1. On this website
Contact and sign-up forms. If you write to us or sign up for the weekly note, we receive what you type: your email address and, if you add them, your role and message. We use it to reply to you or to send the note you asked for. You can unsubscribe at any time.
Visitor counts. We count page visits with a cookieless analytics tool. It records the page, the referring site, the country and the device type, in aggregate. It sets no cookies and does not identify you.
2. In the Falmoran app
Your account. Name, work email, your company workspace and your role. A sign-in cookie keeps you logged in; it is needed for the app to work and is not used for tracking.
Your work. Products, materials, facts about your goods, orders, shipments, determinations, documents you upload and messages you send. This is your company’s data. We use it only to provide the service to you. Each workspace is kept separate from every other workspace.
Your suppliers and brokers. When you send a supplier link, the supplier sees only the questions for the products you chose. Their answers are saved on your products with their name, so you can show who stated each fact. A broker you invite sees what you allow them to see.
Records kept on purpose. Determinations, signatures and the audit log are kept unchanged so they can be checked later. That is part of what makes them trustworthy.
3. The free /try page
No account is needed. We keep what the engine understood (for example the chapter and the question it asked), not your name or address. To enforce the daily limit we keep a scrambled code derived from your connection, not the address itself. If you type your email to be told when we cover a product, we keep that email for that purpose only.
4. Who processes data for us
We use a small number of service providers to run Falmoran. They handle data only on our instructions:
- Vercel: hosts the app and counts visits.
- Render: runs the engine and the app’s server.
- Supabase: the database.
- Formspree: receives the website’s forms.
- Resend: sends the app’s emails (invitations, notifications).
Some of these providers may store data outside your country, including in the United States.
5. How long we keep it
Account and workspace data is kept while your account is open. When you close it, we delete or anonymise it, except records we must keep by law or that you asked us to keep. Messages from the website forms are kept as long as we need them to answer you.
6. Your choices
You can ask us to show you, correct, export or delete your personal data. Write to us through the contact form and we will reply. If you are a supplier and want your answers removed, ask the company that sent you the link, or write to us.
7. Security
Connections are encrypted. Workspaces are isolated from each other in the database itself. Passwords are stored only as secure hashes. No system is perfect; if something goes wrong that affects you, we will tell you.
8. Changes
If this page changes in a way that matters, we will update the date at the top and, for account holders, tell you in the app.