Privacy Policy

1. Introduction

FoliFlow is operated by AR Web & Development LLC ("FoliFlow," "we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly to us, including:

• Account Information: Name, email address, password, business name, and profile information
• Payment Information: Payment details for a FoliFlow subscription are entered with and processed by our payment processor. We do not receive or store full card numbers.
• Content: Photos, galleries, client information, and other content you upload
• Communications: Messages you send to us, support requests, and feedback
• Client Data: Information about your clients that you enter into the Service

2.2 Information Collected Automatically

When you use our Service, we automatically collect certain information:

• Device Information: Browser type, operating system, device identifiers
• Usage Data: Actions taken in the Service, such as sign-ins, and visits, downloads and favorites in a gallery
• Log Data: IP address, access times, referring URLs, and error logs
• Cookies and Similar Technologies: See our Cookie Policy for details

2.3 Information from Third Parties

Our payment processor tells us the status of a subscription payment (for example, that it succeeded or failed), not full payment details. We do not receive information about you from advertising or analytics providers.

3. How We Use Your Information

We use the information we collect to:

4. Data Sharing and Disclosure

We may share your information in the following circumstances:

4.1 Service Providers

We use the following service providers, who process information on our behalf or receive it as described:

• Cloudflare — network delivery and protection
• Stripe — payment processing for FoliFlow subscriptions
• Zoho ZeptoMail — delivery of the emails the Service sends
• Google Fonts — typefaces. Your browser requests font files from Google, which receives your IP address when it does

4.2 Your Clients

When you share galleries with clients, they can view the content you've designated for sharing. Your business name and branding are visible to your clients as part of the gallery experience.

4.3 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of FoliFlow, our users, or others.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change and the choices you may have.

4.5 With Your Consent

We may share your information with third parties when you give us explicit consent to do so.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide you with the Service. We will also retain and use your information as necessary to:

• Comply with legal obligations
• Resolve disputes
• Enforce our agreements
• Maintain business records

When you delete your account or workspace, we will delete or anonymize your personal data within 30 days, except for data we are required to retain for legal or legitimate business purposes. Ending a paid subscription does not delete anything: the workspace moves to the Free plan and its content is kept.

To prevent repeated free trials, we retain a protected, non-readable fingerprint derived from an email address for a limited time. This record is not linked to an account and is automatically removed when its retention period ends.

6. Data Security

All traffic to the Service uses HTTPS. Your account password is hashed and never stored in a form anyone can read, including us. (A password or PIN that a photographer sets on a gallery is different: it is an access code the photographer chooses, can see, and shares with clients.) Each account's and workspace's data is kept separate from every other. We apply industry-standard protections against unauthorized access and review them as the product changes.

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

7.1 Access and Portability

You can see and change much of your personal data in your settings. To request a copy of your data, contact us at [email protected].

7.2 Correction

You can update your account information directly in your settings, or contact us to correct inaccurate data.

7.3 Deletion

You can delete your account at any time. This will trigger deletion of your personal data subject to our retention policies.

7.4 Objection and Restriction

You can object to or request restriction of certain data processing activities.

7.5 Email

The Service sends email that is part of using it, such as confirmations, invitations and notifications. You can choose which notifications you receive in your settings. We do not send marketing email.

7.6 Cookies

You can control cookies through your browser settings. Our Cookie Policy describes the cookies the Service uses.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including wherever we and the service providers listed in section 4.1 operate. Those countries may have data protection laws that differ from the laws of your country.

9. Children's Privacy

You must be at least 18 years old to hold a FoliFlow account. The Service is not directed to children, and we do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us so we can take steps to delete it.

10. Users in the European Economic Area and the United Kingdom

If the General Data Protection Regulation (GDPR) or the UK GDPR applies to you, you may have additional rights under that law, including:

• The right to lodge a complaint with your local supervisory authority
• The right to withdraw consent at any time, where processing is based on consent

To exercise any of these rights, please contact us using the information provided below.

11. California Privacy Rights (CCPA)

If the California Consumer Privacy Act (CCPA) applies to you, you may have rights under it, including:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising CCPA rights

To make a request, contact us at [email protected].

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact AR Web & Development LLC:

Email: [email protected]
Website: https://foliflow.app