Data Processing Terms

These Data Processing Terms apply when a portfolio owner (the "customer") uses Folio to collect or store personal data about other people, such as contact form messages, newsletter subscribers, testimonials, or workspace members. They form part of the Terms of Service and apply automatically; no separate signature is needed.

For that personal data, the customer decides why and how it is processed, and wrxstack processes it on the customer behalf to provide Folio.

The processing covers what is needed to run the service.

• Purpose: hosting, publishing, storing, exporting, emailing, and securing portfolio content and related data.
• Data: names, contact details, messages, subscriber emails, content the customer adds, and technical data.
• People: portfolio visitors who make contact or subscribe, workspace members, and people referred to in customer content.
• Duration: while the customer uses Folio, and afterwards only for the limited retention described in the Privacy Policy.

We process the data according to the customer instructions given through product settings and actions, such as publishing, editing, exporting, or deleting. We do not use it for advertising and do not sell it.

Anyone who operates the service with access to this data is bound to keep it confidential, and access is limited to what is needed to run, secure, and support Folio.

We use reasonable technical and organisational measures, including encryption in transit, access controls, workspace isolation, passkey-protected administrative access, audit logging, and monitoring.

The customer agrees that we may use the service providers listed on the Subprocessors page. We update that page when the list changes.

Data is processed in the United States and in the countries where our providers operate.

Customers can view, export, edit, and delete their data in the product. If a person asks us directly about data a customer controls, we will point them to that customer where we reasonably can.

If we confirm a security incident affecting a customer personal data, we will inform the customer without undue delay with the information reasonably available to us.

When a customer deletes data or closes their account, we delete the data from the live service. Backups and records we must keep for legal or security reasons are removed on their normal schedule.

These terms are part of the Terms of Service. The Terms of Service, including its disclaimers and limitation of liability, apply to these terms as well.

Questions about data processing can be sent to legal@wrxstack.com.