Privacy Policy

How Webfolio collects, uses, and protects personal data for the curated directory, accounts, digests, newsletter, and checkout.

This Privacy Policy explains how webfolio.to (“Webfolio”, “we”, “us”) collects, uses, and protects personal data when you use our curated tool directory, website features (including search and on-site comparisons), newsletter and email digests, accounts, tool submissions and claims, dashboards, and optional paid placements (the “Service”).

Data controller

The data controller for the purposes of the General Data Protection Regulation (GDPR) is:

Entreprise Individuelle (EI) – DA SILVA AVELAR William
Trade name: Webfolio
SIRET: 831 461 363 00028
Address: 10 rue de Penthièvre, 75008 Paris, France
Email: contact@webfolio.to

Scope

This Privacy Policy applies to personal data we process when you:

Visit or browse our website and directory
Subscribe to our newsletter or email digests
Create and use an account or dashboard
Submit a tool for listing or claim a tool profile
Purchase optional placements via checkout (Stripe)
Contact support or correspond with us

It does not govern third-party sites or tools you open from our directory; their privacy practices are described on those sites.

Data we collect

Account & identity

Email address
Name (if you provide it)
Credentials and session data needed to secure your account

Newsletter & digests

Email address
Subscription status, source of signup (e.g. page or flow), and related metadata
Locale or language where you provide it

Submissions, claims & listings

Information you provide about a tool (name, URL, description, category, pricing and fit-related fields, contact email, etc.)
Records of moderation, approval status, and communications about your submission or claim

Checkout & billing

Payments for paid placements are processed by Stripe. We receive limited billing data (such as payment status, amount, currency, and identifiers needed to fulfil your order). We do not store full card numbers on our servers.

Usage & technical data

IP address and approximate location derived from it
Browser type, device type, and similar technical data
Pages viewed, actions taken on the site, and timestamps
Server and application logs for security and reliability

Public & editorial directory data

Information displayed on public tool and category pages (including structured fields such as fit-oriented scores, momentum-style signals, and comparison context) is generally not personal data about visitors, but may include business contact details or founder-provided information that identifies individuals when submitted as part of a listing.

How we use data

We use personal data to:

Operate and improve the directory and website features
Authenticate accounts and secure the Service
Review, publish, or reject submissions and manage claims
Send newsletters and digests you have signed up for
Process and document paid placements
Provide support and respond to requests
Analyse usage in aggregate to improve the product
Detect abuse, fraud, and security incidents
Comply with legal obligations

Legal bases

We process personal data on the following legal bases under GDPR, as applicable:

Contract — providing the Service you request (accounts, submissions, checkout)
Legitimate interests — securing the platform, improving the product, analytics that do not require consent, and limited marketing to existing users where permitted
Consent — newsletter and similar emails where required, and non-essential cookies as described in our Cookie Policy
Legal obligation — where the law requires processing

We share personal data with service providers who process it on our instructions (“processors”), including:

Hosting and infrastructure providers
Payment processing: Stripe
Email delivery (e.g. transactional and digest email)
Security: Cloudflare (including Turnstile where used)
Error monitoring (e.g. Sentry) where enabled
Support or chat tools (e.g. Crisp) where enabled
Analytics or ads measurement (e.g. Google) only where you consent

We do not sell your personal data.

Automated processing & scores

Webfolio publishes structured information about tools (such as fit-style scores, momentum-style signals, and comparison-oriented groupings) using editorial rules, data you and founders provide, and automated calculations on our systems. This processing supports discovery and comparison on the site.

We do not use generative AI to author tool descriptions as part of our current product approach. If we introduce new automated or AI-assisted features that materially affect your personal data, we will update this Policy as needed.

Data retention

We retain personal data only as long as necessary for the purposes above, including legal, tax, and dispute resolution needs.

Account-related data is typically deleted or anonymised within a reasonable period after you close your account, subject to exceptions (e.g. records of transactions or legal holds). Newsletter subscriber data is kept until you unsubscribe or we remove inactive records. Submission and listing records may be retained to operate the directory and maintain an audit trail of moderation decisions.

Security

We implement appropriate technical and organisational measures to protect personal data, including access controls, encryption in transit where standard, and monitoring.

No system is completely secure; we cannot guarantee absolute security.

Your rights

Under GDPR, you may have the right to:

Access your personal data
Rectify inaccurate data
Request erasure in certain cases
Restrict or object to certain processing
Data portability where applicable
Withdraw consent where processing is based on consent
Lodge a complaint with a supervisory authority

To exercise these rights, contact contact@webfolio.to. You can unsubscribe from marketing or digest emails using the link in each message.