Legal
Privacy notice
Effective October 3, 2026
Who we are
FedXchange is a free service run by Varry LLC (“we”). This notice covers this website, fedxchange.com, and the FedXchange app and its services at app.fedxchange.com, api.fedxchange.com, and mcp.fedx.io.
This website
This site sets no cookies of its own and runs no analytics or advertising trackers. Our hosting provider, Cloudflare, handles each request, including your network (IP) address, to deliver pages and protect the site from attacks.
The early access and contact forms
When you send a form, we collect:
- your name, work email, agency or company, and role, if you give one;
- your message, if you write one;
- a scrambled, one-way code made from your network address, used only to limit repeated sends. We don't store the address itself.
We use these details only to reply to you and to decide on early access. Your message is emailed to us, and our replies come from a person at Varry LLC. We delete form messages automatically 12 months after they arrive.
The FedXchange app
If you become a member of an agency in FedXchange, we hold:
- your name and work email, and the sign-in methods you set up, such as passkeys and an authenticator app;
- your role in each agency you belong to;
- your agency's setup: the services it chose, its titles for offices and roles, its decisions on governance changes, and an audit log of who changed what and when;
- the access tokens you create, stored only as hashes, and the AI assistants you connect.
The app uses a cookie to keep you signed in. We send sign-in links, invitations, and change notices by email.
AI assistants
FedXchange runs no AI model of its own. If you connect an AI assistant, what it reads from FedXchange, and what you type to it, goes to that assistant's provider under your agency's terms with them. We keep a record of each connection: the assistant's name, the agency, and the date.
Who else handles your information
We don't sell personal information or use it for advertising. These service providers handle it for us:
| Provider | What it does for us |
|---|---|
| Cloudflare | Hosts the site and the app, and stores the app's data, encrypted at rest |
| Emailit | Delivers sign-in links, invitations, notices, and form messages |
We may also disclose information when the law requires it.
Links to RMF Coach
Links from this site to RMF Coach, another Varry LLC service, carry a tag that tells RMF Coach the visit came from FedXchange. FedXchange and RMF Coach have separate accounts and don't share them.
Your choices
You can ask to see, correct, or delete the personal information we hold about you, or to have your agency's data deleted. Use the contact form. We'll reply by email.
Security
See Security for how FedXchange protects what it holds, and what not to put in it.
Children
FedXchange is a work tool for adults and isn't directed to children.
Changes to this notice
When we change this notice, we update the effective date above. If a change matters to how we use members' information, we'll email members before it takes effect.