Privacy Policy
This privacy policy explains how SASU Dynamic Foundries ("we", "us", "our") collects, uses, and protects your personal data when you use FolianX ("the Service"), available at https://folianx.com, in compliance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and French Law No. 78-17 of 6 January 1978 (Loi Informatique et Libertés).
Data Controller
- Company: SASU Dynamic Foundries (RCS Paris 102 801 206)
- SIREN: 102801206
- Address: 15 Boulevard Saint-Marcel, 75013 Paris, France
- Email: contact@dynamic-foundries.com
Data We Collect
Data you provide
- Account data: name, email address, password (hashed), profile information
- Billing data: payment method details are processed directly by Stripe and are not stored on our servers. We store your Stripe customer ID, subscription plan, and billing history.
- Service data: any content, files, or configuration you create or upload through the Service
- Communication data: messages sent to our support team
Data collected automatically
- Technical data: IP address, browser type and version, and operating system — recorded in server access logs
- Usage data: the pages you request and the date and time of access, recorded in server access logs. We run no product analytics or behavioural tracking.
- Cookies: see the Cookies and Local Storage section below
Purpose and Legal Basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Account creation and management | Performance of contract (Art. 6(1)(b)) |
| Providing the Service | Performance of contract (Art. 6(1)(b)) |
| Payment processing and billing | Performance of contract (Art. 6(1)(b)) |
| Customer support | Performance of contract (Art. 6(1)(b)) |
| Security and fraud prevention | Legitimate interest (Art. 6(1)(f)) |
| Legal and regulatory compliance | Legal obligation (Art. 6(1)(c)) |
| Marketing communications (with opt-in) | Consent (Art. 6(1)(a)) |
Data Retention
| Data type | Retention period |
|---|---|
| Account data | Duration of the account + 3 years after deletion |
| Billing and invoice data | 10 years (French accounting obligations, Art. L123-22 Code de commerce) |
| Service data (files, content) | Duration of the account; deleted within 30 days of account closure |
| Server logs | 12 months |
| Support communications | 3 years after resolution |
Sub-processors
We use the following third-party services that may process your data:
| Service | Purpose | Location |
|---|---|---|
| OVH SAS | Web hosting, data storage, and outgoing account emails | France (EU) |
| Stripe, Inc. | Payment processing (paid plans only) | United States (EU-US Data Privacy Framework) |
We host all fonts and front-end libraries (Tailwind CSS, Editor.js, Alpine.js) ourselves. Across the marketing site and the app, no third-party content-delivery network, analytics provider, or advertising service receives your IP address or any other data — there are no trackers.
The one exception is the billing pages, which load Stripe's
own script (js.stripe.com) to process payments securely. Stripe
sets short-lived fraud-prevention cookies (__stripe_mid,
__stripe_sid) and performs device fingerprinting to prevent
payment fraud. This is strictly necessary to take a payment and does not
require consent (CNIL exemption for anti-fraud cookies used by payment
providers). It applies only when you are on a checkout or billing page.
Cookies and Local Storage
The Service uses only what is strictly necessary to function — no advertising, analytics, or third-party tracking cookies, so no consent banner is required:
- Session cookie (essential): keeps you signed in; required for authentication and security (CSRF protection). Does not require consent.
- Theme preference (functional): your light/dark choice is stored locally in your browser (
localStorage), not sent to us.
You can clear these through your browser settings at any time. Clearing the session cookie will sign you out.
Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption in transit (TLS/HTTPS)
- Passwords stored using a strong, salted, industry-standard one-way hashing function
- Regular security updates and patching
- Access controls and authentication for internal systems
- Web Application Firewall (WAF)
No method of transmission or storage is 100% secure. If you discover a security vulnerability, please contact us immediately at contact@dynamic-foundries.com.
Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access (Art. 15) — obtain a copy of your personal data
- Right to rectification (Art. 16) — correct inaccurate data
- Right to erasure (Art. 17) — request deletion of your data
- Right to restrict processing (Art. 18) — limit how we use your data
- Right to data portability (Art. 20) — receive your data in a structured, machine-readable format
- Right to object (Art. 21) — object to processing based on legitimate interest
- Right to withdraw consent (Art. 7(3)) — withdraw consent at any time for consent-based processing
To exercise any of these rights, contact us at contact@dynamic-foundries.com. We will respond within 30 days. You may also delete your account and associated data directly from your account settings.
If you believe your rights have not been respected, you may file a complaint with the French data protection authority:
- CNIL — Commission Nationale de l'Informatique et des Libertés
- 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
- www.cnil.fr
International Transfers
Some of our sub-processors may transfer data outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place, including the EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs) as approved by the European Commission.
Children's Privacy
This Service is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
Changes to This Policy
We may update this privacy policy from time to time. If we make material changes, we will notify you via email or through the Service. The date of the last update is indicated below.
Last updated: 22 July 2026