Privacy Policy

1. Data Controller

Functra is the data controller responsible for your personal data in connection with the service. For privacy-related inquiries, contact us at info@functra.com.

2. Information We Collect

We collect only the data necessary to provide, secure, and improve Functra. Depending on how you use the service, this may include:

• Account and authentication data, including your email address and basic profile information, collected and processed through Clerk for secure sign-in and account management.
• Board metadata and content data stored in Supabase, such as board titles, tags, page structure, drawing coordinates, canvas state, timestamps, and related collaboration data required to save and sync your work.
• Subscription and billing status indicators (for example, whether you have an active Pro plan), without collecting or storing payment card details ourselves.
• Technical and usage data such as device type, browser, IP address, log events, and error diagnostics, used to maintain security and service reliability.

3. Payment Information and Stripe

When you subscribe to Functra Pro or make a paid purchase, all payment processing is handled directly and securely by Stripe, our payment processor.

Functra does not store, process, receive, or have access to your full credit card numbers, CVV codes, or other sensitive payment credentials. Stripe collects and processes billing information according to its own privacy policy and PCI-DSS security standards.

We may receive limited billing-related information from Stripe, such as subscription status, customer ID, invoice references, and payment success or failure events, solely to manage your account and Pro access.

4. How We Use Your Data

We use personal data for the following purposes:

• Creating and managing your account through Clerk.
• Saving, syncing, and displaying your boards and related content in Supabase.
• Providing customer support and responding to your requests.
• Processing subscriptions and verifying Pro plan eligibility.
• Protecting the platform against fraud, abuse, and unauthorized access.
• Complying with legal obligations and enforcing our Terms of Service.
• Improving performance, reliability, and user experience through aggregated analytics where possible.

5. Legal Bases for Processing (GDPR)

Where GDPR applies, we process personal data on one or more of the following legal bases:

• Performance of a contract — to provide the service you signed up for.
• Legitimate interests — to secure, maintain, and improve Functra, provided your rights do not override those interests.
• Legal obligation — where processing is required by applicable law.
• Consent — where required, such as for optional communications. You may withdraw consent at any time.

6. Data Processors and Third-Party Services

We use trusted third-party providers to operate Functra. These providers process data on our behalf under appropriate contractual safeguards:

• Clerk — authentication, identity management, and account security.
• Supabase — database hosting and storage of board metadata and canvas-related data.
• Stripe — subscription billing and payment processing.
• Infrastructure, email, and analytics providers as needed to deliver core functionality.

7. Data Sharing and Sales

We do not sell your personal data to third parties. We do not rent or trade your information for advertising purposes.

We may disclose data only when necessary to: (a) comply with law or valid legal requests; (b) protect the rights, safety, and security of Functra, our users, or the public; or (c) in connection with a merger, acquisition, or asset sale, subject to continued protection of your data.

8. International Data Transfers

Some of our service providers may process data outside the European Economic Area (EEA). Where this occurs, we rely on appropriate safeguards such as Standard Contractual Clauses, adequacy decisions, or equivalent mechanisms recognized under GDPR.

9. Data Retention

We retain personal data only for as long as necessary to provide the service, fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements.

When you delete your account or specific content, we will delete or anonymize associated data within a reasonable period, except where retention is required by law or for legitimate backup and security purposes.

10. Your Rights Under GDPR

If you are located in the EEA, UK, or another jurisdiction with similar privacy rights, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data, subject to legal exceptions.
• Request restriction of processing in certain circumstances.
• Object to processing based on legitimate interests.
• Request data portability where applicable.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with your local supervisory authority.

11. Security

We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. However, no online service can guarantee absolute security, and you are responsible for maintaining the confidentiality of your account credentials via Clerk.

12. Children’s Privacy

Functra is not directed at children under 16. We do not knowingly collect personal data from children under 16 without appropriate parental consent where required by law.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated “Last updated” date. Continued use of Functra after changes become effective constitutes acknowledgment of the revised policy.

14. Contact

For privacy requests or questions about this policy, contact us at info@functra.com.