Legal
Privacy Policy
Last updated: May 4, 2026 — Applies to all users worldwide
GDPRCCPALGPDPDPAPIPEDAVietnam Cybersecurity Law
1. Who We Are
FootprintIQ is a software-as-a-service platform operated by its parent company. We do not publish individual officer names in public-facing legal documents. Contact privacy@ftprintiq.com for all privacy matters.
Platform: FootprintIQ
Location: Da Nang, Vietnam
Website: ftprintiq.com
Privacy contact: privacy@ftprintiq.com
Support: support@ftprintiq.com
2. What Data We Collect
Account Data
Full name, email address, and encrypted password when you create an account.
Billing Data
Payment card details are processed by Stripe. We never store your full card number.
Usage Data
Searches performed, leads saved, proposals generated, features used, and timestamps.
Team Data
Names and emails of team members you invite to your organization.
Content Data
Leads, notes, proposals, and cabinet content you create within the platform.
Technical Data
IP address, browser type, device type, operating system, and session data.
Communications
Messages you send to our support team and in-platform messages.
3. How We Use Your Data
- →To provide, operate, and improve the FootprintIQ platform
- →To process subscription payments through Stripe
- →To send transactional emails — receipts, account alerts, usage warnings
- →To enforce subscription plan limits and prevent abuse
- →To provide customer support when you contact us
- →To detect and prevent fraud, abuse, and security threats
- →To comply with applicable laws and regulations
We do not sell your personal data. We do not use your data for advertising. We do not share your data with any third party for their own marketing purposes.
4. Third-Party Service Providers
Supabase
Database, authentication, and infrastructure
Location: USA / Singapore (AWS)
Anthropic (Claude AI)
AI-powered script and proposal generation
Location: USA
5. Your Rights
🇪🇺 EU / EEA / UK — GDPR
- →Right to access your personal data
- →Right to rectification
- →Right to erasure ("right to be forgotten")
- →Right to data portability
- →Right to object to processing
🇺🇸 California — CCPA
- →Right to know what we collect
- →Right to delete your data
- →Right to opt out of sale (we do not sell data)
- →Right to non-discrimination
🇧🇷 Brazil — LGPD
- →Confirmation of data processing
- →Access to your data
- →Correction of inaccurate data
- →Right to revoke consent
🇻🇳 Vietnam — Cybersecurity Law & PDPD
- →Right to be informed about data processing
- →Right to restrict processing
- →Right to delete your data
To exercise any right: email privacy@ftprintiq.com. We respond within 30 days.
6. Data Security
- →Row Level Security (RLS) — users can only access their own data
- →AES-256 encryption at rest for all stored data
- →TLS 1.3 encryption for all data in transit
- →Server-side environment variables for all secret keys
- →Regular security reviews and dependency updates