Privacy policy

What this policy covers

This policy covers the marketing site at falnor.io, the contact form, and the discovery-call booking embedded on the contact page.

Data processed inside a client engagement (workflow records, the links to the client’s software, and the record of actions) stays in the client’s own systems and is governed by the statement of work and security review for that engagement, not by this page.

Data we collect

• Contact form: your name, work email, company, and anything you write in the message field. We also record the time the form was opened and submitted, and a hashed form of your IP address, to screen out automated spam.
• Discovery-call booking: the name, email, timezone and any notes you give Cal.com when you pick a time. Cal.com also sends us booking, reschedule and cancellation events so we can confirm by email.
• Server logs: our hosting provider keeps standard request logs (IP address, browser type, pages requested) for security and error diagnosis.
• Product analytics: PostHog records pages viewed, referral source, and interaction signals such as clicks, tied to a pseudonymous visitor ID, with session replays that mask all form inputs. Google Analytics records aggregated traffic and page-level usage. We use both only to understand how the marketing site is used, and neither runs on the admin area.
• We do not run advertising or cross-site tracking scripts on this site, and we never collect payment card details here.

Why we use it

• To reply to your enquiry and schedule or confirm a discovery call.
• To send the booking confirmation, reschedule and cancellation emails for a call you booked.
• To keep a record of who we have spoken to, for reasonable business record-keeping.
• To detect and block spam and abuse of the contact form.

Our lawful bases are your consent (when you submit the form or book a call) and our legitimate interest in responding to enquiries and protecting the site.

Who processes it

We do not sell or rent personal data. It is shared only with the processors below, and with legal advisers or authorities where the law requires it.

• Convex: stores contact form submissions and powers the authenticated admin tools we use to read them.
• Cal.com: runs the booking calendar embedded on the contact page and sends us booking events.
• Brevo: sends the confirmation and notification emails.
• PostHog: product analytics for the marketing site, so we can see which pages are used and where the flow breaks.
• Google Analytics: aggregated traffic measurement and page-level usage of the marketing site.
• Vercel: hosts the site and keeps request logs.

How long we keep it

Contact enquiries and booking details are kept for as long as needed to respond and for reasonable record-keeping, and are deleted on request. Hosting logs are retained on the provider’s default schedule.

Your rights

If you are in the UK, the EEA, or a jurisdiction with similar law, you can ask us to:

• Access: send you a copy of the personal data we hold about you.
• Rectify: correct anything inaccurate or incomplete.
• Erase: delete your data where we no longer need it.
• Restrict or object: limit or stop processing based on legitimate interests.
• Port: give you your data in a structured, commonly used format that a computer can read.

Security

The site is served over encrypted connections (TLS). Access to submissions is limited to named Falnor staff behind authentication. Client engagement data is never hosted by Falnor; it stays in the client’s own systems under the client’s controls.

Cookies and Do Not Track

The site sets cookies and local storage for PostHog product analytics and Google Analytics, which measure how the marketing site is used. The embedded Cal.com booker may set functional cookies needed for the booking to work. We do not run advertising or cross-site tracking. We do not change site behaviour in response to a Do Not Track signal.

Minors and changes

This site is not intended for anyone under 18. We may update this policy when our practices or the law change; material changes will be noted on this page with a new date.

Contact

To exercise any of the rights above, or to ask about this policy, email support@falnor.io. We respond to verified requests within 30 days.