Privacy

Privacy policy

Operator: Brox AI, Inc.
Last updated: August 2026
Questions: privacy@faure.ai

1. Overview

Faure is a research panel operated by Brox AI, Inc. ("Brox", "we", "us", "our"). Brox is the data controller responsible for protecting the privacy of Faure members and applicants ("members", "you"). This policy explains how we collect, use, store, share, and protect your personal information when you use Faure, including the website at faure.ai and its subdomains, the membership application, and the Faure research programme.

We operate on a simple principle: your identity is never sold nor shared with third parties in identifiable form.

This policy applies to all individuals who visit our website, submit an application, or participate in the research panel, regardless of location. It covers our obligations under the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and other applicable privacy laws.

Contact details:
Brox AI, Inc.
Los Angeles, California, USA
Privacy enquiries: privacy@faure.ai

2. Information we collect

We collect the following categories of personal information:

Information you provide directly:

Identifiers: name and email address
Application data: your responses on the membership application form, including your LinkedIn profile if you choose to share it, your country and city, and how you describe your professional background
Professional information gathered during verification and membership: background, roles, and areas of experience
Interview content: audio and video recordings of research sessions, and transcripts derived from them
Communications: emails and messages you send to us

Information we generate:

Profiles and behavioural models ("digital twins") created from your interview responses using AI
Peer benchmarking data: how your perspectives compare to others in the panel
Inferences and insights: decision-making patterns, communication style analysis, and perspective mapping

Information collected automatically:

Usage data: session frequency, feature usage, pages visited (collected via Plausible Analytics, which sets no cookies, collects no personal data, and performs no cross-site tracking)
Device and browser information: browser type, operating system, and the device type you apply from

Sensitive personal information:

Faure sessions are conversations about how you think: money, legacy, family, risk, taste, time. Your responses may therefore include information about your finances, investments, and family, and depending on the topics discussed may include information relating to health, political opinions, or other categories considered sensitive under GDPR (Article 9) or CCPA. We process such data only with your explicit consent (see Section 4).

We do not ask for bank account details, government identification numbers, or other financial identifiers on this website. If SARs you hold reach settlement, we may at that point need information required for tax reporting; we will ask you directly at the time and use it only for that purpose.

3. How we use your information

Your information is used for the following purposes:

Evaluate your membership application
Conduct AI-powered research conversations, video interviews, and in-person research sessions
Generate your personal insights, profile, and behavioural model (digital twin)
Create anonymised, aggregated benchmarks for peer comparison
Produce anonymised, aggregated research insights that power Brox's research products for its enterprise clients
Administer SAR grants for completed sessions under your individual SAR agreement
Communicate with you about your membership, sessions, and insights
Improve our platform, AI capabilities, and research methodology
Comply with legal and regulatory obligations

If you are located in the European Economic Area (EEA) or the United Kingdom, we rely on the following lawful bases under Article 6 of the GDPR:

Pre-contractual steps and contract performance (Article 6(1)(b)): Processing your application, administering your panel membership, scheduling sessions, and administering SAR grants under your individual SAR agreement
Consent (Article 6(1)(a)): Recording and transcribing your interviews, creating your behavioural model (digital twin), processing any sensitive personal data (Article 9(2)(a)), and sending marketing communications
Legitimate interest (Article 6(1)(f)): Producing anonymised, aggregated research insights, improving our platform and AI, fraud prevention, and security. Our legitimate interest is in operating and improving a research platform, and we have assessed that this does not override your rights and freedoms
Legal obligation (Article 6(1)(c)): Tax reporting and record-keeping obligations related to SAR administration

Where we rely on consent, you may withdraw it at any time (see Section 10). Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

We never sell your personal information. We do not sell, rent, or trade personally identifiable data to any third party.

Anonymised research insights:

Brox's enterprise clients receive aggregated, anonymised insights derived from panel conversations. Individual responses are stripped of identifying information before being included in any aggregate analysis. These may include:

Statistical summaries (for example, the share of members who hold a given view)
Thematic analyses with anonymised quotes
Trend reports based on aggregated panel perspectives

The exchange, stated plainly: your anonymised, aggregated insights power Brox's research products, and in return completed sessions earn SAR grants in Brox AI, Inc., so you hold a share of the upside you help create. As with any early-stage company, there is no guarantee of future value; SARs may ultimately be worth nothing.

One company, no inter-company transfers: Faure is not a separate legal entity. Brox AI, Inc. operates the panel directly, so the company you apply to, the company that holds your data, and the company whose research products your anonymised insights power are one and the same. Your personal data is not transferred to a parent, subsidiary, or affiliate as part of ordinary operations.

