Privacy Policy

FutureThinkNow, Inc., doing business as Lizzy (“Lizzy,” “we,” “us,” or “our”), is committed to protecting your privacy and handling personal information responsibly. Lizzy is the operating brand of FutureThinkNow, Inc.; references to “FutureThinkNow” or “FTN” in prior materials, contracts, or communications refer to the same legal entity.

This Privacy Policy describes how we collect, use, disclose, and safeguard personal information when you visit www.golizzy.com (and our legacy domain www.futurethinknow.com), use our platform and delivery channels (including the Lizzy Dashboard, Decision Briefs, the Lizzy MCP Server, and Lizzy Color), book a working session with us, or otherwise interact with us (collectively, the “Services”).

1. Scope of This Policy

This Privacy Policy applies to:

• Visitors to our website
• Users of the Lizzy Dashboard, the Lizzy MCP Server, and Lizzy Color
• Prospective customers who book a working session or receive a Decision Brief or other evaluation materials
• Enterprise customers and their representatives
• Individuals who interact with our AI features, assistants, or demonstration tools
• Business contacts, including prospective business contacts we identify through lead-generation research
• Job applicants

Controller and Processor Roles

Lizzy may act as:

• Data Controller with respect to personal information collected directly through our website, marketing activities, prospecting, recruiting, and self-service offerings.
• Data Processor with respect to Customer Data processed on behalf of enterprise customers under separate contractual agreements.

This Privacy Policy does not apply to data processed on behalf of enterprise customers (“Customer Data”). Processing of Customer Data is governed by separate agreements between Lizzy and the applicable customer, including Data Processing Addenda where applicable.

Who We Are and How to Reach Us

The controller responsible for the personal information described in this Privacy Policy is FutureThinkNow, Inc., a Delaware corporation doing business as Lizzy, 162 Helens Ln, Mill Valley, CA 94941, USA. You can contact us about privacy matters at [email protected].

2. Personal Information We Collect

The categories of personal information we collect depend on how you interact with us and applicable legal requirements. We collect:

• Information you provide directly
• Information collected automatically
• Information from third parties

We do not intentionally collect sensitive personal information except where voluntarily provided (for example, in job applications).

A. Personal Information You Provide to Us

Account Information

When you create or manage an account, we may collect:

• Name
• Email address
• Phone number
• Company name
• Job title
• Business address
• Login credentials and authentication data (such as passkey and multi-factor authentication registrations)
• Billing contact information
• Professional information you provide

Information You Submit to Us

If you book a working session, request a demo, contact us, join a waitlist, subscribe to communications, or request support, we may collect:

• Identifiers (name, email, phone)
• Business contact information
• Inquiry details
• Scheduling details and information you provide to prepare for a working session, such as the business decision, product, or category you want to discuss
• Any additional information you choose to provide

We may use your contact information to send service-related or marketing communications in accordance with applicable law. You may opt out of marketing communications at any time by using the unsubscribe link or contacting us.

Business information you share to prepare a working session or Decision Brief (for example, palettes, launch dates, or sales results) is treated as confidential. We use it only to prepare your session and materials. We do not add it to Lizzy's general datasets or use it to inform forecasts provided to anyone else.

Surveys and Feedback

We may collect personal information when you participate in:

• Surveys
• Beta testing
• Feedback sessions
• Research initiatives

AI Features, MCP Server, and Demonstration Interactions

If you use Lizzy AI features (including AI image generation), the Lizzy MCP Server, demonstration environments, or assistants, we may collect:

• Identifiers (if provided)
• Prompts or queries submitted, including queries received through the Lizzy MCP Server from AI tools you connect
• Images you upload or generate, and the instructions used to create or edit them
• Interaction metadata

These interactions may be logged for system improvement, safety, and performance monitoring.

AI image generation. When you use AI image generation or editing, your prompts and any images you provide are sent to the third-party AI model provider that performs the generation (see Section 6). We do not use your prompts, images, or other customer data to train Lizzy's models. The model providers process these inputs under their commercial API terms.

