PRIVACY POLICY

Effective date: 12 July 2026

Last updated: 11 November 2026

Service: Findy ("the Service") at findy.so (https://findy.so), operated by PT. Berawan Technology Solutions ("we", "us"), a limited liability company registered in Indonesia under number 1243411, with its registered office at Menara Ravindo Lt. 12, Jl. Kebon Sirih Kav. 75, Jakarta Pusat, Indonesia.

Data controller: PT. Berawan Technology Solutions

Contact: hello@findy.so

1. SUMMARY

Findy is a personal swipe-file app that gathers the things you save across platforms into one library. This policy explains what we collect, why, who we share it with, and the choices you have.

1. INFORMATION WE COLLECT
2. Account information. Your email address and a securely hashed form of your password. We never store your password in plain text.
3. Your saved content. The bookmarks you create, import, or sync — URLs, titles, text excerpts, thumbnail image URLs, source platform, author names, tags, collections, and timestamps.
4. Connected-platform tokens. When you connect an account (e.g. Reddit, Tumblr, Pinterest, YouTube, X), we store the OAuth refresh token issued by that platform so we can sync your saved items. We do not receive or store your password for those platforms.
5. Payment information. If you subscribe, payments are processed by Dodo Payments. Existing subscribers billed through Stripe remain on Stripe until they move. We store only the processor's customer and subscription identifiers and your plan status. We do not store card numbers.
6. Technical and log data. Standard server logs (IP address, request metadata, timestamps, errors) used for security, reliability, and to understand how the site is used. On the marketing site we also use cookieless analytics (page views and basic visit metadata) for the same product-improvement purpose.

The browser extension additionally accesses, on your device:

• Your Saved lists on Instagram, TikTok and Reddit, when you press Import on Findy's bar on those sites: each saved post's link, caption, image link and the account that posted it, read from your own signed-in session on that site. The extension never asks for your password on those sites.
• The pages and links you choose to save (Save page, Save link, or the right-click menu): their address and title. Findy's server then fetches the page to read it.
• Your browser bookmarks, only when you choose to import or sync them.
• Your Findy email and password, when you sign in from the extension, sent to findy.so to start your session.

The extension talks to findy.so and, during an import, to the site you are importing from, in your own session. It does not read pages you do not choose to save or import, and it sends your data only to your Findy account, never to anyone else.

1. HOW WE USE INFORMATION
2. To provide the Service: store, organize, sync, and display your bookmarks.
3. To authenticate you and keep your account secure.
4. To sync saved content from platforms you connect.
5. To process subscriptions and manage billing (via Dodo Payments, or Stripe for existing Stripe subscribers).
6. To operate, monitor, debug, and improve the Service.
7. To communicate with you about your account (verification, password resets, service notices).

We do not sell your personal information, and we do not use your saved content for advertising.

1. HOW INFORMATION IS SHARED
2. Dodo Payments — payment processing. See Dodo Payments' privacy policy (https://dodopayments.com/legal/privacy-policy).
3. Stripe — payment processing for existing Stripe subscribers. See Stripe's privacy policy (https://stripe.com/privacy).
4. Connected platforms — we call their APIs on your behalf using the tokens you authorized; their handling of that data is governed by their own policies.
5. Marketing analytics — cookieless page-view analytics on findy.so (outside /app) may be processed by our analytics provider (Umami) so we can see which marketing pages are used.
6. Error tracking — if enabled, diagnostic error data may be sent to Sentry.
7. Email delivery — transactional emails may be sent via our email delivery provider.
8. Legal — where required by law or to protect rights and safety.
9. Business transfers — as part of a merger, acquisition, or asset sale, subject to this policy.
10. DATA RETENTION AND DELETION

We keep your data while your account is active. You can disconnect any platform at any time (which deletes the stored token), and you can delete bookmarks. To delete your account and associated data, contact hello@findy.so. We may retain limited records as required by law or for legitimate business purposes (e.g. billing records).

1. SECURITY

Passwords are hashed with a strong key-derivation function; session and email tokens are stored only as hashes. Data is transmitted over HTTPS in production. No method of storage or transmission is perfectly secure, but we take reasonable measures to protect your information.

1. COOKIES AND LOCAL STORAGE

The web app stores your session token in your browser's local storage to keep you signed in. The extension stores your session token and settings using the browser's extension storage. Marketing analytics is cookieless and does not store an identifier on your device. We do not use third-party advertising or tracking cookies.

1. YOUR RIGHTS

Depending on your location (e.g. GDPR/EEA, UK, CCPA/California), you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these, contact hello@findy.so.

1. CHILDREN

The Service is not directed to children under 13, and we do not knowingly collect their data.

1. INTERNATIONAL TRANSFERS

We are established in Indonesia. Your data may be processed there and in the other countries where our hosting and service providers operate, including the United States and the European Union. Where required, we use appropriate safeguards for cross-border transfers.

1. CHANGES

We may update this policy; material changes will be posted at findy.so/privacy (https://findy.so/privacy) with an updated effective date.

1. CONTACT

Questions or requests: hello@findy.so