Fireworks AI Privacy Policy

This Privacy Notice governs how Fireworks AI, Inc. collects, uses, discloses, and processes personal data in connection with its website, API, and related AI inference services, asserting a contractual and legitimate interest legal basis for most processing activities. The policy states that Fireworks does not use prompts, training data, or API inputs to train or improve AI models without explicit opt-in, claims zero data retention for open model prompt and generation data absent user opt-in, and asserts user rights to access, download, or delete data at any time through the Services. Notably, the policy discloses that personal data may be purchased from third-party data providers for direct mail marketing and combined with internally collected data, and that Fireworks shares data with affiliated entities, employers or companies of enterprise users, business partners, and service providers, with relatively open-ended language regarding cross-entity sharing that may warrant scrutiny under data minimization principles. The policy references GDPR-style rights, CCPA/CPRA obligations for California residents, and state-level privacy law acknowledgment, while the Do Not Track non-response disclosure and broad third-party data provider acquisition practice may require evaluation under applicable state privacy statutes and FTC Act Section 5 standards. Compliance teams should note that the notice functions as a consumer-facing document only and explicitly states it does not govern Fireworks acting as a service provider to business customers, which creates a separate processing regime requiring review of applicable data processing agreements.