Effective Date: August 17, 2026
Last Updated: August 17, 2026

1. Introduction

Welcome to Folksfirst Labs ("Folksfirst Labs," "we," "our," or "us").

We respect your privacy and are committed to protecting personal information entrusted to us. This Privacy Policy explains how we collect, use, process, disclose, retain, and protect personal information when you:

• Visit our website at https://folksfirstlabs.com/
• Contact us or submit an enquiry
• Register your interest in our products or services
• Communicate with our sales, support, or business teams
• Create or use a Folksfirst Labs account, when account functionality becomes available
• Use products and services offered by Folksfirst Labs, including Datafort, CodeSafe, Agentic OS, and other services we may introduce

This Privacy Policy also explains the choices and rights that may be available to you regarding your personal information.

Some technologies, service providers, and functionality described in this Privacy Policy, including Google Analytics, AWS hosting, Stripe payments, and user account functionality, may be introduced in the future and may not currently be active. Sections relating to such functionality apply only if and when those features or providers are enabled.

Where consent is required by applicable law, we will request consent separately and will not treat your general use of our website as consent where affirmative consent is legally required.

2. Our Privacy Principles

Folksfirst Labs develops products intended to help organizations protect important business information, source code, data, and AI-powered workflows. We believe the same principles of privacy and responsible data handling should apply to information entrusted to us.

Our core privacy commitments are:

• We do not sell your personal information for monetary consideration.
• We do not use customer source code, files, confidential documents, AI prompts, conversations, or other Customer Content to train AI or machine learning models.
• We seek to collect only information reasonably necessary for defined business and service purposes.
• We process information only for legitimate and lawful purposes.
• We use appropriate technical and organizational safeguards designed to protect information.
• We provide mechanisms for individuals and organizations to request access, correction, or deletion of their information where applicable.
• Customers retain their rights in the content and data they submit to our services.
• We aim to be transparent about the third-party providers we use to operate our services.

No method of electronic transmission or storage can guarantee absolute security, and nothing in this Privacy Policy should be interpreted as a guarantee that unauthorized access, loss, or misuse can never occur.

3. Scope of This Privacy Policy

This Privacy Policy applies to personal information processed through:

• The Folksfirst Labs website
• Website contact forms
• Sales enquiries
• Product demonstration requests
• Requests for pricing or additional information
• Business communications
• Customer support interactions
• Account registration and authentication, when available
• Folksfirst Labs products and services
• Subscription and billing interactions, when available
• Other services that reference this Privacy Policy

This Privacy Policy does not govern third-party websites, applications, products, or services that operate independently from Folksfirst Labs, even where our website contains a link to them.

Those third parties may process information under their own privacy policies, terms, and practices. We encourage you to review their policies before providing personal information.

4. Who We Are

For personal information that Folksfirst Labs determines the purposes and means of processing, Folksfirst Labs generally acts as the data controller, Data Fiduciary, business, or equivalent entity under applicable privacy law.

For certain information processed through our products on behalf of an organizational customer, Folksfirst Labs may instead act as a data processor, service provider, contractor, Data Processor, or equivalent entity. In those circumstances, the organizational customer may primarily determine how and why the information is processed.

Our contact information is:

Company: Folksfirst Labs
Website: https://folksfirstlabs.com/
Email: info@folksfirstlabs.com
Phone: +91 8275774298

Office Address:
5A, 4th Floor, City Vista
Kolte-Patil Downtown
Kharadi, Pune, Maharashtra
India

Questions concerning privacy or the processing of personal information may be submitted using the contact information above.

5. Information We Collect

The information we collect depends on how you interact with Folksfirst Labs and which services you use.

5.1 Information You Provide Through Our Contact Form

When you submit the contact form on our website, we may collect:

• Your Name
• Email Address
• Phone Number
• Subject
• Message

We use this information primarily to understand and respond to your enquiry, provide requested information, communicate with you, and maintain appropriate business records.

Please avoid submitting highly sensitive or confidential information through the public contact form unless we specifically request it or provide an appropriate method for doing so.

