1. The short version
- We collect only what we need to take your order, deliver it and support you.
- We never ask for, or store, your social media passwords.
- We do not sell your personal data.
- You can ask us to access, correct or delete your data at any time.
2. What we collect
- Account details: your name, email address and a securely hashed password, or your Google profile name, email and picture if you sign in with Google.
- Order details: the packages you buy, the public profile or post links you give us, comments you write for comment packages, prices and order status.
- Payment records: amounts, payment method and references from our payment providers. Card numbers are handled by the provider and never reach us.
- Wallet and rewards: top-ups, spending, loyalty credit, draw entries and bonuses.
- Support messages: anything you send us by email or the contact form.
- Technical data: IP address, browser and device information and basic usage logs, used for security, fraud prevention and keeping the site working.
- Site analytics: the pages you visit, the packages you look at, what you search for, how long you stay and whether a visit ends in an order. Visits are linked to a random ID stored in your browser, not to your name. We record your country and city from your connection, but we do not store your IP address for analytics.
3. How we use it
- to process payments and deliver your orders;
- to send receipts, order updates and account emails such as email verification and password resets;
- to run your wallet, rewards and monthly draw;
- to answer support requests and handle refills and refunds;
- to understand how visitors use the site, so we can fix problems and improve our packages and checkout;
- to prevent fraud, abuse and chargebacks, and to keep accounts secure;
- to meet our legal, tax and accounting obligations.
6. How long we keep it
We keep account data while your account is open. Order, payment and wallet records are kept for as long as tax and accounting rules require, typically up to seven years, even after an account is closed. Support messages and technical logs are deleted when they are no longer needed. Detailed analytics are deleted after 90 days; after that we keep only daily totals that do not identify anyone.
7. Your choices and rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, and to object to or restrict how we use it. Email support@folzora.com from the address on your account and we will respond within 30 days. You can also complain to your local data protection authority.
Folzora is not intended for anyone under 18, and we do not knowingly collect data from children.
8. Security and changes
Data is encrypted in transit, passwords are hashed and access to customer data is limited to staff who need it. No system is perfectly secure, so please use a strong, unique password.
If we change this policy we will update the date above. See also our Terms of service.