ASection A
Introduction
This Website is operated by Franstorm. Depending on the domain zone registration of your customer account, your Data Controller is one of the following legal entities:
Franstorm, Inc.
Commonwealth of Virginia, USA. Registered address: 2108 South Blvd #211, Charlotte, NC 28203, United States.
Franstorm Private Limited
#46/2, Coles Road, D Stn H9, Benson Town, Bangalore North, Karnataka, India, 560046, and its affiliates.
This Privacy Policy applies to the Website (including franstorm.eu, franstorm.com, franstorm.de, franstorm.pl, franstorm.it, franstorm.com.tr, franstorm.com.br, franstorm.es, franstorm.fr, franstorm.cn and its regional variants, franstorm.in, franstorm.co, franstorm.mx, franstorm.uk, franstorm.id, franstorm.vn, franstorm.jp, and mailinternetsub.com), our mobile apps, and our Products and Services.
This Policy explains what personal information is collected and by whom, how it is used and disclosed, who it may be shared with, your choices and rights, the security measures protecting it, and how to access or correct it.
Changes to this Policy
We may update this Privacy Policy from time to time. Please review it periodically. If you do not accept an amended Policy, please stop using this Website.
BSection B
Our Human-Centric AI Commitment
AI assists people. People handle your data.
Franstorm builds AI to support franchise professionals, not to replace human judgment. We do not use AI to access, read, process, or analyse your client data. Every task that touches your data is done manually by trained members of our team.
No AI access to client data
Client data, files, emails, contacts, and account content are never fed into, or accessed by, AI models, whether our own or third-party.
Manual handling
Data operations, including campaign management, lead tracking, reporting, and support, are carried out by our people, by hand.
No model training
Your data is never used to train, tune, or improve any AI or machine-learning model.
People stay accountable
A named human is responsible for every decision about your data. No automated decision-making is applied to you.
What this means in practice
- AI features in our products do not connect to, scan, or ingest the data you store with us or share through integrations.
- Where you choose to use an AI feature, you supply only the content you type or paste in yourself. We do not attach your stored client data to it.
- Access to client data is limited to authorised employees who need it to support your account.
- If this approach ever changes, we will update this Policy and ask for your explicit consent first.
CSection C
Collected Information
Personally identifiable information we collect
Registering for a User Account requires you to voluntarily supply information such as your name, phone number, billing information, email address, and postal addresses. Registration is optional.
| Category | Includes |
|---|---|
| Identity Data | First/last/maiden name, username, marital status, job title, identity documents where requested |
| Contact Data | Billing address, email address, telephone numbers |
| Transaction Data | Payment details and products/services purchased |
| Technical Data | IP address, login data, browser type/version, time zone, OS, device platform |
| Profile Data | Username/password, orders, preferences, feedback, survey responses |
| Usage Data | How you use the website, products, and services |
| Marketing & Communications Data | Marketing and communication preferences |
You are never required to answer any question and may decline at any time. Withholding mandatory information may prevent you from using certain Products and Services.
Browsing & email client interactions
Requests to our servers log HTTP header information, IP address, request time, and URL requested. We use these to operate the Website and understand usage patterns.
Mobile apps
Usage details
Traffic data, logs, and communication data from app access.
Device information
IP address, OS, browser type, mobile network, device phone number.
Stored files
Metadata from files on your device: photos, audio, video, contacts.
Location information
Real-time device location, only when instructed by your organization and with employee consent.
Files
Franstorm stores files you upload, download, or access via the Services and does not share them with third parties. Our team does not run them through AI tools. No password-protected system can be made entirely impenetrable, despite the security measures in place.
User Account & public profile
You may add information to your profile beyond what is minimally required. You can review and update it anytime by logging in. Deactivating your account (via the account interface or privacy@franstorm.com) deletes all associated stored information, including files.
Children's information
We do not knowingly collect personal information from children under 16 without parental consent. You must be 16 or the age of majority in your jurisdiction to use the Website. Parents or guardians may contact privacy@franstorm.com to review, delete, or stop collection of a child's data.
Securing transmission & storage
We apply industry-standard firewall and password protection, along with technical and organizational security measures: policy, governance, risk assessment, network and sub-processor security. Internet transmission is never completely secure, and any transmission is at your own risk. Data is processed and stored in the United States and other jurisdictions where Franstorm and its service providers operate. Access is restricted to employees performing technical support of the service.
If a password protects your account, keeping it confidential is your responsibility. Always log out on shared computers.
DSection D
Use & Disclosure of Information
Legal bases for use
On contract
Registering accounts, sending confirmations, processing purchases and support requests, managing uploaded content, and handling enquiries and complaints.
Legitimate interests
Diagnosing server issues, administering the Website, personalising your browsing experience, and sending one-time registration confirmations or infrequent service alerts.
Legitimate interests and consent
Improving products and services, personalising communications, conducting surveys, and, where you have consented, sending information about new products, upgrades, and offers. You may unsubscribe anytime via unsubscribe@franstorm.com or your Account settings.
