Privacy Policy.

1. Who we are.

This policy describes how Fruityworx Platforms Inc. ("fruityworx," "we," "us") collects, uses, stores, and protects information across the fruityworx platform (the "platform"), including every workspace and every app our customers turn on.

The fruityworx platform is a white-label business platform. Every customer who signs up gets a workspace. We treat the entity that holds the account as the data controller of the data inside their workspaces, and the end users of that workspace as the data subjects.

2. What we collect.

From the account holder: account information (name, email, billing details, company name), the domain mapped to the platform, and the configuration of the account (which apps are on for which workspace, branding assets, payment processor keys).

From end users of a workspace: contact records, messages, calendar bookings, payment information, form submissions, and any other data the workspace's app configuration captures.

Automatically: server logs, IP address, browser type, referring URL, and timestamps for every request to the platform.

3. What we do with it.

We process the data we collect to operate the platform: to authenticate users, to route messages, to charge payments, to send transactional emails, to detect abuse, and to provide support. We do not sell the data. We do not train AI models on customer data.

If the operator enables an AI app in a workspace, the AI processes the data inside that workspace to produce the operator's chosen output. The AI does not learn from that data; the data does not leave the workspace unless the operator configures an export.

4. Where it lives.

Data is stored in the region the account holder picks at signup. Operators on the Scale plan can pin specific workspaces to specific regions. Accounts that don't pick a region default to the region closest to their billing address. End users can ask the operator which region their workspace lives in.

5. Who we share it with.

We share data with the sub-processors we need to operate the platform: cloud infrastructure (e.g. AWS, Cloudflare), payment processors (e.g. Stripe, the operator's own processor), transactional email providers, and the LLM providers the operator configures in their AI Studio. A current sub-processor list is available at fruityworx.com/security.

We do not share data with anyone else, except when the operator instructs us to (e.g. an integration they configure), when the law requires us to, or when an enforceable government request is presented.

6. How long we keep it.

We keep data for as long as the operator's account is active. When the operator closes an account, we delete the data within 30 days, except where retention is required for legal or financial reasons (e.g. tax records). Backups follow a rolling 90-day retention and are deleted on the same schedule.

7. Your rights.

End users of a workspace should direct their requests to the operator of the workspace, since the operator is the data controller. We support the operator in fulfilling those requests.

Operators can export all data from a workspace at any time, in standard formats (CSV, JSON), and can close an account from the dashboard without contacting us.

8. Security.

The platform is SOC 2 Type II audited annually. We encrypt data in transit (TLS 1.3) and at rest (AES-256). Access to customer data is logged and restricted to production engineers with documented justification. The full security posture is described at fruityworx.com/security.

9. Cookies and tracking.

The fruityworx marketing site uses first-party cookies for session management and analytics. The platform itself uses first-party cookies for authentication only. We do not deploy third-party advertising cookies on either surface.

10. Changes to this policy.

We will update this policy when we change our practices. When we do, we will email the primary contact on every active account, post a notice in the platform dashboard, and update the "last updated" date above. Material changes give operators at least 30 days' notice before taking effect.

11. Contact.

Questions about this policy go to privacy@fruityworx.io. Fruityworx Platforms Inc., 59 Atis St., Aurora Subd., Angono, Rizal 1930, Philippines.