Privacy Policy

1. Who we are

The Services are operated by [Company Legal Name], trading as Folderbird (registered address: [Registered Address]). For any privacy-related question you can reach us at info@folderbird.com. Where required by applicable data protection law, we act as the "data controller" of the personal data described in this policy.

2. Information we collect

We collect the following categories of information:

Account information

• Your email address, username, and any display name you provide.
• Authentication data, including passwords (stored only in hashed form) and, if you enable it, two-factor authentication settings.
• If you sign in using a third-party provider (such as Google, Microsoft, Facebook, or others), we receive basic profile information (such as your email address) from that provider in accordance with your settings with them.

Device and usage information

• Metadata about the devices you register with Folderbird, such as a device name and identifiers needed to route commands to the correct machine.
• Activity and audit logs recording actions taken through the Services (for example, connecting to a device, browsing a folder, or transferring a file), together with timestamps and the IP address from which the action originated. These logs help us provide, secure, and troubleshoot the Services.
• API keys you create (stored only as a one-way hash) and records of when they are used.

Payment information

• If you purchase a paid plan, payment is processed by our third-party payment provider, Paddle. We do not collect or store your full payment card details. We receive limited information from Paddle such as your subscription status, plan, and billing country to manage your entitlements.

Technical and support information

• Standard technical data such as IP address, browser type, and log data generated when you interact with our website and Services.
• Any information you provide when you contact us for support.

3. How we use information

We use the information we collect to:

• Provide, operate, and maintain the Services, including authenticating you and connecting you to your devices;
• Process payments, manage subscriptions, and provide the features associated with your plan;
• Secure the Services, detect and prevent fraud or abuse, and maintain audit and security records;
• Respond to your requests and provide customer support;
• Send you service-related communications (such as security, billing, or account notices);
• Understand how the Services are used so we can improve them; and
• Comply with our legal obligations and enforce our agreements.

4. Legal bases for processing

Where the EU/UK General Data Protection Regulation applies, we rely on the following legal bases: performance of a contract with you (to provide the Services); our legitimate interests (to secure, maintain, and improve the Services and prevent abuse); your consent (for example, for non-essential cookies); and compliance with legal obligations.

5. Your files and remote access

Folderbird is designed so that your files remain on your own devices. When you browse or preview files, or transfer a file, the content passes through our infrastructure only to the extent necessary to complete the action you requested, and transient copies used for a transfer are deleted shortly afterward. We do not use the contents of your files for any purpose other than carrying out the operations you initiate, and we do not sell your data.

6. Cookies and analytics

We use cookies and similar technologies that are strictly necessary to operate the Services — for example, to keep you signed in and to protect your session. With your consent, we also use analytics cookies (including Google Analytics) to understand aggregate usage and improve the Services. You can accept or manage non-essential cookies through the cookie banner shown on our site, and you can control cookies through your browser settings. Disabling essential cookies may prevent the Services from working correctly.

7. How we share information

We do not sell your personal information. We share information only as follows:

• Service providers (subprocessors) who process data on our behalf under appropriate contractual protections, including Microsoft Azure (cloud hosting and infrastructure), Paddle (payment processing), and analytics providers such as Google Analytics. Where you use a third-party sign-in or connector, that provider processes data under its own terms.
• Legal and safety reasons, where we believe disclosure is reasonably necessary to comply with the law, enforce our terms, or protect the rights, safety, or property of Folderbird, our users, or others.
• Business transfers, in connection with a merger, acquisition, or sale of assets, subject to the confidentiality protections of this policy.

8. International data transfers

Our infrastructure is hosted on Microsoft Azure. Depending on where you are located, your information may be processed in a country other than your own. Where personal data is transferred internationally, we take steps to ensure an appropriate level of protection as required by applicable law (such as standard contractual clauses where relevant).

9. Data retention

We retain personal data for as long as your account is active and for a reasonable period afterward as needed to comply with our legal obligations, resolve disputes, maintain security and audit records, and enforce our agreements. When data is no longer needed, we delete or anonymize it.

10. Security

We take reasonable technical and organizational measures to protect your information, including encryption of data in transit, hashing of secrets, optional two-factor authentication, and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

11. Your rights

Depending on your location, you may have rights over your personal data, including the right to access, correct, delete, or export your data, to object to or restrict certain processing, and to withdraw consent. If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority. If you are a California resident, you may have rights under the CCPA/CPRA, including the right to know, delete, and opt out of any "sale" or "sharing" of personal information (note that we do not sell personal information). To exercise any of these rights, contact us at info@folderbird.com. We will respond as required by applicable law and may need to verify your identity first.

12. Children's privacy

The Services are not directed to children under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Services after changes take effect constitutes acceptance of the updated policy.

14. Contact us

If you have questions about this Privacy Policy or our data practices, contact us at: