)
Create anonymised, aggregated benchmarks for peer comparison
Power Brox's research products for its enterprise clients, including answers from behavioural models built from members' conversations, never linked to your identity
Administer SAR grants for completed sessions under your individual SAR agreement
Communicate with you about your membership, sessions, and insights
Improve our platform, AI capabilities, and research methodology
Comply with legal and regulatory obligations

If you are located in the European Economic Area (EEA) or the United Kingdom, we rely on the following lawful bases under Article 6 of the GDPR:

Pre-contractual steps and contract performance (Article 6(1)(b)): Processing your application, administering your panel membership, scheduling sessions, and administering SAR grants under your individual SAR agreement
Consent (Article 6(1)(a)): Recording and transcribing your interviews, creating your behavioural model (digital twin), processing any sensitive personal data (Article 9(2)(a)), and sending marketing communications
Legitimate interest (Article 6(1)(f)): Producing research for Brox's enterprise clients without identifying you, improving our platform and AI, fraud prevention, and security. Our legitimate interest is in operating and improving a research platform, and we have assessed that this does not override your rights and freedoms
Legal obligation (Article 6(1)(c)): Tax reporting and record-keeping obligations related to SAR administration

Where we rely on consent, you may withdraw it at any time (see Section 10). Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

We never sell your personal information. We do not sell, rent, or trade personally identifiable data to any third party.

What research clients receive:

Brox's enterprise clients receive research built from panel conversations, never anything that identifies you. This may include:

Answers from behavioural models (digital twins) built from members' conversations, including yours (see Section 6)
Statistical summaries (for example, the share of members who hold a given view)
Thematic analyses with short quotes that are never linked to your name or identity
Trend reports based on panel perspectives

Clients never receive your name, contact details, employer, voice, face or anything else that identifies you.

The exchange, stated plainly: your insights, with your identity removed, power Brox's research products, and in return completed sessions earn SAR grants in Brox AI, Inc., so you hold a share of the upside you help create. As with any early-stage company, there is no guarantee of future value; SARs may ultimately be worth nothing.

One company, no inter-company transfers: Fauré is not a separate legal entity. Brox AI, Inc. operates the panel directly, so the company you apply to, the company that holds your data, and the company whose research products your insights power are one and the same. Your personal data is not transferred to a parent, subsidiary, or affiliate as part of ordinary operations.

Service providers (sub-processors):

We use third-party service providers to operate Fauré. These providers process data on our behalf under data processing agreements and may only use your data for the purposes we specify. For the website and application process:

Website hosting and the application form endpoint (Vercel)
Application storage infrastructure (Supabase)
Privacy-friendly analytics (Plausible), which does not receive personal data and is used only for aggregate site traffic measurement

For the research programme, engaged once your membership and sessions begin:

AI and language model providers for interview processing and insight generation (Anthropic)
Conversational voice AI for AI-led interviews, which receives interview audio and returns transcripts (ElevenLabs)
Video interview scheduling, hosting, and transcription (Google)
Transactional email delivery (Resend)

Third-party AI services:

Fauré's conversations are run and analysed by two third-party AI service providers. In the Fauré app and on app.faure.ai, we ask for your permission before any of your data is sent to either of them, and we record your answer.

What is sent: your voice while you speak in an AI voice conversation, and anything you type in a conversation or chat; the transcripts of your conversations and your answers to pulses; your first name and the profile details you have given us (such as your role, country and self-reported demographics), with a summary of your earlier conversations so that a conversation can follow on from the last; and the questions you ask in Query.
How it is collected: directly from you, through the microphone while a voice conversation is running and through what you type, and from the profile and conversation history we already hold about you.
Who receives it, and what for: ElevenLabs, Inc. runs each voice and text conversation (it converts your speech to text, generates the interviewer's replies and speaks them). Anthropic, PBC provides the Claude AI models that guide each conversation and that analyse your transcripts to produce your insights, your AI profile (Section 6) and the answers you see in Query.
When you apply: if you give your permission on the application form (a separate checkbox, required to submit), your name, email address, organisation, role, location and any LinkedIn link you provide are sent to Anthropic, PBC, whose Claude AI models search the public web to help us verify your application. Nothing from an application is sent to any AI service without that permission.
Protection: both providers process this data only on our instructions, under data processing agreements, and only to provide these services to us. They are required to protect it to the same standard as this policy. We do not permit either provider to sell it.
Your choice: you can decline, and you can withdraw your permission at any time by contacting privacy@faure.ai. Without it you will not be able to take part in AI conversations.

This list reflects our material sub-processors at the date of this policy. We may add or replace providers of equivalent function under equivalent safeguards; you can request the current list at any time via privacy@faure.ai.

