Privacy Policy

1. Introduction

FoliFlow ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly to us, including:

• Account Information: Name, email address, password, business name, and profile information
• Payment Information: Credit card details, billing address (processed securely by our payment provider)
• Content: Photos, galleries, client information, and other content you upload
• Communications: Messages you send to us, support requests, and feedback
• Client Data: Information about your clients that you enter into the Service

2.2 Information Collected Automatically

When you use our Service, we automatically collect certain information:

• Device Information: Browser type, operating system, device identifiers
• Usage Data: Pages viewed, features used, time spent on pages, clicks, and navigation paths
• Log Data: IP address, access times, referring URLs, and error logs
• Cookies and Similar Technologies: See our Cookie Policy for details

2.3 Information from Third Parties

We may receive information about you from third parties, including:

• Authentication providers (e.g., Google, when you sign in with Google)
• Payment processors (transaction status, not full payment details)
• Analytics providers

3. How We Use Your Information

We use the information we collect to:

4. Data Sharing and Disclosure

We may share your information in the following circumstances:

4.1 Service Providers

We share data with third-party vendors who perform services on our behalf, including:

• Cloud hosting and storage (e.g., AWS, Supabase)
• Payment processing (e.g., Stripe)
• Email delivery (e.g., Resend)
• Analytics services
• Customer support tools

4.2 Your Clients

When you share galleries with clients, they can view the content you've designated for sharing. Your business name and branding are visible to your clients as part of the gallery experience.

4.3 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of FoliFlow, our users, or others.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change and the choices you may have.

4.5 With Your Consent

We may share your information with third parties when you give us explicit consent to do so.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide you with the Service. We will also retain and use your information as necessary to:

• Comply with legal obligations
• Resolve disputes
• Enforce our agreements
• Maintain business records

When you delete your account, we will delete or anonymize your personal data within 30 days, except for data we are required to retain for legal or legitimate business purposes.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication mechanisms
• Regular security assessments
• Access controls and audit logging
• Secure data centers with physical security measures

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

7.1 Access and Portability

You can access your personal data through your account settings. You may request a copy of your data in a portable format.

7.2 Correction

You can update your account information directly in your settings, or contact us to correct inaccurate data.

7.3 Deletion

You can delete your account at any time. This will trigger deletion of your personal data subject to our retention policies.

7.4 Objection and Restriction

You can object to or request restriction of certain data processing activities.

7.5 Marketing Communications

You can opt out of marketing emails by clicking the "unsubscribe" link in any marketing email or updating your email preferences in account settings.

7.6 Cookie Preferences

You can manage your cookie preferences through our cookie consent banner or your browser settings.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer data internationally, we implement appropriate safeguards such as:

• Standard Contractual Clauses approved by the European Commission
• Data processing agreements with our service providers
• Compliance with applicable data protection frameworks

9. Children's Privacy

The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us so we can take steps to delete such information.

10. GDPR Compliance (EEA Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to lodge a complaint with your local supervisory authority
• Right to withdraw consent at any time (where processing is based on consent)
• Right to automated decision-making information

To exercise any of these rights, please contact us using the information provided below.

11. California Privacy Rights (CCPA)

California residents have specific rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising CCPA rights

To make a request, contact us at [email protected].

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: [email protected]
Data Protection Officer: [email protected]
Website: https://folioflow.com