Privacy Policy

This Privacy Policy explains how Furvur Inc. ("Furvur Inc.", "we", "us") handles personal information in connection with widgetful (the "Service"). It covers two roles:

• For information about your account (the person who signs up for widgetful), we act as a data controller.
• For the responses and submissions you collect from your visitors through widgets and forms, we act as a data processor on your behalf — you are the controller, and you are responsible for the notices and consents described in our Terms.

1. Information we collect

• Account information: your email address, a securely hashed password, and your workspace/account name. If you sign in with a third-party provider, we receive basic profile information from that provider.
• Usage information: how you interact with the dashboard, plus standard server logs, used to operate and secure the Service.
• Widget and form data (on behalf of customers): the responses your visitors submit — for example a yes/no feedback vote, a poll choice, an NPS score, or the fields of a contact form — along with the page URL where the widget appears, the widget identifier, and a timestamp. The embed is cookieless: it sets no cookies on your visitors and does not track them across sites. IP addresses are processed transiently at the edge to enforce origin allowlists and rate limits for abuse prevention, and are not stored alongside response data.

2. How we use information

To provide, maintain, secure, and improve the Service; to authenticate you and operate your dashboard; to communicate with you about your account; to prevent abuse and enforce our Terms; and to comply with legal obligations.

3. Legal bases (where applicable, e.g. GDPR)

We process account information to perform our contract with you and for our legitimate interests in operating and securing the Service, and, where required, with your consent. For visitor data, the lawful basis is determined by you as the controller.

4. Cookies

The widgetful application uses a single, essential session cookie to keep you signed in. We do not use third-party advertising or cross-site tracking cookies, and — as noted above — the embedded widget sets no cookies.

5. How we share information

We do not sell personal information. We share it only with service providers ("sub-processors") that help us run the Service, under appropriate contractual protections, including:

• Cloudflare, Inc. — edge delivery, request ingestion, key-value config storage, and event analytics (Analytics Engine).
• Our hosting provider — servers and managed database hosting for the application and account data.
• Payment processor — when paid plans are enabled, a third-party payment processor handles billing (we do not store full card numbers).

We may also disclose information where required by law or to protect rights, safety, and the integrity of the Service.

6. Data retention

Aggregated event data in Analytics Engine is retained for approximately 90 days; we roll summaries into our database to preserve historical trends. Account information and form submissions are retained while your account is active and for a reasonable period afterward, then deleted or anonymized, unless a longer period is required by law. You can request deletion as described below.

7. Security

We use industry-standard measures including encryption in transit (HTTPS/TLS), hashed passwords, scoped access tokens, origin allowlists, and rate limiting. No method of transmission or storage is perfectly secure, but we work to protect your information.

8. International transfers

We and our sub-processors may process information in countries other than where you live, including Canada and the United States. Where required, we rely on appropriate safeguards for such transfers.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, export, or restrict processing of your personal information, and to object or withdraw consent. To exercise these rights for your widgetful account, email [email protected]. If you are an end-user who submitted a response or form on a website that uses widgetful, please contact the operator of that website (our customer), who controls that data; we will assist them as their processor.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

11. Changes to this Policy

We may update this Policy from time to time. Material changes will be communicated (for example, by email or in-app), and the "Effective" date above will be updated.

12. Contact

Questions or requests? Email [email protected].