Privacy Notice

1. Controller

FoldBack is the controller of the personal data of FoldBack accounts. For any privacy matter, write to hola@foldback.io.

The data each studio records about its own clients, staff and suppliers is that studio's responsibility; FoldBack processes it as a processor, only to provide the service.

2. Data we handle

From the studio account: studio name, contact email and phone, sign-in email, logo, any tax details you choose to add, language, time zone and preferences.

What the studio records in FoldBack: contact details of its clients and staff, sessions, projects, payments and expenses, proposals, notes and the files it uploads (audio, photos, receipts).

From people who receive a delivery or proposal link: the name they type when commenting, approving or responding, and the date.

Technical data: access logs generated by our hosting providers (IP address, browser, date and time), needed for the security of the service.

We don't ask for sensitive personal data. Card payment details, when available, will be processed directly by the payment provider; FoldBack does not store them.

3. Why we use it

To create and maintain your account; provide FoldBack's features; send you service emails (activation, password recovery, important notices); give you support; bill the subscription; and protect the service against fraud and unauthorized access.

We don't sell your data, use it for advertising or share it with third parties for commercial purposes. If we ever wanted to send you marketing updates, we would ask separately and you could decline without affecting the service.

4. Who we share it with

Only with providers we need to operate, acting on our behalf under confidentiality and security obligations:

• Supabase (database, sign-in, file storage and service emails), with servers in the United States.

• Vercel (application hosting), with servers in the United States and a global network.

• Anthropic (artificial intelligence), only if you use the AI drafting features, and only with the text needed for that task.

• The payment provider we use to bill the subscription, once available.

This involves an international transfer of data to the United States, necessary to provide the service. We may also disclose data to authorities when required by law or a valid order.

5. Your rights

You can access, correct and delete your data, object to its processing, withdraw your consent or restrict its use. If you live in the European Union or another place with similar laws, you also have the right to data portability and to lodge a complaint with your data protection authority.

To exercise them, write to hola@foldback.io from your account email, stating which right you want to exercise and over which data. We will reply within 20 business days and, if applicable, act on it within the following 15 business days.

You can do many of these yourself: edit your details in Settings and download all your studio's data with the backup.

If you are a client of a studio that uses FoldBack, please contact that studio first; we will help with whatever is up to us.

6. How long we keep it

While the account is active. When it ends, we keep the data and files for 90 days so you can download them or reactivate the account, and then delete them. Our providers' technical backups are erased in their normal cycles. We keep anything longer only when the law requires it (for example, billing records).

7. How we protect it

All communication is encrypted (HTTPS). Each studio's data is separated in the database and only visible to that studio. Passwords are managed by the sign-in provider and we cannot see them. The links you share with clients use random codes that are hard to guess.

No system is infallible; if an incident significantly affected your data, we would let you know.

8. Cookies and browser storage

We only use the cookies needed to keep you signed in. We store a few preferences in your browser (such as interface size or the last view you used). We don't use advertising cookies or third-party tracking tools.

9. Minors

FoldBack is a business service and is not directed at anyone under 18.

10. Changes to this notice

If we change this notice, we will publish the new version on this page with its date and, if the change is significant, let you know inside FoldBack.