5.2 Information You Provide Through Communications

When you communicate with Folksfirst Labs by email, telephone, meetings, demonstrations, or other channels, we may collect information such as:

• Name
• Email address
• Phone number
• Company or organization information
• Job or business role, where provided
• Contents of communications
• Product requirements
• Support enquiries
• Business requirements
• Feedback
• Meeting-related information
• Any other information you voluntarily provide

5.3 Information Collected Automatically

When you access our website or services, certain technical information may be automatically generated or collected by our systems or service providers.

Depending on the technologies enabled, this information may include:

• IP address
• Device type
• Browser type
• Operating system
• Language settings
• Approximate location based on IP address
• Date and time of access
• Website pages visited
• Referring website or source
• Session and interaction information
• Website performance information
• Diagnostic information
• Error information
• Security-related information

We may use this information to operate and secure our website, understand website performance, troubleshoot issues, prevent abuse, and improve our services.

5.4 Account Information

Folksfirst Labs does not currently require a website account.

If user accounts are introduced, users may be able to register and authenticate using an associated email address and password.

Information associated with an account may include:

• Name
• Email address
• Organization
• Account identifier
• Authentication information
• Account preferences
• Login activity
• Product permissions
• Security activity
• Account status

Passwords should be handled using appropriate security measures and are not intended to be stored in readable plain-text form.

5.5 Product and Usage Information

When Folksfirst Labs products and services are used, we may process operational information needed to provide, secure, maintain, troubleshoot, and improve the service.

Depending on the product, this may include:

• Account activity
• Feature usage
• Workspace activity
• Configuration information
• Device information
• Login and authentication events
• Administrative actions
• Security events
• Audit information
• Error logs
• Diagnostic information
• Service performance information

The exact information processed may differ between products and customer configurations.

5.6 Customer Content

Customers may choose to submit, store, process, access, or otherwise interact with information through Folksfirst Labs products.

Depending on the product and configuration, such "Customer Content" may include:

• Source code
• Customer data
• Confidential documents
• Business files
• Uploaded files
• Databases or database-related information
• AI prompts
• AI conversations
• AI-generated content
• Workspace information
• Configuration data
• Security policies
• Other information submitted by or on behalf of a customer

Customer Content remains subject to the applicable customer agreement and, where relevant, a data processing agreement.

Folksfirst Labs processes Customer Content only as reasonably necessary to provide, secure, support, or maintain the services, comply with customer instructions, meet legal obligations, or otherwise as permitted by the applicable agreement.

5.7 Payment and Billing Information

Folksfirst Labs may introduce paid subscriptions or other paid services in the future.

When payments become available, we intend to use Stripe or another disclosed payment provider to process payments.

Depending on the payment arrangement, information processed may include:

• Billing name
• Billing address
• Company information
• Tax information
• Invoice information
• Transaction amount
• Transaction status
• Subscription information
• Payment method-related information

Folksfirst Labs does not intend to directly store complete payment card numbers, CVV values, or similar sensitive card credentials.

Payment providers may process payment information independently in accordance with their own privacy and security practices.

5.8 Information We Do Not Intentionally Request

Unless specifically required for a service or lawful business purpose, we do not intentionally request information such as:

• Government-issued identification numbers
• Biometric information
• Health or medical records
• Financial account credentials
• Complete payment card credentials
• Genetic information
• Information regarding racial or ethnic origin
• Religious beliefs
• Political opinions
• Sexual orientation
• Other highly sensitive personal information

If such information is necessary for a particular service, additional notices or safeguards may apply.

6. How We Use Personal Information

We may use personal information for the following purposes.