Lizzy MCP Server. When you connect the Lizzy MCP Server to a third-party AI tool (such as Claude or ChatGPT), we receive and log the requests that tool sends to Lizzy. The Lizzy data returned to that tool, and anything you enter into it, is processed by that tool's provider under your agreement with that provider, not under this Privacy Policy.

Our AI systems provide predictive insights at a market or audience level. They do not make automated decisions about identifiable individuals that produce legal or similarly significant effects.

Lizzy Color

Lizzy Color uses your device camera, with your permission, to identify real-world colors. The live camera view is processed to identify colors and is not stored. When you take a photo, the photo is uploaded to our servers, processed to extract color values, and saved to your Lizzy Wall. A color is saved only when you add it to a palette. Lizzy Color does not perform facial recognition or identify people who appear in photos.

The Lizzy Wall is available only to Lizzy customers. Each Wall is accessible only to the user who created it and to authorized Lizzy personnel who need access to operate, support, and secure the Services. Wall photos are stored separately from Lizzy's data used for analysis and are not used to train our models or to build our trend datasets.

When you delete a photo from your Lizzy Wall or a color from a palette, it is removed from view but kept in a recoverable state so you can restore it later. To permanently delete an item so that it cannot be recovered, or to request permanent deletion of your account data, contact [email protected]. Please avoid photographing people who have not agreed to be photographed.

Business Development Information

We may collect professional contact information through:

• Conferences
• Trade shows
• Industry events
• Website forms
• Referrals
• Lead-generation and CRM providers that research and identify prospective business customers using publicly available professional information

Job Applicant Information

If you apply for employment, we may collect:

• Identifiers
• Professional and employment-related information
• Application materials (CV, resume, cover letter)
• Interview notes
• References

Application materials may reveal sensitive information. We process such information in accordance with applicable employment laws.

Purchases and Commercial Information

If you subscribe to paid services, we may collect:

• Business contact information
• Subscription details
• Billing information

Payments are processed by third-party payment providers. We do not store full payment card numbers.

B. Information Collected Automatically

When you use our Services, we may automatically collect:

• IP address
• Device information
• Browser type
• Operating system
• Usage data
• Log data
• Cookie identifiers
• Approximate geolocation data

We do not currently respond to “Do Not Track” browser signals.

C. Information from Third Parties

We may collect information from:

• Public business directories
• Marketing partners
• Data enrichment providers
• Lead-generation and prospect research providers
• Event organizers
• Scheduling providers, when you book a session with us

D. Platform-Derived and Image-Based Signals

Lizzy processes large volumes of publicly available and licensed image data to extract aggregated visual signals related to color, print and pattern, and silhouette.

We do not:

• Identify individuals in images
• Perform facial recognition
• Extract personal identity information
• Build individual consumer profiles

All extracted signals are aggregated and anonymized before being used in predictive modeling.

3. How We Use Personal Information

We collect and process personal information only for specified, explicit, and legitimate purposes.

We use personal information to:

• Provide and operate the Services
• Manage accounts
• Respond to inquiries
• Deliver working sessions, demos, Decision Briefs, and onboarding
• Process payments
• Provide customer support
• Improve platform performance
• Conduct analytics
• Identify and contact prospective business customers
• Maintain security
• Prevent fraud or misuse
• Comply with legal obligations

Client content. Palettes, Lizzy Wall photos, and other content that customers create in the platform, and confidential business information that prospects share with us, are not incorporated into Lizzy's general trend datasets and are not used to inform forecasts presented to other customers.

For individuals in the EEA, UK, or similar jurisdictions, lawful bases may include:

• Contractual necessity
• Legitimate interests (for example, business-to-business marketing and prospecting, security, and improving the Services)
• Consent (where required)
• Legal obligations

4. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Enable essential website functionality
• Provide analytics
• Improve performance
• Measure marketing effectiveness

You may control cookies through your browser settings.