Legal obligation
Complying with legal requirements, enforcing Terms of Use, protecting our legal rights, and responding to legal proceedings or licensing/warranty violations.
Disclosure to third parties
We use independent-contractor service providers (e.g. email and hosting) under contract. They may only act on our instructions and may not share your data further. Our hosting data processor is Amazon Web Services (AWS), Frankfurt, Germany. We do not share your information with third parties for direct marketing purposes, and we do not share it with AI providers.
We may disclose information where required to comply with law, subpoenas, or legal process; to protect user or public safety; or, in the event of a merger, acquisition, or asset transfer, to the acquiring entity.
Where your data is stored
Data from franstorm.eu, .de, .it, .pl, .uk and .fr domains is processed by Franstorm Limited (Cyprus, EU) and stored in Frankfurt, Germany via AWS, fully GDPR-compliant. Storage locations for other domain zones are described in the Franstorm Infrastructure, Sub-processors and Joint Controllers section.
International transfers
For transfers outside the EU, Franstorm relies on appropriate safeguards under Article 46 GDPR. For EU/UK/Switzerland-to-USA transfers under Franstorm, Inc., Franstorm certifies compliance with the EU-U.S., UK Extension, and Swiss-U.S. Data Privacy Frameworks (DPF), enforced by the FTC. Details and the participant list: dataprivacyframework.gov.
DPF-related complaints should first be sent to privacy@franstorm.com. Unresolved complaints may be referred to JAMS at no cost via jamsadr.com/dpf-dispute-resolution.
ESection E
Your Choices & Privacy Inquiries
You may always decline to share personal information. This will not block Website access, though some services may be limited. You may opt out of marketing emails or information-sharing anytime via your Account preferences.
California, Virginia, Colorado privacy choices
We will not share Personal Data with third parties for their own direct-marketing purposes where prohibited by California, Virginia, or Colorado law.
Cookies & tracking
| Type | Purpose |
|---|---|
| Strictly necessary | Required for site operation: login, shopping cart, e-billing |
| Analytical / performance | Counts visitors and tracks navigation to improve the site |
| Functionality | Recognises returning visitors and remembers preferences |
Web beacons (pixel tags) may also be used to recognise cookies and page views. Some Franstorm domains use third-party Device Data Collection Tools, including TikTok. You may opt out of non-essential cookies on your first visit, adjust your browser settings, manage Facebook privacy settings, or install the Google Analytics opt-out add-on. Blocking cookies may affect site functionality.
FSection F
Integrations, Third-Party Links & Extensions
This section describes how personal data is processed through Franstorm's third-party integrations, links, and Non-Franstorm Applications available in Franstorm's marketplace/directory.
Google Services integrations
Connecting your Franstorm account to Google services (via Google API Services / Gmail API OAuth) may collect email content and metadata, Google Calendar events, cloud storage files, and inbox/sent contact addresses when you enable syncing. Franstorm's use of this data adheres to the Google API Services User Data Policy, including Limited Use requirements. Data obtained through these integrations is not used to develop, train, or run AI models. Access can be revoked anytime.
Gmail two-way sync
Emails mirrored between Gmail and Franstorm CRM/Webmail; send from Franstorm via Gmail.
Calendar two-way sync
Events created in either Google Calendar or Franstorm sync automatically both ways.
Google Docs
View and edit Google Docs directly inside your Franstorm account.
Microsoft (regional)
May collect data per its own privacy policy on certain franstorm.com pages; opt-out via Microsoft's ad-settings page.
Legal basis & export compliance
Processing rests on legitimate interests or contract performance. To comply with US/EU export controls and sanctions laws (EAR, OFAC, EU Council regulations), Franstorm may in certain cases request identity documentation.
Third-party responsibility
Franstorm is not responsible for the data practices of Third Party Providers. Review their privacy notices before enabling any integration.
GSection G
Data Retention
Franstorm retains your Personal Data for a period consistent with the original purpose of collection, as described under Section F's "How Your Personal Information Is Used via the Third Party Integrations."
HSection H
Your Rights
If you are located in the EU, UK, Switzerland, or certain other jurisdictions, you may have the following rights regarding your personal data:
- Right to access: request copies of your personal information.
- Right to rectification: correct inaccurate or incomplete information.
- Right to erasure: where the data is no longer necessary, consent is withdrawn, you object to processing, or it was processed unlawfully.
- Right to restriction of processing: we store but do not further process your data.
- Right to data portability: receive your data in a structured, machine-readable format where processing is consent- or contract-based and automated.
- Right to object: object to processing based on our legitimate interests.
- Right to human review: you can always ask for a real person to review any decision about your data.
- Right to withdraw consent: at any time, without affecting prior lawful processing.
- Right to lodge a complaint: with a supervisory authority.
To exercise these rights, email privacy@franstorm.com with your portal link and administrator registration email address.
Note: if you provide inconsistent privacy preferences over time, Franstorm cannot guarantee your most recent preference will be honored.
Contact
Get in Touch
Data Protection & Grievance Officer: Ketty Brain
Email:privacy@franstorm.com
Please describe your inquiry or concern in as much detail as possible. A real person will review and respond promptly.
