Privacy policy

# What this covers
How FunnelOne handles personal data of the businesses that use our platform (our customers) and of visitors to our website.

# Data we collect
- Account data: name, email, store name, password (stored hashed), plan and billing status.
- Usage data: what you build and configure, and technical logs needed to run and secure the Service.
- Payment data: handled by Stripe; we only store references, never full card numbers.

# Your shoppers' data
Your funnels collect data from your shoppers (orders, leads, survey answers). For that data you are the controller and we are your processor: we only process it to run the Service for you.

# Why we use it
To provide and secure the Service, to bill you, to support you, and to send you important service emails. We don't sell personal data.

# Sub-processors
Hosting and database providers, Stripe (payments), email delivery (Resend) and, when you use AI features, Anthropic (Claude). Each is bound by a data processing agreement.

# Retention
We keep account data while your account exists and delete it within 90 days after closing, except where the law requires longer retention (for example invoices).

# Your rights
You can access, correct, export or delete your data, and object to processing. Contact us through the support address on our website. You can also complain to your data protection authority.

# Security
We use encryption in transit, encrypt stored API keys, hash passwords, and limit access to what's needed.