Privacy Policy

What personal data Foliox License collects, why, and your choices.

Last updated: October 2, 2026

This policy explains what personal data Foliox License (“we”) collects, why, and what you can do about it. We keep it short because we collect little.

What we collect

Your account

  • Your e-mail address, an optional display name, and a salted, slow hash of your password (never the password itself).
  • If you sign in with Google or Discord: the provider’s account ID, your e-mail address, name and profile picture URL. We never see your provider password.
  • Security settings: whether two-factor authentication is on (its secret is stored encrypted), and hashed recovery codes.
  • Your sign-up address (IP) and time, and a record of sign-ins and security changes (time, IP address, browser).

What you put into the service

  • Products, license keys, notes, and the customer e-mail addresses you choose to add to keys. You decide what to enter; we store it so the service works and send the e-mails you ask for.
  • License activity: when a key is activated, verified or refused — with a SHA-256 hash of the device ID (never the raw ID), the IP address and the software’s user agent.

Payments

Paid plans are bought through Razorpay (UPI and cards) and NOWPayments (cryptocurrency). We store the order, plan, amount, status and the provider’s payment reference — never card numbers, UPI PINs or wallet secrets, which only the payment provider sees.

Cookies

Only strictly necessary cookies: one to keep you signed in, one for a pending two-factor step, one to recognise a browser you have already signed in from, and a short-lived one while signing in with Google or Discord. We use no advertising or analytics cookies and no third-party trackers.

Why we use it

  • To run the service: sign you in, enforce plan limits, validate licenses, and keep your account secure (spotting suspicious sign-ins and abuse).
  • To send e-mail: verification and password-reset links, security notices, receipts and plan reminders, and — on your instruction — license keys and expiry reminders to your customers.
  • To send the weekly product newsletter, if you left the box ticked at sign-up. Every message has a one-click unsubscribe, and you can change this in Settings.

Who else sees it

We don’t sell personal data. We share only what is needed with the providers that help us run the service: our e-mail delivery provider (to send messages), Razorpay (UPI and cards) and NOWPayments (cryptocurrency) (to process payments), and Google or Discord if you choose to sign in with them. We may disclose data if the law requires it.

How long we keep it

  • Account and licensing data: until you delete your account.
  • Sign-in and security history: up to 12 months. Expired sessions are cleaned up regularly.
  • Sent e-mail records: about 60 days. Payment records may be kept longer where needed for accounting.

Your choices and rights

  • See and export: download your keys as CSV from Settings → Your data.
  • Correct: change your name and e-mail address in your dashboard.
  • Delete: delete your account in Settings → Your data; your products, keys and history are removed. Records of payments you made (amount, plan, date and the e-mail address used) are kept for accounting.
  • Unsubscribe: use the link in any newsletter, or switch it off in Settings.
  • If you are in a place with data-protection law (such as the EU/UK GDPR), you may also object to or restrict certain processing or complain to your regulator. Contact us to exercise any right.

Security

Passwords are hashed with a slow algorithm; secrets such as two-factor seeds and payment keys are encrypted at rest; sessions are revocable and expire; sensitive actions ask you to confirm again; every account’s data is isolated from every other account’s. No system is perfectly secure, so we also give you two-factor authentication and a full sign-in history.

Children

The service is for developers and businesses and is not directed at children.

Changes and contact

If we change this policy in a significant way we will say so in your dashboard or by e-mail. Questions or requests? Use the links on our contact page.