Legal and regulatory:

We may disclose personal information where required by law, regulation, legal process, or enforceable governmental request.

6. Your AI profile and automated processing

As you participate in conversations, our AI builds an evolving behavioural model (sometimes called a "digital twin") of your perspectives, communication patterns, and decision-making frameworks. This constitutes profiling under GDPR Article 4(4).

How it works:

Your interview responses (voice, video, and text) are processed by AI systems
The AI analyses your reasoning patterns, areas of experience, communication style, and perspectives
This produces a behavioural profile that evolves with each session
Research clients may ask questions of behavioural models built this way, including yours, and receive their answers; they never receive your name or anything that identifies you

Your profile is:

Visible to you in your member dashboard on app.faure.ai
Used to personalise your conversation experience and generate peer benchmarks
Never shared with other members or external parties in identifiable form
Deletable at your request

Automated decision-making:

No decisions with legal or similarly significant effects are made about you based solely on automated processing. Your behavioural profile is used for research insight generation, not for making decisions that affect your rights, compensation, or membership status. You have the right to request human review of any processing that affects you.

7. International data transfers

Brox AI, Inc. is based in the United States. If you are located in the EEA, UK, or another jurisdiction with data transfer restrictions, your personal data will be transferred to and processed in the United States.

We protect international transfers using appropriate safeguards, principally:

Standard Contractual Clauses (SCCs) approved by the European Commission, entered into with our service providers
UK International Data Transfer Agreement (IDTA) or UK Addendum to SCCs for UK transfers
EU-US Data Privacy Framework (DPF) certification, where a service provider holds an active certification

Our sub-processors (cloud hosting, AI providers, email services) are also subject to appropriate transfer safeguards. You may request a copy of the relevant safeguards by contacting privacy@faure.ai.

8. Data retention

We retain your data only for as long as necessary to fulfil the purposes described in this policy. Our retention periods are:

Application data (if not accepted): 12 months after the application decision, then deleted
Account and contact information: Duration of your membership plus 12 months after departure
Interview recordings and transcripts: Duration of your membership plus 6 months, or until you withdraw consent or request deletion
Behavioural model (digital twin): Duration of your membership plus 6 months, or until you withdraw consent or request deletion
Anonymised, aggregated insights: Retained indefinitely, as they are no longer personal data
SAR and related financial records: 7 years after the relevant grant vests, settles, or expires, as required by tax and securities law
Communication records: 3 years

If you request deletion, we will delete your personally identifiable information within 30 days, except where retention is required by law (for example, records relating to SAR grants).

9. Data security

We implement industry-standard security measures to protect your data, including encryption in transit and at rest, access controls, and regular security reviews. Conversation data is stored securely and access is limited to authorised personnel who are all monitored and regularly screened. Application data is held in a dedicated database, separate from the systems that serve Brox's enterprise clients, and clients never receive access to systems holding your identifiable information.

10. Your rights

Rights for all members:

Regardless of where you are located, you have the right to:

Access all data we hold about you
Request correction of inaccurate data
Request deletion of your data and AI profile
Withdraw from the panel at any time
Export your conversation history and insights
Opt out of specific research topics
Withdraw consent for data processing at any time

Additional rights under GDPR (EEA and UK residents):

If you are in the EEA or UK, you also have the right to:

Data portability (Article 20): receive your data in a structured, commonly used, machine-readable format
Restriction of processing (Article 18): request that we stop processing your data while a concern is resolved
Object to processing (Article 21): object to processing based on legitimate interest, and we will stop unless we demonstrate compelling legitimate grounds
Lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk. In the EU, contact your national data protection authority

Additional rights under CCPA/CPRA (California residents):

If you are a California resident, you also have the right to:

Right to know: request the categories and specific pieces of personal information we have collected, the sources, purposes, and categories of third parties with whom we share it
Right to delete: request deletion of your personal information
Right to correct: request correction of inaccurate personal information
Right to opt out of sale or sharing: we do not sell your personal information, and we do not share it for cross-context behavioural advertising. The Fauré website runs no advertising pixels and sets no marketing cookies. See Section 12
Right to limit use of sensitive personal information: request that we limit our use of sensitive personal information to what is necessary for our services
Right to non-discrimination: we will not discriminate against you for exercising your CCPA rights
Authorised agents: you may designate an authorised agent to make requests on your behalf by contacting us at privacy@faure.ai

How to exercise your rights:

Contact us at privacy@faure.ai. We will respond to verifiable requests within 30 days (GDPR) or 45 days (CCPA). We may need to verify your identity before processing your request. We do not charge a fee for reasonable requests.

We collect consent at two stages: when you apply, and the first time you sign in.