6.1 Providing Our Website and Services

We may process information to:

• Operate our website
• Provide requested products and services
• Maintain user accounts
• Authenticate users
• Provide requested product functionality
• Process customer instructions
• Manage subscriptions
• Provide technical support

6.2 Responding to Enquiries

We may use contact information to:

• Respond to website enquiries
• Schedule product demonstrations
• Provide requested information
• Discuss potential services
• Respond to support requests
• Communicate regarding an existing or potential business relationship

6.3 Operating and Improving Our Products

We may process appropriate operational information to:

• Understand product performance
• Identify errors or technical issues
• Improve usability
• Develop and improve functionality
• Maintain service reliability
• Diagnose technical problems

Any product improvement activities involving Customer Content remain subject to our commitments regarding confidentiality, privacy, and AI model training described in this Policy.

6.4 Security and Fraud Prevention

We may process information where necessary to:

• Protect accounts
• Detect suspicious activity
• Prevent unauthorized access
• Investigate security events
• Detect fraud or abuse
• Protect our infrastructure
• Enforce applicable terms
• Maintain audit and security records
• Protect our customers, users, employees, and business

6.5 Billing and Administration

When paid services become available, we may use information to:

• Process subscriptions
• Generate invoices
• Maintain transaction records
• Manage customer accounts
• Resolve billing issues
• Meet accounting and tax obligations

6.6 Legal and Compliance Purposes

We may process personal information where reasonably necessary to:

• Comply with applicable law
• Respond to lawful legal process
• Exercise or defend legal claims
• Maintain required business records
• Meet regulatory requirements
• Investigate potential violations
• Protect legal rights and interests

6.7 Communications and Registered Interest

We do not currently operate a general newsletter.

If you register your interest in Folksfirst Labs, request information, request a demonstration, or otherwise indicate that you would like to hear from us, we may send communications relating to:

• Products you expressed interest in
• Product availability
• Product updates
• Demonstrations
• Relevant company information
• Sales or business discussions

We will provide appropriate ways to stop receiving marketing communications where required.

7. Legal Bases for Processing

Different privacy laws use different concepts for establishing when personal information may lawfully be processed.

Where the GDPR, UK GDPR, or another law requiring a specific lawful basis applies, our processing may rely on one or more of the following:

Consent

We may process information where you have provided valid consent, including for certain non-essential cookies or marketing communications.

Where processing is based on consent, you may withdraw that consent subject to applicable law.

Performance of a Contract

We may process information where necessary to:

• Provide a product or service you requested
• Administer an account
• Provide customer support
• Process a subscription
• Fulfil our contractual obligations

Steps Before Entering Into a Contract

We may process information when you ask us to provide:

• A product demonstration
• A proposal
• Pricing information
• Product information
• Other information before entering into a commercial relationship

Legitimate Interests

Where permitted, we may process information for legitimate business interests such as:

• Operating and securing our website
• Preventing fraud and abuse
• Improving our services
• Communicating with business contacts
• Protecting our rights
• Maintaining appropriate business records

We seek to balance such interests against the rights and interests of affected individuals.

Legal Obligations

We may process information where necessary to comply with applicable laws, regulations, court orders, accounting requirements, tax obligations, or other legal requirements.

Where India's Digital Personal Data Protection framework applies, personal information will be processed based on consent or another lawful basis or legitimate use permitted under applicable law.

8. Cookies and Similar Technologies

Cookies are small files or technologies that websites may use to remember information, provide functionality, measure usage, or support other website operations.

Our website may use several categories of cookies.

8.1 Essential Cookies

Essential cookies may be used for functionality such as:

• Website security
• Session management
• Preference management
• Technical operation
• Fraud prevention

Where permitted by applicable law, these cookies may operate without optional consent because they are necessary for the requested service or website functionality.

8.2 Analytics Cookies

We intend to use analytics technologies, including Google Analytics, in the future.

When analytics is enabled, it may be used to help us understand matters such as:

• Website traffic
• Page usage
• General visitor interaction
• Website performance
• How visitors arrive at our website

Where consent is required for analytics cookies, we intend to provide appropriate consent controls before activating those cookies for the applicable visitor.

8.3 Marketing Cookies

We may introduce marketing or advertising-related cookies in the future.

Where such technologies require consent or an opt-out mechanism under applicable law, we will provide appropriate controls.

Marketing technologies will not be introduced in a manner that intentionally overrides applicable consent requirements.