Service providers (sub-processors):

We use third-party service providers to operate Faure. These providers process data on our behalf under data processing agreements and may only use your data for the purposes we specify. For the website and application process:

Website hosting and the application form endpoint (Vercel)
Application storage infrastructure (Supabase)
Privacy-friendly analytics (Plausible), which does not receive personal data and is used only for aggregate site traffic measurement

For the research programme, engaged once your membership and sessions begin:

AI and language model providers for interview processing and insight generation (Anthropic)
Conversational voice AI for AI-led interviews, which receives interview audio and returns transcripts (ElevenLabs)
Video interview scheduling, hosting, and transcription (Google)
Transactional email delivery (Resend)

This list reflects our material sub-processors at the date of this policy. We may add or replace providers of equivalent function under equivalent safeguards; you can request the current list at any time via privacy@faure.ai.

Legal and regulatory:

We may disclose personal information where required by law, regulation, legal process, or enforceable governmental request.

6. Your AI profile and automated processing

As you participate in conversations, our AI builds an evolving behavioural model (sometimes called a "digital twin") of your perspectives, communication patterns, and decision-making frameworks. This constitutes profiling under GDPR Article 4(4).

How it works:

Your interview responses (voice, video, and text) are processed by AI systems
The AI analyses your reasoning patterns, areas of experience, communication style, and perspectives
This produces a behavioural profile that evolves with each session
Anonymised, aggregated insights derived from these profiles power Brox's research products for enterprise clients

Your profile is:

Visible to you in your member dashboard once the Faure member platform opens
Used to personalise your conversation experience and generate peer benchmarks
Never shared with other members or external parties in identifiable form
Deletable at your request

Automated decision-making:

No decisions with legal or similarly significant effects are made about you based solely on automated processing. Your behavioural profile is used for research insight generation, not for making decisions that affect your rights, compensation, or membership status. You have the right to request human review of any processing that affects you.

7. International data transfers

Brox AI, Inc. is based in the United States. If you are located in the EEA, UK, or another jurisdiction with data transfer restrictions, your personal data will be transferred to and processed in the United States.

We protect international transfers using appropriate safeguards, principally:

Standard Contractual Clauses (SCCs) approved by the European Commission, entered into with our service providers
UK International Data Transfer Agreement (IDTA) or UK Addendum to SCCs for UK transfers
EU-US Data Privacy Framework (DPF) certification, where a service provider holds an active certification

Our sub-processors (cloud hosting, AI providers, email services) are also subject to appropriate transfer safeguards. You may request a copy of the relevant safeguards by contacting privacy@faure.ai.

8. Data retention

We retain your data only for as long as necessary to fulfil the purposes described in this policy. Our retention periods are:

Application data (if not accepted): 12 months after the application decision, then deleted
Account and contact information: Duration of your membership plus 12 months after departure
Interview recordings and transcripts: Duration of your membership plus 6 months, or until you withdraw consent or request deletion
Behavioural model (digital twin): Duration of your membership plus 6 months, or until you withdraw consent or request deletion
Anonymised, aggregated insights: Retained indefinitely, as they are no longer personal data
SAR and related financial records: 7 years after the relevant grant vests, settles, or expires, as required by tax and securities law
Communication records: 3 years

If you request deletion, we will delete your personally identifiable information within 30 days, except where retention is required by law (for example, records relating to SAR grants).

9. Data security

We implement industry-standard security measures to protect your data, including encryption in transit and at rest, access controls, and regular security reviews. Conversation data is stored securely and access is limited to authorised personnel who are all monitored and regularly screened. Application data is held in a dedicated database, separate from the systems that serve Brox's enterprise clients, and clients never receive access to systems holding your identifiable information.

10. Your rights

Rights for all members:

Regardless of where you are located, you have the right to:

Access all data we hold about you
Request correction of inaccurate data
Request deletion of your data and AI profile
Withdraw from the panel at any time
Export your conversation history and insights
Opt out of specific research topics
Withdraw consent for data processing at any time

Additional rights under GDPR (EEA and UK residents):

If you are in the EEA or UK, you also have the right to:

Data portability (Article 20): receive your data in a structured, commonly used, machine-readable format
Restriction of processing (Article 18): request that we stop processing your data while a concern is resolved
Object to processing (Article 21): object to processing based on legitimate interest, and we will stop unless we demonstrate compelling legitimate grounds
Lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk. In the EU, contact your national data protection authority

Additional rights under CCPA/CPRA (California residents):

If you are a California resident, you also have the right to:

Right to know: request the categories and specific pieces of personal information we have collected, the sources, purposes, and categories of third parties with whom we share it
Right to delete: request deletion of your personal information
Right to correct: request correction of inaccurate personal information
Right to opt out of sale or sharing: we do not sell your personal information, and we do not share it for cross-context behavioural advertising. The Faure website runs no advertising pixels and sets no marketing cookies. See Section 12
Right to limit use of sensitive personal information: request that we limit our use of sensitive personal information to what is necessary for our services
Right to non-discrimination: we will not discriminate against you for exercising your CCPA rights
Authorised agents: you may designate an authorised agent to make requests on your behalf by contacting us at privacy@faure.ai

How to exercise your rights:

Contact us at privacy@faure.ai. We will respond to verifiable requests within 30 days (GDPR) or 45 days (CCPA). We may need to verify your identity before processing your request. We do not charge a fee for reasonable requests.

