1. Who we are
FOSLOne (incubated by AIOne) is the data controller for personal information processed through our platform, except where a Vendor processes your data as an independent controller for order fulfillment and support.
Privacy inquiries: privacy@foslone.com
2. Information we collect
- Identity & contact: name, email, phone, shipping and billing address.
- Account & profile: login credentials, Creator or Vendor profile details, preferences.
- Transaction data: order history, cart contents, payment status (card details are processed by Stripe; we do not store full card numbers).
- Creator attribution: referral links, cookies, and commission-related identifiers (see Cookie Policy).
- Technical data: IP address, browser type, device identifiers, pages viewed, and similar usage data.
- Communications: messages you send via contact forms, support tickets, or email.
- Marketing preferences: opt-in status for promotional emails.
3. Sources of information
- Directly from you when you register, checkout, or contact us.
- Automatically through cookies and similar technologies.
- From payment processors, shipping carriers, and fraud-prevention partners.
- From Vendors when they fulfill orders or respond to lead-generation requests.
4. How we use information
- Provide, operate, and improve our services.
- Process orders, payments, refunds, and Creator commissions.
- Authenticate users and prevent fraud and abuse.
- Send transactional emails (order confirmations, shipping updates).
- Send marketing communications where you have opted in (you may unsubscribe anytime).
- Comply with legal obligations and enforce our Terms.
- Analytics to understand site performance (with consent where required).
5. Legal bases (GDPR)
Where GDPR applies, we process personal data based on: (a) contract performance (orders, accounts); (b) legitimate interests (security, analytics, product improvement) balanced against your rights; (c) consent (non-essential cookies, marketing); and (d) legal obligation.
7. Data retention
We retain personal information as long as needed to provide services, comply with legal obligations (e.g., tax and accounting records), resolve disputes, and enforce agreements. Order and tax records are typically retained for seven (7) years unless a longer period is required by law.
8. Your privacy rights
To exercise rights, email privacy@foslone.com. We will verify your request and respond within applicable timelines (e.g., 30 days under GDPR, 45 days under CCPA).
- Access, correction, and deletion of your personal information.
- Data portability (GDPR) in a structured, commonly used format.
- Restrict or object to certain processing (GDPR).
- Withdraw consent where processing is consent-based.
- Opt out of marketing emails via unsubscribe links.
- Lodge a complaint with your local data protection authority (EU/UK).
9. California residents (CCPA/CPRA)
California residents have the right to know categories of personal information collected, request deletion, correct inaccurate information, and opt out of sale/sharing for cross-context behavioral advertising. We honor Global Privacy Control (GPC) signals where technically feasible.
Submit requests to privacy@foslone.com. We will not discriminate against you for exercising privacy rights.
10. International transfers
We may process data in the United States and other countries. Where required, we use appropriate safeguards such as Standard Contractual Clauses for transfers from the EEA/UK.
11. Children
Our services are not directed to children under 16. We do not knowingly collect personal information from children. Contact us if you believe we have collected a child's information.
12. Changes
We may update this Privacy Policy. Material changes will be posted here with a revised date.