[ [0x00] LEGAL ] PRIVACY POLICY

FABRK LEGAL:

PRIVACY POLICY

[LAST UPDATED]: November 26, 2025

[0x01] OVERVIEW

We value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information.

[0x10] INFORMATION WE COLLECT

[1.1] INFORMATION YOU PROVIDE

When you use Fabrk, we collect information you provide directly:

├─ ACCOUNT INFO: Name, email address, password (hashed)
├─ PAYMENT INFO: Processed by Stripe (we don't store full card details)
├─ PROFILE DATA: Optional profile picture, bio, preferences
├─ COMMUNICATIONS: Support inquiries, feedback, email correspondence
└─ GITHUB USERNAME: Required for granting repository access

[1.2] AUTO COLLECTED INFO

We automatically collect certain information when you use our Service:

├─ USAGE DATA: Pages visited, features used, time spent
├─ DEVICE INFO: Browser type, OS, device model
├─ LOG DATA: IP address, access times, error logs
└─ COOKIES: Session cookies, preference cookies

[1.3] THIRD PARTY DATA

If you authenticate via OAuth (Google, GitHub), we receive:

├─ Your name and email address
├─ Profile picture (if provided)
└─ Account ID (for linking purposes)

[0x20] HOW WE USE YOUR INFO

We use collected information for:

├─ SERVICE PROVISION: Account creation, authentication, service delivery
├─ PAYMENT PROCESSING: Billing, invoices, subscription management
├─ COMMUNICATION: Service updates, security alerts, support responses
├─ IMPROVEMENT: Analyzing usage to improve features and performance
├─ SECURITY: Fraud detection, abuse prevention, system security
└─ LEGAL COMPLIANCE: Meeting legal obligations, enforcing terms

[0x30] LEGAL BASIS GDPR

Under GDPR, we process your data based on:

├─ CONTRACT: Processing necessary to provide the Service you purchased
├─ CONSENT: You've given explicit consent (e.g., marketing emails)
├─ LEGITIMATE INTEREST: Necessary for our business operations
└─ LEGAL OBLIGATION: Required by law (e.g., tax records)

[0x40] DATA SHARING DISCLOSURE

[4.1] SERVICE PROVIDERS

We share data with trusted third parties:

├─ STRIPE: Payment processing (PCI-DSS compliant)
├─ RESEND: Transactional email delivery
├─ VERCEL: Infrastructure and hosting
├─ ANALYTICS: Usage analytics (anonymized)
└─ GITHUB: Repository access via Collaborator API

[4.2] LEGAL REQUIREMENTS

We may disclose data if required by law:

├─ Valid legal process (subpoenas, court orders)
├─ Enforcement of our Terms of Service
└─ Protection of rights, property, or safety

[4.3] BUSINESS TRANSFERS

If Fabrk is acquired or merged, your information may be transferred. We'll notify you before any transfer.

[0x50] DATA SECURITY

We implement industry-standard security measures:

├─ ENCRYPTION: TLS 1.3 in transit, AES-256 at rest
├─ AUTH: Bcrypt password hashing (12 rounds)
├─ SESSIONS: JWT tokens with expiration, versioning
├─ INFRA: Secure cloud hosting with security patches
├─ ACCESS CONTROL: Limited employee access to user data
└─ MONITORING: Automated security monitoring and alerts

[0x60] DATA RETENTION

We retain your data for:

├─ ACTIVE ACCOUNTS: Duration + 30 days after deletion
├─ PAYMENT RECORDS: 7 years (required by tax law)
├─ LOGS: 90 days for security and debugging
└─ BACKUPS: 30 days (then auto-deleted)

[0x70] YOUR PRIVACY RIGHTS

[7.1] GDPR RIGHTS (EU USERS)

├─ ACCESS: Request a copy of your personal data
├─ RECTIFICATION: Correct inaccurate data
├─ ERASURE: Request deletion ("right to be forgotten")
├─ PORTABILITY: Receive data in portable format
├─ RESTRICTION: Limit how we process your data
├─ OBJECTION: Object to data processing
└─ WITHDRAW CONSENT: Revoke consent at any time

[7.2] CCPA RIGHTS (CA USERS)

├─ Know what personal information we collect
├─ Know if we sell/disclose info (we don't sell)
├─ Access your personal information
├─ Request deletion of your info
└─ Non-discrimination for exercising rights

[7.3] EXERCISING RIGHTS

├─ EMAIL: support@fabrk.dev
└─ PROFILE: /profile

Response time: 30 days

[7.4] GITHUB ACCESS REVOCATION

If you request data deletion, we will revoke your access to the fabrk-boilerplate repository on GitHub.

[0x80] COOKIES AND TRACKING

We use cookies for:

├─ ESSENTIAL: Authentication, session management (required)
├─ PREFERENCE: Remember your settings (theme, language)
└─ ANALYTICS: Understand usage patterns (optional)

See our COOKIE POLICY for details.

[0x90] CHILDRENS PRIVACY

Fabrk is not intended for users under 18. We do not knowingly collect data from children. If you believe we've collected data from a child, contact us immediately.

[0xA0] INTERNATIONAL DATA TRANSFERS

Your data may be processed in countries outside your own. We ensure adequate protection through:

├─ Standard Contractual Clauses (EU-approved)
├─ Data Processing Agreements with all vendors
└─ Compliance with applicable data protection laws

[0xB0] POLICY CHANGES

We may update this policy periodically. We'll notify you of significant changes via email or prominent notice. Continued use after changes constitutes acceptance.

[0xC0] CONTACT US

Privacy questions or concerns?

├─ EMAIL: support@fabrk.dev
├─ DPO: support@fabrk.dev
└─ FORM: /contact

[0xD0] RELATED DOCUMENTS

> TERMS OF SERVICE > COOKIE POLICY > REFUND POLICY