Privacy notice

Last updated 1 October 2026

Who is responsible

FIGURX is operated by TZA INC LTD, registered in England and Wales, company number 12055213, at 71-75 Shelton Street, London, WC2H 9JQ. For anything in this notice, contact hello@figurx.app. We are the data controller for personal data described here.

The ChatGPT tools

The FIGURX tools available through ChatGPT are stateless. When you ask an assistant to draft an invoice or a quote, the details you provide are sent to our server, the totals are calculated, and the result is returned. We do not write that request to a database and we do not keep a copy of the document.

Our hosting provider records ordinary server logs, including IP address, timestamp and request path, to keep the service running and to investigate abuse. Those logs are kept for a short period by our hosting provider and then deleted automatically. They are not used to build a profile of you.

ChatGPT itself is operated by OpenAI, not by us. What OpenAI records about your conversation is governed by their privacy policy.

FIGURX accounts

You sign in with a link sent to your email. You may also set a password if you prefer one, and some people must: a shared mailbox makes a one-time link awkward. If you set one we never see it, because it is hashed before it reaches us and nobody here can read it or tell you what it was.

Everything is stored in the United Kingdom, in a Postgres database hosted in London. Your workspace is isolated at the database level rather than only in the interface, so another account cannot read your records even if a query is written wrongly. There is no administrator account that can read across workspaces.

We keep your records for as long as your workspace exists. Delete your workspace and the records in it are deleted with it. Ask us at hello@figurx.app and we will do it for you. Some information has to outlive the account: a document you have issued is a financial record, and UK law expects those to be kept for six years.

Chat with AI

On Pro and Business you can ask questions about your own figures. The question you type goes to TypeSafe, which decides which of a fixed list of questions you asked and over what period. Your invoices, customers and figures stay here. The answer is worked out against your own records, and every number in it comes from our code rather than from a model.

We keep the questions you ask and which one we matched it to, in your workspace, where only its members can read them. We read them to count the monthly allowance on Pro and to find the questions we cannot yet answer, which is how we decide what to build next. A question we could not answer does not count against your allowance.

Working with colleagues

Several people can share one workspace. Everyone in it sees the same customers, documents and figures, and can see who else is a member. That is the point of sharing one, but it is worth being deliberate about who you invite. An owner or admin can remove someone at any time, and removing them ends their access immediately.

Apps you connect

You can connect FIGURX to ChatGPT, or to another tool that speaks the same protocol, so that it can draft and save documents for you. When you do, you are asked to approve it on a page that names the workspace it will be able to read and write.

A connected app acts as you and is limited to the workspace you approved. It cannot change your plan, your billing or your sign-in. You can see every app you have connected, and disconnect any of them, under Connections in the app. Disconnecting stops it working straight away.

The drafting and calculator tools work without an account and without a connection. If you use those, nothing you type reaches a FIGURX account, because there is no account involved.

What we ask you not to send

FIGURX records business and work information. Do not enter patient names, NHS numbers, dates of birth, diagnoses or clinical notes. The product is not designed to hold identifiable health data and must not be used as a clinical record.

Lawful basis

• Providing the drafting tools you asked for, on the basis of legitimate interests in operating the service you chose to use.
• Keeping the service secure and available, on the basis of legitimate interests in preventing abuse.
• Meeting legal obligations where one applies.

Sharing

We use hosting and infrastructure providers to run FIGURX. They process data on our instructions under contract. We do not sell personal data and we do not share it for advertising.

Your rights

Under UK GDPR you can ask for access to your personal data, correction, erasure, restriction, portability, and you can object to processing based on legitimate interests. Write to hello@figurx.app. If you are not satisfied with our response you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If this notice changes in a way that affects you, the date above will change and the change will be described here.