We collect consent at two stages:

At application: When you submit your application, you attest that the information you provide is accurate, acknowledge our Privacy Policy and Terms of Use, consent to Brox AI, Inc. holding your data to review your application and administer your membership and to power its research products with anonymised, aggregated insights, and acknowledge that compensation is granted as SARs, not cash. Each consent is recorded with your application, together with the version of the consent wording and a server-side timestamp.

At onboarding (after acceptance): Before your first research session, we collect specific consent for recording and transcription of interviews, creation of your behavioural model (digital twin), and processing of any sensitive personal data that may arise during sessions.

Withdrawing consent: You may withdraw any consent at any time by contacting privacy@faure.ai. Withdrawal is as easy as giving consent. If you withdraw consent for core processing (interviews, digital twin creation), we will no longer be able to include you in the research programme, but this does not affect the lawfulness of processing carried out before withdrawal.

12. Do not sell or share

We do not sell your personal information. We do not sell, rent, or make available your personal information to third parties for monetary consideration.

We do not "share" your personal information as that term is defined by the CCPA/CPRA. The Faure website runs no advertising pixels, no marketing tags, and no cross-context behavioural advertising of any kind. Our only analytics tool, Plausible, sets no cookies and collects no personal data.

The anonymised, aggregated research insights we provide to enterprise clients do not constitute personal information, as they cannot reasonably identify, relate to, or be linked to any individual member. We maintain technical and organisational safeguards to prevent re-identification, and our client agreements contractually prohibit any attempt to re-identify members.

13. Notice of financial incentive (California)

Under the CCPA, we are required to provide notice of financial incentive programmes that involve the collection of personal information. Faure's member compensation programme constitutes a financial incentive.

Programme terms:

Members are granted Stock Appreciation Rights (SARs) in Brox AI, Inc. for completed sessions: a grant with an initial notional value of $500 for a completed video interview (approximately 45 minutes), and grants with an initial notional value of $5 per minute for AI voice conversations (typically 5 to 30 minutes)
Grants are made under an individual SAR agreement, which governs vesting, settlement, and all terms
SARs are not cash, shares, options, or a purchase of securities. As with any early-stage company, there is no guarantee of future value; SARs may ultimately be worth nothing

What data is collected in exchange:

Interview recordings, transcripts, and derived insights
Your perspectives on research topics
Behavioural profile data used to generate anonymised research insights

Value methodology:

We estimate the value of each member's data based on the revenue generated from aggregated research insights divided by the number of active members, and have set initial notional grant values so that the compensation offered is reasonably related to the value of the data provided.

Your rights:

Participation is entirely voluntary. You may withdraw from the programme at any time by contacting us. Withdrawal will end your panel membership and future grants, but will not result in any penalty or discrimination. SARs already granted remain governed by your individual SAR agreement.

14. Cookies and tracking

The Faure website sets no cookies. We run no advertising pixels, no marketing tags, and no cross-site tracking, which is why there is no cookie banner to click through.

What we do use:

Plausible Analytics (cookie-free). Privacy-friendly, EU-hosted traffic analytics. Plausible does not set cookies, does not collect any personal data, and does not perform cross-site or cross-device tracking. Because of this it is exempt from consent requirements under the ePrivacy Directive.
Campaign attribution (session storage). If you arrive via a link carrying a referral code or campaign parameters, we hold them in your browser's session storage so they can be attached to your application if you apply. These entries are cleared when you close your browser tab, are not shared with third parties, and are not used for tracking across sites.
Consent records. The attestation and consents you give on the application form are stored with your application, together with the consent version and server-side timestamps, so we can evidence what you agreed to and when.

When the Faure member platform opens, signing in will require strictly necessary authentication tokens stored in your browser; we will update this section at that time. If we ever introduce advertising pixels, we will add a consent banner and update this policy before any such tag loads.

15. Children's privacy

Faure is designed for experienced individuals. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected data from a minor, we will delete it promptly.

16. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last Updated" date above and notify active members by email at least 30 days before the changes take effect. Your continued use of Faure after changes are posted constitutes acceptance.

17. Contact

For privacy-related questions, requests, or complaints, please contact us at privacy@faure.ai.

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.