Privacy policy

1. Who we are and what this covers

Fylder is operated by Fylder Solutions ("Fylder", "we", "us"). This policy explains how we handle personal information when you visit fylder.com, use the Fylder app at app.fylder.com, or contact us.

Businesses use Fylder to store details about their own clients and staff. For that information, the business is in charge and we act on its instructions (as its "processor" or "service provider"). If you're a client of a business that uses Fylder, please contact that business about your information; we'll help them respond. For account, website and support information, we decide how it's used (we're the "controller").

2. Information we collect

You give us

• Account details: your name, email address and password. We store passwords only as a salted hash, never in readable form.
• Company details: business name, contact details, time zone, tax and billing defaults, and the team members you invite and their roles.
• Business records: what you and your team enter into Fylder, such as clients and their contact details and addresses, requests, quotes, jobs, schedules, invoices, payments you record, catalog and inventory items, projects and tasks, and your staff directory (which can include hourly rates).
• Messages to us: what you send when you ask for support or contact us.

Collected automatically

• Sign-in sessions: the IP address and browser details of each signed-in session, so you can stay signed in and we can spot suspicious access.
• Activity history: a record of actions taken in your account (for example, who approved a quote), shown in the app's activity feed and kept for security and troubleshooting.
• Server logs: technical records of requests to our servers, such as IP address, time and the page requested.

3. Cookies and similar technologies

• The app sets a cookie that keeps you signed in. It's necessary for the app to work.
• The app saves a few preferences in your browser's local storage, such as dark mode and your preferred project board view. They never leave your device.
• We don't use advertising cookies or cross-site tracking.
• Our website loads its fonts from Google Fonts, so your browser sends Google your IP address when you visit fylder.com. See Google's privacy policy.

If we add analytics or error monitoring, we'll identify people in those tools by account ID only and update this policy first.

4. How we use information

• to provide the Service: create your account, store your records, and show them to the people on your team;
• to keep accounts and the Service secure, prevent fraud and abuse, and investigate problems;
• to send messages about your account, such as password resets, invitations, security alerts, billing notices and changes to our terms;
• to answer your questions and provide support;
• to understand how the Service is used and improve it; and
• to comply with the law and enforce our end-user license agreement.

We don't sell personal information or share it for targeted advertising. We use business records only to provide the Service to the business that owns them.

5. Legal bases (EEA, UK and Switzerland)

Where these laws apply, we rely on:

• contract: to provide the Service you signed up for;
• legitimate interests: to secure and improve the Service and to support customers, balanced against your rights;
• legal obligation: to keep tax and accounting records and respond to lawful requests; and
• consent: where we ask for it, which you can withdraw at any time.

6. Who we share it with

• Your team: people in your Fylder account see its records according to the role the owner gives them.
• Service providers who process data for us under contract and only on our instructions: Vultr (application servers), Supabase (database), and our email delivery provider (account and security emails).
• Services you connect: if you link Fylder to another product, such as accounting software, we send it the data the connection needs.
• Legal and safety: when required by law, or to protect the rights, property or safety of our users, the public or Fylder.
• Business transfers: as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to your information.

7. International transfers

Our providers may store and process information in countries other than yours, including the United States. Where the law requires it, we use safeguards such as the European Commission's standard contractual clauses.

8. How long we keep it

• Account details and business records: while the account is open. After it's closed, we delete them within 90 days, and they leave our backups within 30 days after that.
• Sign-in sessions: until they expire or you sign out.
• Billing and tax records: as long as the law requires.

9. Security

We protect information with encryption in transit (HTTPS), hashed passwords, role-based permissions, and database rules that keep each company's records separate from every other company's. No system is perfectly secure; if a breach affects your information, we'll notify you as the law requires.

10. Your rights and choices

Depending on where you live, you may have the right to:

• access the personal information we hold about you, and get a copy in a portable format;
• correct it, or ask us to delete it;
• object to or restrict some uses of it, and withdraw consent you've given; and
• complain to your local data protection authority. In Canada, that is the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.

You can update most account details in the app. For anything else, email contact@fylder.com. We'll verify your identity before acting and reply within the time the law requires. We won't treat you differently for using these rights. California residents: we don't sell or share personal information as those terms are defined in the CCPA.

11. Children

Fylder is a business tool and isn't meant for anyone under 16. We don't knowingly collect their personal information; if you believe we have, contact us and we'll delete it.

12. Changes to this policy

We'll post any change on this page and update the effective date. If a change is material, we'll also tell account owners by email or in the app before it takes effect.

13. Contact

Privacy questions and requests: