01Who is responsible
Foldout, the publisher of the Foldout software and of foldout.so, decides why and how the data described here is processed. You can reach us at support@foldout.so.
Creem, which sells the licence as merchant of record, processes your payment data as a controller of its own. See its Privacy Notice.
02What this notice covers
This notice covers foldout.so, the purchase of a licence, the activation and checking of a licence, updates, and support.
03Your data in Foldout
The data you handle inside Foldout stays with you. You connect your own database and your own accounts, and Foldout does not receive that data. The AI providers and services you connect process what you send them under their own notices.
04Visiting foldout.so
Our hosting provider receives the technical data any website receives: your IP address, your browser and device, the page you ask for and the time. We use it to serve the site and keep it secure, which is our legitimate interest.
05Measuring visits
foldout.so measures how it is used, to understand which pages and campaigns bring visitors. This measurement runs only if you accept it in the cookie banner. Until then it stores nothing and sends nothing. Once you accept, it keeps a random identifier in your browser for up to 90 days and a session that ends after 30 minutes without activity. It records:
- the pages you view, how far you scroll, what you click and the forms you start;
- where you came from: the referring address and the campaign information of the link;
- an email address, if you enter one in a form on the site;
We use it to understand which content brings visitors and buyers, on the basis of your consent. We share it with no advertising network. You can withdraw your consent at any time by clearing your browser storage for foldout.so, after which the banner asks again.
06Cookies and browser storage
Until you accept, the site stores only your choice on the cookie banner. Once you accept, it stores one first-party cookie and entries in your browser storage that identify your visit and its session, for up to 90 days.
The checkout is hosted by Creem, which sets its own cookies under its notice.
07Buying a licence
Creem collects your payment and billing details and keeps them under its own notice. It sends us what we need to deliver your licence: your email address, your Creem customer identifier and the order. We use it to deliver and support your licence, which is the performance of our contract with you, and to keep our own records.
08Activating and checking a licence
When Foldout activates or checks a licence, your key, an identifier of your computer and the label of your Mac are processed by Creem, which issues and checks licence keys. This is how the number of activations is enforced. Our own licence service keeps only what it needs to know about your order: the Creem licence, order and customer identifiers, your email address, the product, the amount and currency, whether the licence is active or revoked, and a log of purchase and refund events.
Foldout also checks for updates. Our release host sees the request, including your IP address, as any web server does.
09Joining the waiting list
If you leave your email address to hear when Foldout opens, we send you one message with a link to confirm it. Until you confirm, we keep nothing. Once you confirm, your address joins our mailing list and we write to you when your seat opens. Every message carries a link to unsubscribe. We rely on your consent, which you give by confirming and take back by unsubscribing, and we keep the address until you do or ask us to delete it.
10Support
When you write to us we keep your message and our reply to answer you and to improve Foldout. Please do not send secrets such as passwords or keys other than your licence key.
11Who processes your data
We use providers to run the site and its services: Vercel hosts foldout.so, Cloudflare runs our edge services and Neon hosts their databases, and Resend sends our emails and keeps the mailing list of the waiting list. They process data on our instructions. Creem is a separate controller for payment data and also processes your licence key. We do not sell your data.
Some of these providers process data outside the European Economic Area. Where they do, they rely on safeguards the law recognises, such as the European Commission's standard contractual clauses.
12How long we keep it
We keep data for as long as the purpose needs it. The visitor identifier in your browser expires after 90 days. Customer, licence and activation records last as long as your licence exists and as long as the law requires us to keep accounting and tax records. Support messages are kept while they help us answer you. After that we delete or anonymise the data.
13Your rights
You may ask for access to your data, to correct it, to delete it, to restrict its use, to receive it in a portable form, and to object to its use. Where we rely on your consent you may withdraw it at any time. Write to support@foldout.so. You may also complain to the data protection authority of the country where you live or work.
14Children
Foldout is business software. It is not directed at children, and we do not knowingly collect their data.
15Changes to this notice
We may update this notice. The date at the top of the page shows the latest version. The Terms page governs your use of Foldout.