5. How We Share Information

We may share personal information with:

• Service Providers — Cloud hosting, analytics, CRM, lead generation, scheduling, email delivery, payment processors, and other vendors.
• AI Model Providers — Providers that perform AI image generation and other AI features, as described in Section 2 and listed in Section 6.
• AI Tools You Connect — When you connect the Lizzy MCP Server to a third-party AI tool, the Lizzy data you request is delivered to that tool at your direction.
• Professional Advisors — Legal, accounting, and compliance advisors.
• Legal Authorities — When required by law or to protect rights and safety.
• Business Transfers — In connection with mergers, acquisitions, or asset sales.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

6. Subprocessors

We may engage third-party service providers (“Subprocessors”) to assist in delivering the Services. We maintain contractual protections requiring appropriate security and data protection measures. Our Subprocessors, by category, are listed below. A complete list of named providers is available to customers on request at [email protected]. We will notify enterprise customers of new Subprocessors as their agreements require.

• Cloud hosting: Amazon Web Services (AWS), United States.
• AI image generation and editing: Google, OpenAI, Microsoft, xAI, Alibaba, and ByteDance, accessed directly or through third-party inference platforms.
• AI language features: third-party AI model providers that support natural-language analysis and the Lizzy MCP Server.
• CRM and lead generation: Monaco.
• Scheduling: Calendly.
• Email, analytics, and payments: third-party providers that deliver email, measure website use, and process payments.

7. Data Security

We implement administrative, technical, and physical safeguards including:

• Role-based access controls and least-privilege access to production systems
• Encryption in transit (TLS)
• Encryption at rest for databases, file storage, and backups
• Multi-factor authentication (authenticator apps and passkeys) and enterprise single sign-on (SAML 2.0 and OpenID Connect)
• Secure cloud infrastructure hosted on Amazon Web Services
• Monitoring and logging
• Restricted employee access

In the event of a data breach involving personal information, we will notify affected individuals and relevant authorities as required by applicable law.

8. Data Retention

We determine retention periods based on:

• The nature of the data
• The purpose for collection
• Legal and regulatory requirements
• Contractual obligations
• Legitimate business needs

Aggregated image-derived signals are retained in anonymized form. Photos taken with Lizzy Color and colors saved to palettes are retained while your account is active. Items you delete remain recoverable until you request permanent deletion or your account is closed. The live camera view is not stored. Database backups are retained for 30 days and then deleted.

9. International Data Transfers

Lizzy is based in the United States, and our production systems are hosted on Amazon Web Services in the United States. Our team members work from several countries, including the United States, Germany, France, Argentina, and India, and some of them access personal information from those countries to provide the Services.

Personal information may be transferred to, stored, and processed in countries outside the country where it was originally collected.

Where personal information is transferred outside of the European Economic Area (EEA), the United Kingdom, or similar jurisdictions, we implement appropriate safeguards, including:

• Standard Contractual Clauses (SCCs)
• Contractual protections with team members, contractors, and service providers
• Technical and organizational safeguards

You may lodge a complaint with your local data protection authority if you believe your rights have been violated.

10. Your Privacy Rights

Depending on your jurisdiction, you may have rights to:

• Access your personal information
• Correct inaccurate information
• Request deletion
• Restrict processing
• Object to processing
• Request data portability
• Withdraw consent

We will respond to verified requests within the timeframes required by applicable law. We may require identity verification before fulfilling requests.

To exercise your rights, contact: [email protected].

11. California Privacy Notice (CPRA)

To the extent the California Consumer Privacy Act applies to Lizzy, California residents may have additional rights under the California Consumer Privacy Act (as amended by the CPRA), including:

• Right to know categories of personal information collected
• Right to access specific pieces of information
• Right to delete
• Right to correct
• Right to opt out of sale or sharing

In the preceding 12 months, we have collected the categories described in Section 2.

We have not sold or shared personal information in the preceding 12 months.

12. Children’s Privacy

Our Services are not directed to individuals under 18. We do not knowingly collect personal information from anyone under 18.

13. Third-Party Links

Our Services may link to third-party websites. We are not responsible for their privacy practices.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Services or by other appropriate means prior to the changes becoming effective.

15. Contact Us

If you have any questions about our privacy practices or this Privacy Policy, or to exercise your rights as detailed in this Privacy Policy, please contact us at [email protected] or by mail at FutureThinkNow, Inc., Attn: Privacy, 162 Helens Ln, Mill Valley, CA 94941, USA.

Lizzy is a brand of FutureThinkNow, Inc., a Delaware corporation.