This policy explains what personal data we process when you use fodenflow.com and our services, what we use it for, who we share it with and what rights you have.
1. Data controller
If you are a customer in Argentina, the controller of your data is Fodenflow. Your data is processed in accordance with Personal Data Protection Law 25,326 and its supplementary regulations.
If you are a customer in the United States or another country, the controller is Slap your brand Corp, in accordance with applicable US privacy laws (including state consumer privacy laws such as California's) and, if you are in another country, the data protection rules that apply to you.
2. Data we process
Account data: name, email address, phone, country, password (stored hashed, never in plain text) and, if you turn it on, two-step verification.
Billing data: company name, tax ID or identification (for example, CUIT or CUIL in Argentina), address, invoice and payment history. Your card details are processed by the payment provider; we never see or store them.
Domain holder data: the data each extension's registry requires to register a domain in your name.
Technical and usage data: IP address, browser, dashboard access logs, server and mail logs (for example, for spam protection) and resource usage of your services.
Support: the messages and files you send us via tickets, email or WhatsApp.
AI Builder: what you type for the AI to create or change your site, and the generated content.
Hosted content: the files, databases and email of your services are yours. We host them on your behalf and only access them to provide the service, at your support request, for security or when required by law.
3. How we use it
To provide the services you purchase (creating and managing your accounts, registering domains, generating sites with AI), charge and invoice, support you, notify you of renewals and service updates, protect the platform against fraud, spam and attacks, and comply with legal and tax obligations.
With your consent, to send you promotions (you can unsubscribe at any time).
The legal basis is the performance of your contract with us, compliance with legal obligations, our legitimate interest in the security of the service and, for optional uses, your consent.
5. International transfers
Our servers and some of our providers are located outside your country, including in the United States. When your data leaves Argentina, we apply the safeguards required by Law 25,326 and the regulations of the Agency for Access to Public Information (for example, contractual clauses with providers) so that it receives an adequate level of protection.
6. How long we keep it
Account data, for as long as the account exists. Billing data, for the period required by tax and commercial laws (in Argentina, up to 10 years). Technical logs, generally up to 12 months, unless needed for a security incident.
The content of your services is deleted when the account is cancelled or deleted, and disappears from backups as they are replaced.
7. Your rights
You can request access to your data, correct it, update it, delete it or object to its processing, and withdraw your consent for optional uses. You can change much of your data directly from your dashboard; for anything else, write to us through the contact page. We respond within the legal deadlines and may ask you to confirm your identity.
Argentina: the right of access may be exercised free of charge every six months, unless a legitimate interest is shown (section 14, subsection 3, Law 25,326). The AGENCY FOR ACCESS TO PUBLIC INFORMATION, as the Supervisory Authority of Law 25,326, is empowered to handle complaints and claims filed by anyone whose rights are affected by non-compliance with personal data protection rules.
United States: depending on the state where you live (for example, California), you may have the right to know what data we hold, to request its deletion or correction, and not to be discriminated against for exercising those rights. Since we do not sell or share data for advertising, there is no need to opt out of sale. You can exercise your rights yourself or through an authorized agent.
Brazil: if you live in Brazil, the General Personal Data Protection Law (LGPD, Law 13,709/2018) gives you the right to confirm whether we process your data and to access it, correct it, request its deletion, request its portability to another provider, obtain information about who we share it with, and withdraw your consent. You may also file a complaint with Brazil's National Data Protection Authority (ANPD).
9. Security
We use encrypted connections (HTTPS), hashed passwords, optional two-step verification, access controls, audit logs and backups. No system is 100% secure: if an incident affecting your data occurs, we will notify you and the authorities where required by law.
10. Children
The services are not directed to anyone under 18, and we do not knowingly collect data from children under 13. If you believe a child has given us their data, contact us and we will delete it.
11. Changes and contact
If we change this policy materially, we will notify you by email or in your dashboard before it takes effect. For any question about your data, write to [email protected] or use the contact page.
Have a question about this document?
Contact us