FolixFolix
← Back to homepage

Privacy Policy — DRAFT, requires legal review before publishing

⚠️ This is a starting template, not vetted legal advice. The data-collection description below is grounded in what Folix's actual code does today (Google Analytics 4, the real signup/payment flow, the real content types the product stores) — not guessed or copied from a generic template. Before publishing, have this reviewed by a lawyer, in particular for: GDPR compliance if you have any EU/UK visitors or customers (this draft assumes GDPR-style rights apply, which is the safer default, but confirm the specific legal basis and any required Data Processing Agreements with Google/Stripe/PayPal), Saudi Arabia's Personal Data Protection Law (PDPL) if you're incorporated or operating there, and any other jurisdiction where you have a meaningful number of users. Every `[bracketed]` placeholder needs a real value.

Effective date: [DATE] Last updated: [DATE]

1. Who we are

This policy explains how [LEGAL ENTITY NAME] ("Folix," "we," "us") collects and uses personal data when you use folix.pro, create a Folix site, or visit a site built on Folix. Contact for privacy matters: [PRIVACY EMAIL — a real monitored mailbox, not a personal address].

2. What we collect

If you sign up for a Folix site:

  • Your name and email address, provided at signup.
  • Payment information — handled entirely by our payment processors (Stripe and/or PayPal). We do not receive or store your full card number; we receive confirmation of payment and a transaction reference.
  • The content you add to your site (profile info, project descriptions, skills, experience, images, testimonials you publish, contact-form messages your site's visitors send you).

If you visit any Folix site (ours or a customer's):

  • Standard analytics data via Google Analytics 4 — pages viewed, general location (country/city level, not precise), device/browser type, and how you arrived at the site. We use this to understand traffic and improve the product; individual analytics events are not tied to your name or account unless you're also a logged-in customer taking an action we specifically track (e.g., completing a purchase, which we attribute back to the browser session that made it, for measuring what's working — see "Analytics and advertising" below).
  • A small number of browser-storage values for basic functionality: your language preference and light/dark mode choice (stored locally in your browser, not sent to us), and a one-time flag so a loading animation doesn't repeat on every page you visit in one session.

If someone submits your contact form or a testimonial on a Folix site:

  • We store the name/email/message they provide so the site owner can see it, and notify the site owner by email that a submission arrived. We use automated spam-detection (a honeypot technique) to filter obvious spam before it's stored or delivers a notification.

3. How we use it

  • To provide the Service — create and run your site, process your payment, deliver the emails you'd expect (a purchase receipt, a "your site is ready" notice, password-reset emails).
  • To understand product usage and improve Folix, via aggregate analytics.
  • To respond to support requests.
  • To meet legal obligations (e.g., payment/tax recordkeeping).

We do not sell your personal data.

4. Who we share it with

  • Payment processors (Stripe, PayPal) — to process your payment. They have their own privacy policies governing the payment data they handle directly.
  • Google (Google Analytics 4) — for the analytics described above. Google may process this data outside your country; see Google's own privacy policy for how they handle it.
  • Email delivery provider [NAME YOUR SMTP/EMAIL PROVIDER ONCE CHOSEN] — to send transactional emails (receipts, notifications, password resets).
  • We do not share your data with anyone else except where required by law.

5. Cookies and similar technology

Folix uses Google Analytics 4, which sets cookies/uses similar identifiers to measure site usage. We use browser `localStorage`/`sessionStorage` (not cookies) for language preference, light/dark mode, and a one-time loading-animation flag — these are functional, not tracking, and stay on your device. [If/when you add a cookie-consent banner for GA4, describe the consent mechanism here and update this section to match what it actually does.]

6. Your rights

Depending on where you are, you may have the right to: access the personal data we hold about you; correct it; request deletion; export it (data portability); object to or restrict certain processing; and withdraw consent where processing is based on consent. To exercise any of these, contact [PRIVACY EMAIL]. We'll respond within the timeframe required by applicable law.

7. Data retention

We keep account and site data for as long as your account is active, plus a reasonable period after closure for legal/accounting purposes (e.g., payment records). Contact-form/testimonial submissions are retained as part of the site owner's content until they delete them. [Confirm specific retention periods with your lawyer, especially for payment records under tax law.]

8. Children's privacy

Folix is not directed at children under [13/16, depending on jurisdiction] and we don't knowingly collect data from them. If you believe a child has provided us data, contact [PRIVACY EMAIL] and we'll remove it.

9. International data transfers

Because we use providers like Google, Stripe, and PayPal, your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards (e.g., Standard Contractual Clauses) for these transfers. [Confirm the specific mechanism with your lawyer based on where your users actually are.]

10. Changes to this policy

We'll post updates here with a new "Last updated" date. Material changes affecting how we use your data will be communicated more prominently (e.g., by email) where required by law.

11. Contact

Questions or requests about this policy: [PRIVACY EMAIL].