Privacy Policy

1. Introduction

Proofly ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Proofly and our native plugins and tools for Framer (the "Service"). The current list of plugins is published at proofly.ae/products.

Proofly is operated by Proofly Technology, a sole establishment registered with the Dubai Department of Economy and Tourism (DET), license number 1616710, Dubai, UAE.

2. Information We Collect

Account Information

When you create an account, we collect:

• Email address (we sign you in with a one-time code sent to your email)
• Name (if provided)

If you set a password, it is stored only as a salted hash, never in plaintext.

Payment Information

When you subscribe to a paid plan, payment processing is handled by our payment provider (Stripe). We do not store your credit card details on our servers.

Usage Data

We automatically collect certain information when you use the Service, including:

• Pages visited and features used
• Time and date of visits
• Browser type and version
• Device information

Access Credentials

Where a plugin gates content behind credentials, we store the configuration for it, such as lock names and the credentials that gate it. Passwords and PINs are stored only as salted hashes, never in plaintext, and are never sent to the visitor's browser.

Data You Collect From Your Visitors

Where a plugin lets you collect data from your site visitors, you are the controller of that data and Proofly acts as your processor. We store it on our infrastructure in the European Union so that only your account can read it. You can export or delete it from your dashboard at any time, and deleted data is removed within 30 days.

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain the Service
• Process transactions and send billing information
• Send you important updates about the Service
• Respond to your inquiries and support requests
• Improve and optimize the Service
• Detect and prevent fraud or abuse

4. Email Communications

We may send you emails regarding:

• Account-related notifications (required for Service operation)
• Subscription and billing updates
• Product updates and new features
• Marketing communications (you can opt out at any time)

You can unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in any marketing email or by contacting us.

5. Subprocessors and where your data lives

We do not sell your personal information. We use a small set of trusted providers and share data with them only to operate the Service:

• OVH (France, EU): application hosting and primary data storage, including account data, page locks, and form submissions.
• Supabase: managed PostgreSQL database and authentication.
• Stripe: payment processing. Card details go directly to Stripe and never touch our servers.
• Cloudflare: DNS, content delivery, and web application firewall at the network edge (terminates TLS).
• Resend: transactional and account email delivery.

Your data is hosted in the European Union on OVH infrastructure. We may also disclose information when required by law or to protect our rights, and in connection with a merger, acquisition, or sale of assets.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption of sensitive data in transit and at rest, secure server infrastructure, and dependency and infrastructure auditing. However, no method of transmission over the Internet is 100% secure.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your information
• Object to or restrict processing of your information
• Data portability

To exercise these rights, please contact us at [email protected].

9. Cookies and Tracking

We use cookies and similar tracking technologies to improve your experience. These include:

• Essential Cookies: Required for the Service to function
• Analytics: Help us understand how users interact with the Service

You can control cookies through your browser settings, but disabling certain cookies may affect the functionality of the Service.

10. Children's Privacy

The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at [email protected].