Welcome

Introduction

We're thrilled to have you use Finsweet's Products and Services. Data privacy can be a complex topic, so we've put together this guide to help you understand how our Products and Services interact with data and what it means for you as a Finsweet user.

Finsweet Inc. is the company behind all the awesome Products and Services you're using. When we say "Finsweet," "we," "us," or "our" in this Policy, we’re talking about Finsweet Inc. When we say "you" or "Customer," we mean you - the individual or company using our Products and Services.

By using Finsweet's Products and Services, or accessing our content on any platform, you're agreeing to this Policy, so give them a thorough read. If you're accepting for a company or other legal entity, you're confirming you've got the authority to do so. In that case, "you" means that entity. By accepting this Policy, you're confirming that you have the right to enter into this agreement, either for yourself or on behalf of your company. If you're acting on behalf of a company, you're promising us that you have the authority to bind that company to this Policy.

Capitalized terms not defined in this Policy have the meaning given to them in our other applicable agreements referenced herein.

Products and Services

Finsweet’s “Products and Services” include:

• Products, like Wized, Attributes, Client-First, Components, and CMS Bridge 
• Content, like SEO Guide, tutorials, documentation, educational resources, affiliate links, this website (Finsweet.com and any subdomain of Finsweet.com), and YouTube content.
• Tools, like Finsweet Extension, Support Forum, Open Source initiatives, code snippets, and repos

In our Agreement, we may say “Products” or  “Services” to represent Products and Services. We’re always innovating at Finsweet, so this list of Products and Services may change. Any future Products that we create at Finsweet will also be covered under this Policy and the Agreement.

Applicable terms

When you use Finsweet's Products and Services, you're agreeing to this Policy, as well as our Acceptable Use Policy, Intellectual Property Policy, Cookie Policy, and any other applicable agreements or policies referenced on website’s legal pages (collectively, the "Agreement"). You can find these applicable agreements and policies at Finsweet.com/legal/home. If you're using specific Finsweet Products or Services, additional terms may apply—we'll make sure to let you know about those.

Remember, this Policy apply from the moment you start using our Products and Services until you decide to stop using them or your subscription ends.

Please take the time to read through this Agreement carefully. By using Finsweet's Products and Services, you're indicating that you understand and accept this Policy. If something doesn't make sense or you don't agree with part of it, please don't use our Products and Services until we've had a chance to clarify things for you.

We know that was a lot of legal language, but it's important stuff. Here's what it means in simpler terms:

1. By using our Products and Services, you're agreeing to all our terms.
2. If you don't agree, you can't use our stuff.
3. You're promising us you have the authority to agree to this Policy.
4. If you're agreeing on behalf of a company, you're confirming you have the power to do so.

Disclaimer

Before we dive in, just a quick note: these Privacy FAQs are here to give you information, but they're not set in stone. We might update them as things change. Also, this isn't legal advice – it's just us trying to explain things clearly. If you need legal advice, please chat with a lawyer who knows about data privacy laws.

Let's start with some background

GDPR: What's the deal?

On May 25, 2018, the European Union rolled out the General Data Protection Regulation (GDPR). It's a big deal in the world of data privacy, aiming to protect personal data for folks in Europe.

The GDPR puts some responsibilities on companies (yes, including us at Finsweet) to keep personal data safe. This includes things like:

• Making sure we have good security
• Keeping records of how we use data
• Being careful when we transfer data out of Europe

It also gives individuals in Europe some rights over their personal data. We'll get into those rights later in this guide.

Let's break down some definitions

We know legal jargon can be confusing, so let's clarify some key terms:

Controller

This is the company or organization that decides how and why personal data is processed.

In simpler terms: If you're using Wized to build a web app, you're the controller for the data your app collects. You decide what data to collect and how to use it.

Processor

This is the entity that processes personal data on behalf of the controller.

In simpler terms: That's us! When you use Finsweet's Products like Wized or Attributes, we're processing data based on how you've set things up.

Personal Data

Any information that can be used to identify a specific person.

In simpler terms: This could be anything from a name or email address to an IP address or cookie data.

Europe

For these FAQs, we're talking about countries where the GDPR applies. This includes all EU countries, plus Iceland, Liechtenstein, Norway, and the UK.

How Finsweet fits into the picture

We wear different hats depending on how you're interacting with us. Let's break it down:

1. If you're signed up for our newsletter or Finsweet+ membership, we're the controller of that personal data. Our privacy policy governs how we use this information.
2. If you're using our Products like Wized, Attributes, or Components to build websites or web apps, you're the controller of any data collected through those sites or apps. Our Products are tools that help you build and manage your sites, but we don't store or process the data your sites collect.
3. If you're an end-user of a website or app built with Finsweet Products, we don't have a direct relationship with you. The owner of that website or app is the controller of your data.

Your responsibilities as a Finsweet customer

Does Finsweet handle all my GDPR compliance?

Not quite. While we make sure our Products and Services are designed with privacy in mind, you've got your own responsibilities too. If you're collecting data from folks in Europe through a site or app you've built with our tools, you need to make sure you're following GDPR rules.

Do you need to make my site or app GDPR compliant?

If you're collecting personal data from individuals in Europe, then yes, you probably do. The GDPR applies regardless of where you're located if you're handling data of people in Europe.

Do you need to do to be GDPR compliant?

There's no one-size-fits-all answer here. GDPR compliance can involve things like:

• Getting proper consent to collect data
• Providing clear privacy policies
• Ensuring data security
• Respecting data subject rights

We'd recommend chatting with a lawyer who knows about privacy laws to get specific advice for your situation.

Data storage and processing

Where is data stored when using Finsweet Products?

It's important to understand that Finsweet doesn't store the data that flows through the websites or applications you build using our Products. Our Products are designed to help you create and manage your web projects, but the actual data storage and processing may happen on your end or with the Services you integrate (like databases or APIs).

How does Finsweet handle data transfers?

Since we don't store or process the data from your Finsweet-built projects, we're not directly involved in data transfers. However, our Products are designed to work seamlessly with various data storage and processing solutions, allowing you to choose and configure the options that best meet your data protection needs.

What about subprocessors?

While we use some third-party Services to help us provide our Products and Services, these don't interact with the data in your Finsweet-built projects. They're primarily used for things like hosting our website, managing our customer relationships, and providing support.

Security

At Finsweet, we take security seriously in the design and development of our Products:

• Our Products are built with security best practices in mind.
• We regularly update our Products to address any discovered vulnerabilities.
• We provide guidance on secure implementation of our tools.
• We offer features that help you implement secure authentication methods.

Remember, while we provide the tools, it's up to you to ensure they're implemented securely in your projects.

If you don’t agree, stop using our services

Make sure sure you agree to this Policy and every policy that’s part of the Agreement. If you don’t, you should discontinue use of Finsweet’s Products and Services immediately.

Changes to this Policy

We may update this Policy from time to time to reflect changes in our Services, legal requirements, or business practices. If we make any significant changes, we'll notify you by email or by posting a prominent notice on our website before the changes become effective. We encourage you to review this Policy periodically for the latest information on our service policies. Your continued use of Finsweet's Services after any changes constitutes acceptance of the updated Policy. If you don't agree with the revised Policy, you should discontinue use of our Services.

Contact us

We’re ready to help clarify anything about our Agreement. 

We prefer email because we’ll receive your message quickly and be able to respond quickly. Send an email to [email protected] to get the conversation started.

If physical mail is a must, you can reach us at: Finsweet, 1001A E Harmony Rd. #15, Fort Collins, CO, 80525, United States.