Controller
The data controller for this website and the fAIrewall product is Romagnoli Digital, operated by Ivan Romagnoli. For privacy inquiries: privacy@fairewall.ai
What this policy covers
This policy explains how we handle personal data collected through this website, direct email contact, Early Access requests, and use of the fAIrewall product. It does not override the local-first design goals of the product itself.
Data we collect
Website visitors: This site does not set any non-essential cookies, does not use analytics, advertising trackers, or behavioral profiling. No cookie consent banner is required because no optional cookies or tracking technologies are used. Your hosting provider (Cloudflare) may process limited technical data (IP address, request metadata) as part of content delivery.
Email contact: If you contact us, request Early Access, or email support, we receive the information you choose to provide — typically your name, email address, company name, role, and message content.
Product data: fAIrewall is designed around local processing. All PII detection, sanitization, and audit logging happen on your device. fAIrewall does not send prompts, sanitized text, or audit data to fAIrewall servers. When you use a supported AI provider, only the minimized version of your prompt is sent directly to that provider. If you voluntarily send support materials (logs, screenshots), we use them only for support, troubleshooting, or security review.
Legal bases for processing
Under GDPR, we rely on the following legal bases:
Consent: When you voluntarily contact us or request Early Access.
Legitimate interests: To respond to inquiries, maintain security, improve our communications, and protect against misuse.
Contractual necessity: To provide the product and related support when you use fAIrewall.
Legal obligations: To comply with applicable laws and regulations where required.
Data retention
Email correspondence: Retained for up to 24 months after last contact, or longer if required for ongoing support or legal obligations.
Early Access requests: Retained until the request is fulfilled or withdrawn.
Technical logs (hosting): Controlled by Cloudflare per their retention policy, typically up to 30 days.
Product data: Stored locally on your device. We do not have access to it unless you share it with us voluntarily.
Recipients and third parties
Cloudflare, Inc. — Website hosting and DNS (US-based, EU Standard Contractual Clauses apply).
Yahoo (email forwarding) — Incoming emails to @fairewall.ai addresses are forwarded via Cloudflare Email Routing to a Yahoo mailbox for processing.
We do not sell, share, or transfer personal data to advertisers, data brokers, or any other third parties for marketing purposes.
International transfers
Some of our service providers (Cloudflare, Yahoo) are based in the United States. Where personal data is transferred outside the EEA, we rely on EU Standard Contractual Clauses (SCCs) or other appropriate safeguards as required by GDPR.
Your rights
Under GDPR and applicable data protection laws, you have the right to:
Access — Request a copy of your personal data.
Rectification — Request correction of inaccurate data.
Erasure — Request deletion of your data ("right to be forgotten").
Restriction — Request that we limit processing of your data.
Objection — Object to processing based on legitimate interests.
Data portability — Request your data in a structured, machine-readable format.
Withdraw consent — Where processing is based on consent, you may withdraw it at any time by emailing privacy@fairewall.ai. Withdrawal does not affect the lawfulness of prior processing.
Complaint — You have the right to lodge a complaint with a supervisory authority. If you are in the EU, you may contact your local Data Protection Authority. A list is available at edpb.europa.eu.
Contact
For privacy-related questions, data access requests, or to exercise any of your rights, contact: privacy@fairewall.ai
This policy may be updated from time to time. The latest version will always be published on this page. Last updated: April 2026.