Your data in Foluro.

Who is responsible

InSpe, IĮ, registration number 120650387, Savanorių pr. 178F-105, LT-02301 Vilnius, Lithuania, is responsible for personal data used to operate Foluro accounts, billing, support and security. Contact support@foluro.com about privacy.

A catalog publisher decides why it collects reader data and who accesses it, and is responsible for its privacy notice and lawful collection. Foluro processes workspace content and enquiries to provide the service on that publisher's instructions. Contact the publisher about its use of your enquiry; we can help route a request. Business customers can request data processing terms from support.

What we process

• Account: name, email, password hash, membership and authentication records, to provide and secure the service. Our legal bases are performance of the contract and legitimate interests in preventing abuse.
• Content: PDFs, media, products, settings and saved versions, to store, render and publish catalogs as instructed.
• Reader activity and enquiries: page views, interactions, reading time, tracking-link and reader-session identifiers, product selections and submitted contact details, for publisher reports and enquiries. Publishers must provide notices and obtain any consent their use requires.
• Billing: plans, subscription status, agreed terms version, payment references, amounts and paid periods, to administer subscriptions and meet accounting obligations. Stripe collects card and billing details on its checkout and portal. Foluro does not store full card numbers or card security codes.
• Support and security: correspondence, email delivery status and technical logs, to resolve issues and investigate misuse, based on legitimate interests in reliable service and security or legal obligations.

Required account and billing fields are needed for those functions. We do not sell personal data or use catalog content to train an AI model.

Cookies and service providers

Foluro uses an essential sign-in cookie and browser storage for workspace selection, reader notes and preferences. Foluro records catalog activity for publisher reports. The current service does not use third-party advertising pixels. Content embedded or linked by a publisher may involve other websites and their privacy practices.

Current providers include Interneto vizija for hosting, Microsoft 365 for email, and Stripe for checkout and billing. Authorised administrators and providers receive access needed for their functions. Stripe also processes information for its own fraud prevention, regulatory and legal purposes. See Stripe's privacy policy and Microsoft's privacy statement.

Providers may process data outside the European Economic Area. Applicable transfer arrangements may include an adequacy decision or contractual safeguards; contact support for the arrangements applicable to your workspace. Do not upload special-category personal data or data requiring specialised regulated hosting without arranging suitable terms first.

Retention and deletion

We keep account and catalog data while needed to provide your account and publications. Cancellation does not automatically delete content. During early access, account closure and deletion are handled through support. We verify the requester, remove data no longer needed, and explain records retained for legal obligations or unresolved disputes.

Authentication links expire according to their purpose. Routine server backups rotate on a 14-day schedule, so deleted information may remain there until rotation. Accounting and tax rules determine billing-record retention. Support and security records are retained as needed to resolve issues, prevent abuse or meet legal obligations. Contact support for the retention period applicable to a particular record.

Your rights

Where applicable, you may request access, correction, erasure, a portable copy or restricted processing, object to processing based on legitimate interests, and withdraw consent for processing based on consent. Email support@foluro.com. We may need information to verify your identity; do not send an identity document unless we explain why it is needed. Withdrawing consent does not affect earlier lawful processing.

You may complain to the Lithuanian State Data Protection Inspectorate at vdai.lrv.lt or another competent authority. We do not use automated profiling to make decisions with legal or similarly significant effects. Subscription capacity follows the selected plan and confirmed payment; support can review an incorrect restriction.

Changes

We update this notice when processing changes and give appropriate notice of material changes. See our company information for current operator details.