Privacy Policy

This Privacy Policy describes how FoldRocket (“we”, “us”, “our”) processes personal data when you visit foldrocket.com, create an account, purchase a license, download the plugin, or contact us.

Controller: FoldRocket · VAT IT05807520969 · support@foldrocket.com

1. Scope

This policy covers the marketing website, customer account area, license activation and update services, checkout flows, and related communications. It does not cover data processed inside your own WordPress installation when you use the FoldRocket plugin with your Bring-Your-Own-Key (BYOK) AI providers — those keys and media stay under your control on your site (and with the providers you configure).

2. Data we collect

Account & identity

• Name and email address when you register.
• Password (stored as a secure hash; we never store plaintext passwords).
• Email verification status and related security tokens (time-limited).
• A short question on the registration form, checked on this site, to reject automated signups. The answer is not stored after the request.

Licenses & billing

• License keys, plan, seat limits, activation status, and domain bindings needed to deliver Pro features.
• Billing and payment data processed by our payment provider (Stripe). We do not store full card numbers on our servers.
• Customer identifiers returned by Stripe to reconcile subscriptions and invoices.

Communications

• Emails you send us (support or sales).
• Newsletter address if you subscribe (you can unsubscribe at any time).
• Transactional messages (account verification, password reset, license delivery).

Technical & security data

• IP address, browser/user-agent, timestamps, and similar log data for security, abuse prevention, and troubleshooting.
• Session cookies required to keep you logged in (see our Cookie Policy).

Analytics (optional)

• Google Analytics 4 measures each visit (pages viewed, referrals, device type, approximate location), including before you use the cookie banner. Details: Cookie Policy.
• Google Ads measures ad clicks, remarketing, and conversions on each visit.
• The Meta (Facebook) Pixel measures visits and ad conversions on each visit.

3. Purposes & legal bases (GDPR)

• Contract — create and manage your account, deliver licenses, process renewals, provide downloads and updates.
• Legitimate interests — secure the service, prevent fraud/abuse, improve reliability, respond to inquiries.
• Consent — optional marketing/newsletter emails.
• Legal obligation — tax, accounting, and regulatory record-keeping where required.

4. How we use data

• Authenticate you and protect your account (including OTP / verification flows).
• Issue, sync, and validate licenses for the FoldRocket plugin.
• Process payments and manage subscriptions via Stripe.
• Send transactional email (verification, password reset, license notices).
• Send product updates or newsletter only when you have subscribed or otherwise consented.
• Measure site traffic with Google Analytics 4, Google Ads, and the Meta Pixel on each visit.

5. Sharing & processors

We share personal data only as needed to operate the service, including:

• Stripe — payments and billing portal.
• Email delivery provider — transactional and optional marketing messages.
• Google — Google Analytics 4 and Google Ads on each visit.
• Meta — Meta (Facebook) Pixel on each visit.
• Hosting / infrastructure — servers that host foldrocket.com and related APIs.

We do not sell your personal data.

6. International transfers

Some providers may process data outside the European Economic Area. Where applicable we rely on appropriate safeguards (such as Standard Contractual Clauses) or the provider’s documented transfer mechanisms.

7. Retention

• Account data — for the life of the account, then deleted or anonymized within a reasonable period after closure, unless law requires longer retention.
• Billing/tax records — as required by applicable law.
• Security logs — typically for a limited period needed for security and diagnostics.
• Newsletter — until you unsubscribe or we delete inactive lists.
• Analytics and ads — according to Google retention settings and your consent withdrawal.

8. Security

We apply technical and organizational measures appropriate to the risk (HTTPS, hashed passwords, access controls, least-privilege practices). No method of transmission or storage is 100% secure; please use a strong unique password for your account.

9. Your rights

If you are in the EEA/UK (or similar regimes), you may have the right to:

• Access, rectify, or erase your personal data
• Restrict or object to certain processing
• Data portability
• Withdraw consent at any time (without affecting prior lawful processing)
• Lodge a complaint with your supervisory authority

To exercise these rights, email support@foldrocket.com. You can also manage cookie preferences via Cookie settings.

10. Children

Our services are directed to professionals and businesses. We do not knowingly collect personal data from children under 16.

11. Plugin / BYOK note

When you use AI features in the plugin, requests are sent with your API keys to the providers you configure. FoldRocket does not require shipping your media library to our servers for core BYOK analysis. Review each provider’s privacy terms for how they process prompts and images.

12. Changes

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Material changes may also be communicated by email or a notice on the site.

13. Contact

FoldRocket · VAT IT05807520969
support@foldrocket.com
Related: Cookie Policy