Privacy Policy
Effective Date: September 30, 2026 Last Updated: September 30, 2026
This Privacy Policy explains how Farfatech Inc. ("we", "our", or "us") collects, uses, and protects your personal information when you use our platform (the "Service").
By using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.
Contact
- Controller: Farfatech Inc.
- Email: bonjour-hi@corners.dev
For any privacy-related questions or requests, contact us at the email above.
Data We Collect
Information you provide
- Account information — name, email, and organization name when you create an account.
- GitHub sign-in — when you sign in with GitHub, we receive your email, username, and profile picture URL from GitHub to create and manage your account.
- Email login codes — when you sign in by email, we send a one-time code to your address to authenticate you.
- Team invitations — when you invite teammates, we collect the invitee's email address and assigned role.
- Billing information — collected through our payment processor (Stripe) to manage subscriptions and payments.
- Waitlist and contact submissions — when you join our waitlist or contact us, we collect your email address and any optional message you provide. This data is stored and used to notify you on launch and to respond to your inquiry.
- Communications you send to us — replies and other messages you exchange with us.
Information collected automatically
- Usage data — features used, timestamps, and similar interaction data.
- Device and browser information — browser type, operating system, and screen characteristics.
- IP address — collected for security and basic service operation.
How We Use Your Information
- To provide and maintain the Service
- To process payments and manage subscriptions
- To send waitlist confirmations and notify you when we launch
- To respond to your inquiries and communicate with you about the Service
- To improve and optimize the Service (with your consent where applicable, see Cookies)
- To ensure security and prevent abuse
Legal Basis
We process personal information based on:
- Contract — to provide the Service you requested
- Legitimate Interest — to improve the Service, ensure security, and optimize performance
- Consent — for non-essential analytics and cookies, which you can withdraw at any time
- Legal Obligation — to comply with tax, accounting, and financial regulations
Cookies and Tracking Technologies
We use two categories of cookies and tracking technologies:
Essential (functional)
These are required for the Service to function and are set without consent. This includes:
- Session cookie — an HTTP cookie that keeps you signed in and authenticates your requests.
- Stripe — cookies set by our payment processor for fraud prevention and secure payment processing.
These do not track you for analytics or advertising.
Analytics (non-functional)
With your consent, we use PostHog for product analytics, including event tracking and heatmaps, to understand how the Service is used and to improve it. On login, we may identify you to PostHog using your email, username, and authentication provider.
Consent
When you first visit the Service, a banner lets you choose Accept All (enables analytics) or Essential (analytics off). Your choice is stored locally on your device and re-applied on return visits. You can change your choice at any time by clearing your browser/cookie consent and re-selecting.
We do not use cookies for cross-context behavioral advertising.
Data Sharing
We do not sell or share your personal information for cross-context behavioral advertising. We may share data with the following categories of service providers who help us operate the Service:
- Stripe — payment processing and subscription billing
- PostHog — product analytics and heatmaps (only with your consent)
- ProtonMail (Proton AG) — transactional email delivery (waitlist confirmations, login codes, invitations, and other Service emails)
- GitHub — authentication; when you sign in with GitHub, we receive the profile data described above under Data We Collect.
- Our cloud hosting provider — hosting and infrastructure
We may also disclose data to legal authorities when required by law.
We are not responsible for the privacy practices of these third-party services. Each provider has its own privacy policy, which we encourage you to review.
Data Location
Personal information is stored and processed in Québec, Canada. Where data is transferred to a service provider located outside your jurisdiction, we rely on appropriate safeguards (such as Standard Contractual Clauses) to protect it.
Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:
- Waitlist and contact submissions — retained for 24 months after the waitlist closes. Your email address may be retained beyond this period for future product communications. You can opt out at any time via the unsubscribe link in each email or by contacting us.
- Account information — retained while your account is active and deleted or anonymized a reasonable period after account closure.
- Billing records — retained as required by tax, accounting, and financial regulations.
- Analytics data — retained according to our analytics provider's configured retention period.
After account closure, we retain data only as required by law or for legitimate business purposes.
Your Rights
Depending on your jurisdiction, you may have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your data
- Export your data
- Object to processing
- Withdraw consent (including analytics consent)
- Limit the use of your sensitive personal information
To exercise any rights, contact us at bonjour-hi@corners.dev. We will not discriminate against you for exercising your rights.
California residents (CCPA)
If you are a California resident, the California Consumer Privacy Act gives you the right to:
- Know the categories and specific pieces of personal information we collect, the sources, and the business purpose for collecting it
- Delete your personal information
- Opt out of the sale or sharing of your personal information — we do not sell or share your personal information
- Limit the use of your sensitive personal information — we do not collect sensitive personal information
- Equal service — we will not discriminate against you for exercising these rights
To submit a request, email bonjour-hi@corners.dev.
Québec residents (Law 25)
If you are a Québec resident, Québec's Act modernizing legislative provisions respecting the protection of personal information (Law 25) gives you the right to:
- Know — access and obtain a copy of your personal information
- Object — to decisions based exclusively on automated processing of your information
- Withdraw consent — consent that is no longer necessary, or that was not required, may be withdrawn
- Demand deletion — of personal information whose collection is not justified
Our person in charge of the protection of personal information is Charles Hardy, reachable at charles@corners.dev.
Automated decision-making and profiling
We do not engage in solely automated decision-making or profiling that produces significant effects.
Right to lodge a complaint
If you believe we have not handled your personal information properly, you have the right to lodge a complaint with the Commission d'accès à l'information du Québec (CAI) at cai.gouv.qc.ca, or with your local data protection authority. We would, however, appreciate the chance to address your concerns first — please contact us at bonjour-hi@corners.dev.
Children's Privacy
The Service is not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected such data, contact us and we will delete it.
Security
We implement appropriate technical and organizational measures to protect your personal information. However, no method of transmission over the internet is 100% secure.
Governing Law
This Privacy Policy is governed by the laws of the Province of Québec, Canada, and the federal laws of Canada applicable therein. Farfatech Inc. is registered in Québec, Canada.
Changes
We may update this policy from time to time. We will notify you of significant changes by posting the new policy here and updating the Last Updated date above.
Related
Contact
Questions? Email us at bonjour-hi@corners.dev.