Your access token expires after 15 minutes and silently refreshes in the background while you're active. The underlying session (tracked in Active Sessions) lasts up to 14 days, or until you sign out or revoke it manually.
Yes. Every connection is served over HTTPS, and we send a Strict-Transport-Security header (HSTS) so browsers refuse to fall back to an unencrypted connection, even by mistake.
Use our Request Your Data form to access, download, correct, or delete your personal data. Requests are handled under GDPR, CCPA, LGPD, and PIPEDA — see our Compliance page for details.
Use our contact form and describe the issue with steps to reproduce. We investigate all reports promptly and treat security disclosures with priority.
We use TOTP-based 2FA — one-time codes from any authenticator app (Google Authenticator, Authy, etc.), plus single-use backup codes generated at setup in case you lose access to your device.
Failed logins add a progressive delay — 2s after the 6th attempt, 4s after the 7th, 8s after the 8th and beyond — on top of a hard account lock after 10 failed attempts, lasting 15 minutes.
Yes. At signup and on every password change, we check the Have I Been Pwned database to reject credentials already exposed in a known breach — passwords themselves are always hashed with bcrypt, never stored in plain text.
Before every login or signup, your browser solves a small Proof of Work computational puzzle — a few milliseconds for a real user, expensive at bot scale — which filters automated attacks without ever showing you a CAPTCHA.
Yes. The Active Sessions page lists every device and location currently logged into your account. You can revoke any single session instantly, remotely, without needing to change your password.
Yes, we are a global company with remote-first operations, allowing our team to work from anywhere in the world.
Our process typically includes an initial screening, a technical assessment related to your role, and a cultural fit interview with the leadership team.
Fill out our Careers form with your name, email, the position you're applying for, a short cover letter, and your resume as a PDF (up to 5MB). Send resume or Apply Now on this page takes you straight there.
No. We're remote-first and hire globally — there's no relocation requirement and no headquarters-first culture dictating where you need to be.
Complaints are for formal issues with our service or performance, Help Desk is for technical or account problems, and General Inquiry covers everything else — all three route to a real person through the app's Messages page.
No. All support runs through the app's Messages page and our dedicated forms, so every request stays logged and traceable, not lost in a phone queue.
All campaign metrics use clear attribution models with transparent, unmanipulated reporting — no inflated ROI numbers, ever.
We use inclusive creative strategies and responsible audience segmentation that avoid discriminatory targeting practices.
No — we've found the opposite. Ethical practices and transparent metrics build the kind of trust that drives stronger, high-value engagement.
Yes — every report uses transparent attribution models you can review and question at any time.
Yes. We publish honest performance numbers even when they aren't flattering — reporting isn't adjusted to look better than the real result.
Audience segmentation is reviewed against platform policy and audited to stay free of discriminatory bias, across every campaign we run.
Yes. Our whistleblower channel allows confidential and secure reporting at any time, reviewed directly by our compliance team.
We operate fully remote and cloud-based, with no manufacturing or physical footprint — our environmental impact comes from infrastructure efficiency, not offices or hardware.
Through WCAG 2.1 AA accessibility across all app pages, GDPR/CCPA/LGPD/PIPEDA-compliant data handling, and inclusive audience targeting free of discriminatory bias.
23+ documented policies, full audit logs, and transparent performance metrics — we never inflate ROI reporting to clients.
Yes. We maintain a whistleblower channel for confidential reporting, reviewed promptly by our compliance team.
23 or more, covering everything from data privacy to security — see our Legal & Policies page for the complete list.
It's a Progressive Web App (PWA), installable from any modern mobile browser on iOS and Android — no app store or separate download required.
Yes. It's the same account and the same data, kept in sync in real time — the mobile app isn't a separate, limited experience.
Yes — passkey (WebAuthn) login and 2FA already work in any mobile browser today, on the same web dashboard. The installable app will carry over that exact login, nothing new to set up.
It's a Progressive Web App (PWA) — installed straight from your phone's browser, with no App Store or Google Play listing and no separate download.
GDPR, CCPA, LGPD, and PIPEDA — access, correction, deletion, and portability rights are honored the same way in every region we serve, not just where required by law.
GDPR Articles 15-20 cover access, rectification, erasure, restriction, portability, and objection. CCPA covers the right to know and delete. LGPD Article 18 and PIPEDA Principle 9 grant equivalent access rights — all honored through the same process.
Use our Request Your Data form — one dedicated form covers access, correction, deletion, and portability, routed directly to our compliance team, not a general inbox.
Once a deletion request is confirmed and processed, your data is permanently removed from active systems — we don't retain a hidden copy for later recovery.
Yes. Submit it through our Complaints form — every complaint is logged, tracked, and reviewed by a real person on our team, never auto-closed.
Yes. Our whistleblower channel allows confidential, secure reporting at any time, reviewed directly by our compliance team.
No. Every user gets the same data-rights standard regardless of location — we don't apply a lower bar just because local law would allow it.
We have substantially addressed the WCAG 2.1 Level AA success criteria across all pages. We do not claim independently audited conformance — that requires a certified third-party audit.
Yes. The sidebar, header, modals, dropdowns, and all forms work via Tab, Enter, Space, and Escape. Modals implement a focus trap and return focus to the trigger on close.
Use our contact form at fdmarketing.io/app/form/contact-us. Include the page URL, a description of the issue, and the assistive technology and browser you were using.
Yes. All pages carry a distinct, descriptive browser title, so screen reader users and anyone using browser tabs always know exactly where they are.
No. The 7-day Free Trial gives you full access with no credit card required — you only enter payment details if you choose to continue on a paid plan.
Your trial simply ends — since no card was required, nothing is charged automatically. Choose Starter or Pro whenever you're ready to continue.
Pro includes everything in Starter plus higher generation limits, multiple brand profiles, priority processing, advanced content history, and priority support.
No. Starter and Pro are both month-to-month with auto-renewal billing — cancel anytime, no long-term commitment required.
Yes. You can switch between Starter and Pro at any time from your account — changes apply to your next billing cycle.
No. Starter and Pro prices are shown before tax — applicable taxes are calculated and added at checkout based on your location.
23 or more, covering privacy, data, security, and accessibility — every one dated and versioned, not buried in a single generic terms page.
Yes. Every policy is downloadable directly, so you always have a dated copy on hand.
Each policy is versioned and dated. When we update one, the version number and date change so you can always tell what's current.
The core terms are consistent everywhere, with regional data-rights sections addressing GDPR, CCPA, LGPD, and PIPEDA where applicable.
Use our Contact Us form and select the relevant topic — legal and policy questions are routed directly to the right team.
Yes. Every testimonial is from a named, real client — with video for three of them, and no actors, scripts, or paid endorsements for any.
We feature clients who've seen measurable, real results working with us and were willing to share their experience publicly.
Yes. Submit your story through our Share Your Testimonial form — we'll reach out about featuring it here.
We only trim for length. The client's own words and rating are preserved as given, with no rewriting of their message.
No. No client is paid or compensated for sharing their experience — every review here is voluntary.
Your AI agent generates content tailored to your business and goals directly on Ferrer — no account managers, no meetings, no calls required.
You share it natively, straight from your phone, to whichever platform you choose — no ad APIs, no middleman.
No. Content is shared straight from your phone through native sharing, not through advertising APIs or third-party ad accounts.