Privacy policy
1. Who we are
Folynx is a platform that helps recruiters find creative professionals (design, video editing, motion design, illustration and digital art…) and contact them. It is operated by Ascend Digital Assets LLC, a limited liability company organized under the laws of the State of Wyoming (United States), whose address is 1021 E Lincolnway, Suite 9890, Cheyenne, WY 82001, United States (“Folynx”, “we”). Folynx is the data controller for the data described here.
Data protection contact: [To complete: email address]. Data Protection Officer: [To complete: name, or “no DPO appointed”].
As Folynx is established outside the European Union while processing data about people located there, it appoints a representative in the European Union (Article 27 GDPR): [To complete: name and address of the representative], and, where applicable, a representative in the United Kingdom: [To complete, if applicable].
2. Who this policy applies to
- Listed professionals: people whose professional profile we show to our customers, without them having created an account with us (section 3).
- Recruiters who have an account and a subscription (section 4).
- Visitors to the website (section 5).
3. Professionals listed on Folynx
3.1. The data we process
- Professional identity and location: name, username, country and city, website, links to your public profiles.
- Presentation: occupation, specialty, bio, languages, availability (for example “remote”), displayed rate, where you made them public.
- Recognition: public statistics of your profiles (views, appreciations, followers), awards given by juries or competitions, projects shown (titles and links).
- References: client channels or clients named on your portfolio, number of videos or artworks shown.
- Contact: your professional email address, only if you made it public (profile, portfolio or website), or if an email lookup service associates it with your website's domain.
- Images: we keep links to your website's preview image, never copies of your work.
- Data you give us if you confirm your profile: specialty, client channels, showcase video or image, date of confirmation.
- Computed data: your score and the detail of its components, your badge.
We do not seek to collect sensitive data (health, opinions, trade-union membership, etc.). If a public bio contains some, ask us to remove it.
3.2. Where this data comes from
From publicly accessible sources: portfolio and creative-work showcase platforms, public lists of competition and festival winners, and your own websites. It also comes from you, if you confirm your profile. When we write to you, we tell you the exact source of your listing. We consult these sources respecting their automated-access rules (robots.txt) and without circumventing their protections.
3.3. Why we use it, and on what legal basis
Purposes: allow recruiters to discover creative professionals, compare their work and contact them with job or project offers; compute the score and badges; honor your rights (opt-out list).
Legal basis: our legitimate interest (Article 6(1)(f) GDPR), shared with that of recruiters. We have weighed it against your rights:
- we only use professional information that you made public, for a purpose consistent with what you can expect from a public portfolio: being discovered and contacted about work;
- we inform you (3.4) and you can object in one click at any time (3.8);
- we limit the data, its duration (3.7) and who can access it (3.6);
- we show no home address, no private phone number, and we do not seek sensitive data.
For the information you add when confirming your profile, the legal basis is your consent, which you can withdraw at any time.
3.4. How we inform you
If we hold your professional email address, we send you an information email within one month of collection (Article 14 GDPR). It describes what we hold and where it comes from, and contains a link to remove your profile in one click and a link to confirm it. If we have no way to write to you individually, informing you personally would require a disproportionate effort, so we make this information public through this policy (Article 14(5)(b) GDPR). You can ask us at any time whether you are listed.
3.5. The talent score
The score is computed automatically, using fixed rules (no machine learning), from four families of public elements: peer recognition, awards from professional juries, portfolio content, and your own confirmation of your profile. It is used to rank profiles. It makes no decision on its own: recruiters decide, and our terms forbid them from relying on the score alone. You can object to this processing, including this profiling, at any time.
3.6. Who can see your data
- Subscribed recruiters, professionals bound to us by terms that frame their use (contact for a professional offer only, no resale or mass extraction).
- Visitors without a subscription only see an anonymized preview: masked name, specialty, country, score, badge.
- Our technical service providers (section 7).
3.7. How long we keep it
As long as your profile remains public and, at most, twenty-four (24) months after its last update. If you ask for removal, your data is deleted immediately. We only keep an irreversible fingerprint (hash) of your public identifiers, so that we never list you again; it does not allow your information to be retrieved. Temporary technical copies of public pages used during collection are kept for at most seven (7) days.
3.8. Your rights and how to exercise them
You have the right to access your data, correct it, have it erased, restrict its use, object to it, and withdraw your consent. To exercise them:
- Immediate removal: the Remove my profile page, or the link in our email.
- Confirmation or correction: the “Confirm my profile” link in our email.
- Any other request: [To complete: email address]. We reply within one month.
4. Recruiters (our customers)
Data: professional email address, your password (never kept as such: only a salted one-way hash that nobody can read), whether your email address has been confirmed or, if you choose to sign in with Google, the identifier and email address that Google gives us, proof that you accepted our terms (date and version), plan and subscription status, billing information (payment is handled by our payment provider; we do not keep your card number), list of saved profiles, exchanges with our support, technical connection data (IP address, security logs) and the session cookie (section 6).
Purposes and legal bases: provide the service and manage your subscription (performance of the contract); secure the service, prevent abuse and keep proof that you accepted our terms (legitimate interest); keep our accounts (legal obligation).
