This policy explains what personal data Clientfolk collects, why, how long we keep it, who we share it with and what you can do about it. It covers the website atclientfolk.com and the Clientfolk app.
Clientfolk is a workspace where freelancers and small agencies organize clients, projects, tasks, documents, quotes and invoices, and share them with the people they invite. It is operated by Prima Arts Media LLC ("we", "us"), the data controller for the personal data described here. Questions go toprimaartsmedia@gmail.com.
1. Data we collect
Account data
When you sign up with email, we collect your name, email address and a password, which is stored only as a secure hash. When you sign in with Google, see section 2 for exactly what we receive.
Content you add
Organizations, clients, projects, tasks, descriptions, comments, documents, files, quotes and invoices that you or people you invite add to Clientfolk. This can include contact details of your clients. You decide what goes in, and we process it only to provide the service to you and the people you share it with.
Usage and technical data
Basic server logs (IP address, browser type, time of request), error reports when something breaks, and, only if you agree, product analytics about which features are used. Details are in our Cookie Policy.
2. Google user data
You can sign in to Clientfolk with your Google account. This section explains how we handle the data Google shares with us.
What we access
Only the basic sign-in permissions: openid, email andprofile. From these we receive your Google account ID, email address, whether the email is verified, your name and your profile picture. We do not request access to your Gmail, Google Drive, Calendar, Contacts or any other Google service.
How we use it
- To create your Clientfolk account and sign you in.
- To show your name and picture to the people in your organizations, for example next to tasks and comments.
- To send you emails the service needs, such as invitations and notifications.
We use Google user data for nothing else.
How we store and protect it
Your Google account data is stored in our sign-in and database service (Supabase) in the European Union, encrypted in transit and at rest. Access is limited to what the service needs to work and to staff who need it to support you.
Sharing
We do not sell Google user data, do not use it for advertising, and do not share it with anyone except the processors in section 4 that run the service for us, the people you choose to work with in Clientfolk, or where the law requires it. We do not use it to train AI or machine learning models.
Retention and deletion
We keep this data while your account exists. You can delete your account at any time in the app under Settings, which removes your Google account data from Clientfolk, or email us and we will delete it within 30 days. You can also remove Clientfolk's access at any time in your Google account atmyaccount.google.com/connections.
Limited Use
Clientfolk's use and transfer of information received from Google APIs adheres to theGoogle API Services User Data Policy, including the Limited Use requirements.
3. Why we use your data
- To run your account and show your work to the people you share it with (contract).
- To send emails you need, like invitations and sign-in links (contract).
- To keep the service secure, fix errors and prevent abuse (legitimate interest).
- To understand how features are used and improve them (consent, where required).
We do not sell your data, and we do not use your content to train models or for advertising.
4. Who processes it for us
- Supabase: database, sign-in and file storage, hosted in the European Union (Ireland).
- Cloudflare: website hosting and delivery.
- Resend: sending emails such as invitations.
- PostHog: error reports, so we can fix problems, and product analytics, only where you have agreed. Hosted in the European Union.
- Google: sign in with Google, if you choose to use it.
Each provider processes data only on our instructions. Where data leaves the European Economic Area, it is protected by standard contractual clauses or an equivalent safeguard.
5. How long we keep it
We keep your data while your account exists. Deleting an organization deletes its clients, projects, tasks and files. Deleting your account removes your personal data, except what we must keep by law, such as invoices. Logs and error reports are kept for a limited time, normally up to 90 days.
6. Your rights
You can access, correct, export or delete your data, object to some processing, and withdraw consent at any time. Most of this you can do yourself in the app; for the rest, email us and we will answer within one month. You can also complain to your local data protection authority.
7. Security
Data is encrypted in transit and at rest. Access rules are enforced inside the database, so people can only read what has been shared with them.
8. Children
Clientfolk is a tool for businesses and is not meant for children under 16. We do not knowingly collect their data.
9. Changes
If we change this policy in a meaningful way, we will tell you by email or in the app before the change takes effect.
10. Contact
Prima Arts Media LLC, primaartsmedia@gmail.com.