Privacy Policy

This Privacy Policy is provided by POPA V.-I. GEORGE PERSOANĂ FIZICĂ AUTORIZATĂ, located in Romania (trading as Fold Analytics, hereinafter "we", "us", or "our"). We operate the website usefold.io and the Fold Analytics platform (collectively, the "Service").

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read it carefully. By using Fold, you agree to the collection and use of information as described in this policy.

2.1 Information you provide directly

• Email address — when you join the waitlist or create an account.
• Password — stored as a secure hash; we never store it in plain text.
• Profile data — full name, company name, and similar details you choose to provide.

2.2 Third-party integration data

When you connect third-party platforms (such as Stripe, Google Analytics 4, Meta Ads, Shopify, Mailchimp, HubSpot, Klaviyo, Beehiiv, and 50+ other supported integrations), we access data from those platforms on your behalf to power the Fold dashboard. We access only the data necessary to provide the Service and do not sell or share it with any other party.

2.3 Usage data collected automatically

• IP address and approximate location
• Browser type and version
• Pages visited and features used within the Service
• Timestamps and session duration

We use PostHog for product analytics. PostHog may collect anonymized event data to help us improve the Service.

We use the information we collect to:

• Provide, operate, and maintain the Service
• Create and manage your account
• Send transactional emails (e.g., waitlist confirmation, account verification)
• Send product updates and announcements — you can unsubscribe at any time
• Detect and prevent fraud, abuse, or security incidents
• Comply with applicable laws and regulations
• Improve and develop new features based on aggregated usage data

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Contract performance — to provide the Service you signed up for.
• Legitimate interests — to improve the Service, ensure security, and communicate relevant updates.
• Consent — for marketing communications, which you may withdraw at any time.
• Legal obligation — when required by applicable law.

We do not sell your personal data. We may share your information only in the following limited circumstances:

• Service providers — trusted third parties that help us operate the Service (e.g., Supabase for database and authentication, email delivery providers). These parties are contractually bound to protect your data.
• Legal requirements — if required by law, court order, or governmental authority.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction. We will notify you before your data is subject to a different privacy policy.

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required by law to retain it longer.

Waitlist data is retained until you confirm your spot or request removal, whichever comes first.

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — request correction of inaccurate data.
• Erasure— request deletion of your data ("right to be forgotten").
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent.

To exercise any of these rights, contact us at info@usefold.io. We will respond within 30 days.

We use the following types of cookies and similar technologies:

• Strictly necessary cookies — required for authentication sessions and security. These cannot be disabled.
• Analytics cookies — PostHog collects anonymized usage data to help us understand how the Service is used. You may opt out via your browser settings or by contacting us.

We implement industry-standard security measures including encryption in transit (TLS), encrypted passwords, and Row-Level Security (RLS) on our database. However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security and encourage you to use a strong, unique password.

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.

Your data may be processed and stored in countries outside your own, including the United States and the European Union. Where required, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) to protect your data.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we will also notify you by email. Your continued use of the Service after changes take effect constitutes your acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us: