This policy describes how Interfold, the operator of the Services, handles personal information when you use our dashboard, API, CLI, agents, and hosting services or contact us. Contact us at support@interfold.dev for privacy questions or requests.
1. Information we collect
Account information: email address, name, profile image, sign-in provider information, account memberships, preferences, and authentication records. If you sign in with Google, we receive information Google provides for sign-in, such as your name, email, and profile image.
Content and communications: files, code, hosted-site data, conversations, prompts, agent output, tool results, connected-service information, and communications you send us. Content you submit may include personal information about you or others.
Billing information: subscription details, billing and transaction records, usage measurements, and payment-provider identifiers. Stripe processes payment details; Interfold does not store your full payment-card number.
Technical and usage information: request and error logs, IP addresses and device or browser information associated with requests, feature-use events, timestamps, and resource or model usage. Product analytics can associate events with your user and account and a browser identifier.
2. How we use information
We use information to authenticate users, operate accounts and hosted sites, run agents and integrations you request, process payments, measure usage, communicate about the Services, provide support, understand and improve features, prevent abuse, troubleshoot failures, and meet legal obligations.
Where applicable data protection law requires a legal basis, we process information to perform our agreement with you, pursue legitimate interests in operating and securing the Services, comply with legal obligations, or obtain consent when required. You may withdraw consent where processing relies on it.
3. Who receives information
We use service providers to operate the Services, including Amazon Web Services for infrastructure and email delivery, Cloudflare for hosting and runtime services, Stripe for payments, and OpenAI and Anthropic for AI features. The information sent depends on the feature you use.
When you use agents, prompts, conversation context, relevant files, and tool results may be sent to the selected AI provider to generate responses. Tools and integrations may send information to services you connect or ask an agent to use. Those providers’ processing is subject to their applicable agreements and policies. Avoid including information you do not want those services to process.
Information may be available to other members of your account according to their permissions, and to visitors when you publish it. We may disclose information when required by law, to protect rights and safety or investigate abuse, or as part of a merger, acquisition, or transfer of the business, subject to applicable law.
4. Cookies, local storage, and tracking
We use cookies for sign-in, session management, and security. The dashboard also stores a browser identifier in local storage for product analytics and may store interface preferences. You can clear or block cookies and local storage in your browser; doing so may prevent sign-in or affect features.
The Services do not currently change their behavior in response to browser “Do Not Track” signals. Customer-hosted sites and connected third-party services may use their own cookies or tracking technologies, governed by their own policies.
5. Retention and security
Retention depends on the type of information, whether your account or content remains active, operational needs, and legal, billing, security, or dispute-resolution requirements. Some records may remain after account closure for those purposes, and deletion from backups may take additional time. Request deletion or information about retention by contacting us.
We use technical and organizational measures intended to protect information, including access controls and protections for authentication and stored secrets. No system or transmission method is completely secure.
6. Your choices and rights
You can update information and manage content and access using available account controls. To request access, correction, deletion, or a copy of personal information, email support@interfold.dev from your account email address. We may need to verify your identity and authority before acting.
Depending on your location and applicable law, you may also have rights to restrict or object to processing, withdraw consent, receive portable data, appeal a decision about a request, or complain to a data protection authority. We will respond as required by applicable law. Some information may need to be retained for legal obligations or other lawful exceptions.
7. Customer-hosted sites
When a customer uses Interfold to collect or process information through their own site or app, that customer determines how the information is used and is responsible for its own privacy notices and obligations. Interfold processes that information to provide the Services. Direct requests about a customer’s site to its operator; we can help identify the appropriate contact when possible.
8. International processing and children
Interfold and its providers may process information in the United States and other countries where they operate. Privacy laws may differ from those in your country. Where required, international transfers must be covered by applicable safeguards.
Interfold accounts are intended for adults, not children under 18. If you believe a child has provided personal information to Interfold, contact us so we can investigate and address it.
9. Policy updates
We will revise the date above when this policy changes. We will communicate material changes through the Services or email and obtain consent when required by law.