Skip to content

Legal

Privacy Policy

Last updated: November 8, 2026

This policy explains what personal data we process when you use fodenflow.com and our services, what we use it for, who we share it with and what rights you have.

1. Data controller

If you are a customer in Argentina, the controller of your data is Fodenflow. Your data is processed in accordance with Personal Data Protection Law 25,326 and its supplementary regulations.

If you are a customer in the United States or another country, the controller is Slap your brand Corp, in accordance with applicable US privacy laws (including state consumer privacy laws such as California's) and, if you are in another country, the data protection rules that apply to you.

2. Data we process

Account data: name, email address, phone, country, password (stored hashed, never in plain text) and, if you turn it on, two-step verification.

Billing data: company name, tax ID or identification (for example, CUIT or CUIL in Argentina), address, invoice and payment history. Your card details are processed by the payment provider; we never see or store them.

Domain holder data: the data each extension's registry requires to register a domain in your name.

Technical and usage data: IP address, browser, dashboard access logs, server and mail logs (for example, for spam protection) and resource usage of your services.

Support: the messages and files you send us via tickets, email or WhatsApp.

AI Builder: what you type for the AI to create or change your site, and the generated content.

Hosted content: the files, databases and email of your services are yours. We host them on your behalf and only access them to provide the service, at your support request, for security or when required by law.

3. How we use it

To provide the services you purchase (creating and managing your accounts, registering domains, generating sites with AI), charge and invoice, support you, notify you of renewals and service updates, protect the platform against fraud, spam and attacks, and comply with legal and tax obligations.

With your consent, to send you promotions (you can unsubscribe at any time).

The legal basis is the performance of your contract with us, compliance with legal obligations, our legitimate interest in the security of the service and, for optional uses, your consent.

4. Who we share it with

We do not sell or rent your personal data, nor “share” it for cross-context behavioral advertising.

We share it only with providers that need it to deliver the service and process it on our behalf: payment processors (Stripe, Mercado Pago, PayPal), domain registries and registrars (NIC Argentina, CentralNic and each extension's registry), our artificial intelligence provider (Anthropic) for the AI Builder, and server, email and data center providers.

Fodenflow and Slap your brand Corp share the data needed to operate the platform, which is the same for both.

We may also disclose it when ordered by a competent authority or required by law, or to defend our rights.

5. International transfers

Our servers and some of our providers are located outside your country, including in the United States. When your data leaves Argentina, we apply the safeguards required by Law 25,326 and the regulations of the Agency for Access to Public Information (for example, contractual clauses with providers) so that it receives an adequate level of protection.

6. How long we keep it

Account data, for as long as the account exists. Billing data, for the period required by tax and commercial laws (in Argentina, up to 10 years). Technical logs, generally up to 12 months, unless needed for a security incident.

The content of your services is deleted when the account is cancelled or deleted, and disappears from backups as they are replaced.

7. Your rights

You can request access to your data, correct it, update it, delete it or object to its processing, and withdraw your consent for optional uses. You can change much of your data directly from your dashboard; for anything else, write to us through the contact page. We respond within the legal deadlines and may ask you to confirm your identity.

Argentina: the right of access may be exercised free of charge every six months, unless a legitimate interest is shown (section 14, subsection 3, Law 25,326). The AGENCY FOR ACCESS TO PUBLIC INFORMATION, as the Supervisory Authority of Law 25,326, is empowered to handle complaints and claims filed by anyone whose rights are affected by non-compliance with personal data protection rules.

United States: depending on the state where you live (for example, California), you may have the right to know what data we hold, to request its deletion or correction, and not to be discriminated against for exercising those rights. Since we do not sell or share data for advertising, there is no need to opt out of sale. You can exercise your rights yourself or through an authorized agent.

Brazil: if you live in Brazil, the General Personal Data Protection Law (LGPD, Law 13,709/2018) gives you the right to confirm whether we process your data and to access it, correct it, request its deletion, request its portability to another provider, obtain information about who we share it with, and withdraw your consent. You may also file a complaint with Brazil's National Data Protection Authority (ANPD).

8. Cookies

We only use cookies that are necessary for the site to work: keeping you signed in and remembering your language and currency. We do not use advertising or third-party tracking cookies; if we ever add analytics, we will ask for your permission first. You can delete or block cookies in your browser, but without them you will not be able to sign in.

On your first visit, we use your IP address, without storing it, to choose the language and currency in which we show you the site.

9. Security

We use encrypted connections (HTTPS), hashed passwords, optional two-step verification, access controls, audit logs and backups. No system is 100% secure: if an incident affecting your data occurs, we will notify you and the authorities where required by law.

10. Children

The services are not directed to anyone under 18, and we do not knowingly collect data from children under 13. If you believe a child has given us their data, contact us and we will delete it.

11. Changes and contact

If we change this policy materially, we will notify you by email or in your dashboard before it takes effect. For any question about your data, write to [email protected] or use the contact page.

Have a question about this document?

Contact us