At application: When you submit your application, you certify, once, that you currently hold the professional role you describe and that the information you provide is accurate, and you authorise us to verify it with third-party sources. You also acknowledge our Privacy Policy and Terms of Use, consent to Brox AI, Inc. holding your data, including information that identifies you, to review your application, administer your membership and power its research products (research clients never receive anything that identifies you, see Section 5), agree that your application details may be sent to Anthropic, PBC so that its AI models can help us verify your application from public sources, and acknowledge that compensation is granted as SARs, not cash. Each consent is recorded with your application, together with the version of the consent wording and a server-side timestamp. After you apply, we ask you to record a short hello video, and we review every application, and its video, by hand. If we accept your application, we create your member account.

The first time you sign in: Before anything you say or type in a conversation is sent to the AI service providers that run and analyse Fauré conversations (see sections 5 and 6), we ask your permission. Until you agree, nothing is sent to them and you cannot take part in conversations. Your answer is recorded with the version of the wording you saw and a timestamp, and if what we send or to whom changes, we ask you again.

Withdrawing consent: You may withdraw any consent at any time by contacting privacy@faure.ai. Withdrawal is as easy as giving consent. If you withdraw consent for core processing (interviews, digital twin creation), we will no longer be able to include you in the research programme, but this does not affect the lawfulness of processing carried out before withdrawal.

12. Do not sell or share

We do not sell your personal information. We do not sell, rent, or make available your personal information to third parties for monetary consideration.

We do not "share" your personal information as that term is defined by the CCPA/CPRA. The Fauré website runs no advertising pixels, no marketing tags, and no cross-context behavioural advertising of any kind. Our only analytics tool, Plausible, sets no cookies and collects no personal data.

The research we provide to enterprise clients (answers from behavioural models, statistical summaries and quotes, as described in Section 5) never includes your name or anything else that identifies you. We maintain technical and organisational safeguards to prevent re-identification, and our client agreements contractually prohibit any attempt to re-identify members.

13. Notice of financial incentive (California)

Under the CCPA, we are required to provide notice of financial incentive programmes that involve the collection of personal information. Fauré's member compensation programme constitutes a financial incentive.

Programme terms:

Members are granted Stock Appreciation Rights (SARs) in Brox AI, Inc. for completed sessions: a grant with an initial notional value of $500 for a completed video interview (approximately 45 minutes), and grants with an initial notional value of $5 per minute for AI voice conversations (typically 5 to 30 minutes)
Grants are made under an individual SAR agreement, which governs vesting, settlement, and all terms
SARs are not cash, shares, options, or a purchase of securities. As with any early-stage company, there is no guarantee of future value; SARs may ultimately be worth nothing

What data is collected in exchange:

Interview recordings, transcripts, and derived insights
Your perspectives on research topics
Behavioural profile data used to build your behavioural model and Brox's research products

Value methodology:

We estimate the value of each member's data based on the revenue generated from research products built on panel data divided by the number of active members, and have set initial notional grant values so that the compensation offered is reasonably related to the value of the data provided.

Your rights:

Participation is entirely voluntary. You may withdraw from the programme at any time by contacting us. Withdrawal will end your panel membership and future grants, but will not result in any penalty or discrimination. SARs already granted remain governed by your individual SAR agreement.

14. Cookies and tracking

The Fauré website sets no cookies. We run no advertising pixels, no marketing tags, and no cross-site tracking, which is why there is no cookie banner to click through.

What we do use:

Plausible Analytics (cookie-free). Privacy-friendly, EU-hosted traffic analytics. Plausible does not set cookies, does not collect any personal data, and does not perform cross-site or cross-device tracking. Because of this it is exempt from consent requirements under the ePrivacy Directive.
Campaign attribution (session storage). If you arrive via a link carrying a referral code or campaign parameters, we hold them in your browser's session storage so they can be attached to your application if you apply. These entries are cleared when you close your browser tab, are not shared with third parties, and are not used for tracking across sites.
Consent records. The attestation and consents you give on the application form are stored with your application, together with the consent version and server-side timestamps, so we can evidence what you agreed to and when.

When the Fauré member platform opens, signing in will require strictly necessary authentication tokens stored in your browser; we will update this section at that time. If we ever introduce advertising pixels, we will add a consent banner and update this policy before any such tag loads.

15. Children's privacy

Fauré is designed for experienced individuals. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected data from a minor, we will delete it promptly.

16. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last Updated" date above and notify active members by email at least 30 days before the changes take effect. Your continued use of Fauré after changes are posted constitutes acceptance.

17. Contact

For privacy-related questions, requests, or complaints, please contact us at privacy@faure.ai.

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.