Privacy policy

Data controller

Farvane is the controller of the personal data collected through dashboard.farvane.com and farvane.com.

For any question about this policy or to exercise your rights, write to [email protected].

What data we process

Account data: email, display name, and password (stored as a hash, never in plain text).

Billing data: handled directly by our payment provider (Stripe or Paddle, depending on the method chosen) — Farvane does not store card numbers.

Data from the forms you manage: the submissions your own forms receive (name, email, and whatever fields you define), plus technical metadata for each submission (IP, date, spam-filter outcome).

Technical usage data: preference cookies (see the cookie policy), access logs for security purposes.

Purposes and legal basis

Providing the contracted service (contract performance): creating and managing your account, processing your forms' submissions, filtering spam, delivering submissions by email.

Managing payment for Pro/Enterprise plans (contract performance).

Responding to your support or contact requests (legitimate interest in assisting you, or pre-contractual measures).

Complying with legal obligations (tax, accounting) where applicable.

Data processors

Resend — sending transactional and submission-notification emails.

Stripe and Paddle — payment processing for Pro/Enterprise plans (Paddle acts as Merchant of Record).

Cloudflare — hosting for dashboard.farvane.com and farvane.com.

Production database provider: [PENDING: data from the account holder — see specs/15-legal-and-trust/requirements.md].

None of these providers use your data for their own advertising purposes — they process it solely to provide the service contracted with Farvane.

Retention periods

Form submissions: 30 days on the Free plan, 365 days on Pro and Enterprise, counted from the submission date.

Account data: for as long as the account is active. If you delete your account, its data is permanently erased after 30 days.

Billing data: per the legal retention period for accounting/tax records that applies.

Your rights

You have the right to access, rectify, and erase your data, as well as to request restriction of processing, object to processing, and data portability.

You can exercise these rights by writing to [email protected]. You also have the right to lodge a complaint with the competent supervisory authority.

Competent supervisory authority and response timeframe: [PENDING: data from the account holder — see specs/15-legal-and-trust/requirements.md].

International transfers

[PENDING: data from the account holder — see specs/15-legal-and-trust/requirements.md] — to be completed based on the actual location of the providers listed above at the time this page is published.