Retention: accounts whose email address is never confirmed are deleted after seven (7) days. Otherwise, for the life of your account, then deleted within twelve (12) months after it is closed, except invoices and accounting records, kept for the period required by applicable law (for example seven (7) years in the United States) [To be validated].
Your rights: those in section 3.8, to be exercised at the contact address. Note: data about professionals that you extract from the service and use in your own tools is your own responsibility as a controller (see our terms of sale, article 8.4).
5. Website visitors
Without an account, you can run a search and see an anonymized preview. We use no audience-measurement tool and no advertising or tracking cookie. Our host may keep technical logs (IP address, date, requested page) for security, for [To complete: duration].
6. Cookies and embedded content
| Name | Purpose | Duration | Type |
|---|---|---|---|
sid | Keeps you signed in to your account | 30 days | Strictly necessary (no consent required) |
gstate | Protects the “Continue with Google” sign-in against forgery (only set if you use it) | 10 minutes | Strictly necessary (no consent required) |
For signed-in recruiters, some cards show a video chosen by the professional, through the official YouTube player (in “privacy-enhanced” mode) or Vimeo player (with the “do not track” option), and images hosted on the professionals' own websites. To load them, your browser contacts these third parties, which receive in particular your IP address. According to their statements, no tracking cookie is set before a video is played. [To be validated: consent before loading third-party players]
7. Service providers and recipients
We do not sell your data to advertisers or data brokers, and we do not use it for advertising or to train artificial-intelligence models. We entrust it to providers acting on our instructions:
| Provider | Role | Data involved |
|---|---|---|
| Hostinger (servers in Frankfurt, Germany) | Hosting, database and email mailboxes | All service data |
| Cloudflare (R2 storage, European Union jurisdiction) | Storage of encrypted backups | Encrypted copies of the database, which Cloudflare cannot read |
| Google (optional) | “Continue with Google” sign-in | Identifier and email address of your Google account, only if you use this option |
| [To confirm: Stripe] | Subscription payments | Recruiters' billing data |
| Resend (emails sent from the EU region, Ireland) | Sending emails (information, confirmation, service) | Email address and message content |
| [To confirm: Hunter.io] | Lookup of professional email addresses | A professional's first name, last name and website domain |
| [To confirm: SerpAPI] | Search engine results to find portfolios | Search queries (no personal data about people) |
Subscribed recruiters are also recipients of profiles (section 3.6). We may finally disclose data where the law requires it.
8. International data transfers
Folynx is established in the United States. Our servers are located in Frankfurt, Germany, and the encrypted backups are stored in the European Union. Because Folynx is operated from the United States, the data can be accessed from there, and some of our providers (Resend, Cloudflare, Google) are American companies. If you are in the European Union, the European Economic Area, the United Kingdom or Switzerland, this may therefore be a transfer to a country that does not necessarily benefit from an adequacy decision. To frame these transfers, we rely on [To choose: Folynx's certification under the EU–US Data Privacy Framework, or the European Commission's standard contractual clauses].
Our providers located outside the European Union are subject to equivalent safeguards (adequacy decision or standard contractual clauses). You can ask us for information about these safeguards at the contact address.
9. Security
We apply appropriate technical and organizational measures: encrypted connections (HTTPS), access control, salted hashing of passwords, hashing of the identifiers in the opt-out list, and backups that are encrypted before they leave our server. No measure is infallible; in the event of a data breach likely to harm you, we notify you and the competent authority as the law requires.
10. Children
Folynx is intended for professionals. We do not knowingly list minors. If you are a minor and find your profile on Folynx, or know of one, contact us: we remove it immediately.
11. Rights depending on where you live
European Union, United Kingdom, Switzerland: the rights described in section 3.8 (GDPR, UK GDPR or Swiss law).
United States: depending on the State where you live (for example California, Colorado, Connecticut, Oregon, Texas or Virginia), you may have the right to know which personal information we collect, use and disclose, to access it, to have it corrected or deleted, to opt out of its “sale” or “sharing”, and not to be discriminated against for exercising these rights.
Categories of information collected in the past 12 months (from public sources and from you): identifiers (name, username, email, website); professional information (occupation, portfolio, clients named, awards); location at city or country level; publicly visible internet activity (public profile statistics); inferences (the talent score).
Disclosure to third parties: we give subscribed recruiters access to these categories of information in exchange for the price of their subscription. Under the laws of some States, this may be considered a “sale” of personal information. We do not sell or share personal information for cross-context behavioral advertising, and we do not knowingly sell the information of people under 16. Removing your profile ends this disclosure.
How to exercise your rights: through the removal page or at [To complete: email address]. We verify your request and handle it free of charge. An authorized agent may act for you.
Data brokers: some US States require companies that collect and disclose data about people with whom they have no direct relationship to register as “data brokers”. [To complete: Folynx's status and registration numbers, after advice from a US lawyer]
12. Complaints
If you believe your rights are not respected, you can contact the CNIL (France) or the data protection authority of your country of residence or work. We invite you to write to us first: we will put things right.
13. Changes to this policy
We may update this policy. The version date is shown at the top of the page. In case of an important change, we inform recruiters by email.
14. Contact us
[To complete: email address] · [To complete: postal address]