8.4 Managing Cookies

Depending on your location and the functionality available on our website, you may be able to manage non-essential cookies through a cookie banner or preference centre.

You may also be able to manage cookies through your browser settings.

Disabling certain cookies may affect parts of the website, particularly cookies necessary for functionality.

9. Google Analytics

Folksfirst Labs intends to use Google Analytics in the future to better understand website usage and performance.

Google Analytics will apply only when it has been enabled.

Where required by applicable law, we will obtain appropriate consent before activating non-essential Google Analytics cookies or similar technologies.

Information processed through Google Analytics will be subject to the applicable terms and privacy practices of Google as well as any privacy controls we configure.

We may update this Privacy Policy or our cookie disclosures when analytics functionality is introduced or materially changed.

10. Marketing Communications

We do not operate a general newsletter at this time.

We may, however, contact individuals who:

• Register interest in our products
• Request a demonstration
• Request additional information
• Submit a business enquiry
• Otherwise ask us to contact them

Marketing communications may include information reasonably related to the products or services in which you expressed interest.

Where applicable law requires consent before such messages are sent, we will seek the required consent.

You may opt out of marketing communications by:

• Using an unsubscribe option included in the communication, where available; or
• Contacting us at info@folksfirstlabs.com

Opting out of marketing messages will not necessarily prevent us from sending transactional, account, security, legal, or service-related communications.

11. Customer Data Ownership

As between Folksfirst Labs and its customers, customers retain their ownership and other applicable rights in Customer Content submitted to or processed through our services.

Using Folksfirst Labs does not transfer ownership of your:

• Source code
• Confidential documents
• Business files
• Customer databases
• AI prompts
• Business data
• Intellectual property
• Other Customer Content

to Folksfirst Labs.

We receive only the rights reasonably necessary to process Customer Content for purposes such as providing, securing, maintaining, supporting, or improving the contracted service in accordance with applicable agreements and this Privacy Policy.

Any additional rights or obligations concerning Customer Content may be set out in the applicable Terms of Service, customer agreement, or Data Processing Agreement.

12. Our Commitment Regarding AI and Model Training

Folksfirst Labs may provide products that incorporate artificial intelligence or enable customers to work with AI systems.

We recognize that organizations may submit highly confidential information while using AI-enabled services.

Accordingly:

Folksfirst Labs does not use customer source code, files, confidential documents, Customer Content, AI prompts, conversations, personal information, or other customer-provided data to train our AI or machine learning models.

We also do not intentionally provide Customer Content to third-party AI providers for the purpose of training their general-purpose models.

Where third-party AI processing is required to provide requested functionality, we will seek to use appropriate contractual, technical, and organizational safeguards consistent with our customer agreements and applicable law.

Customer data may be processed by an AI system only where necessary to provide the functionality requested by the customer or user, subject to the applicable service configuration.

This commitment does not prevent us from using:

• Publicly available information that we are legally permitted to use
• Our own internal business information
• Synthetic or appropriately anonymized information that cannot reasonably identify a customer or individual
• Feedback voluntarily provided specifically for product improvement

provided such use is consistent with applicable law and our contractual commitments.

13. How We Share Personal Information

We do not disclose personal information simply for unrelated commercial use.

We may disclose information in the following circumstances.

13.1 Service Providers

We may engage third parties to assist with:

• Cloud infrastructure
• Website hosting
• Payment processing
• Analytics
• Email delivery
• Customer support
• Security
• Authentication
• Infrastructure monitoring
• Professional services

These providers may access information only as reasonably necessary to perform their designated functions, subject to applicable agreements and law.

13.2 Your Organization

If you use Folksfirst Labs through an employer, company, school, institution, or other organization, authorized administrators of that organization may be able to access information associated with the organization's account.

Depending on product configuration, administrators may be able to:

• Create or disable accounts
• Configure permissions
• View account activity
• Review security or audit information
• Manage organizational data
• Control product settings

Your organization's own privacy policies and internal policies may also apply to its handling of information.

13.3 Legal Requirements

We may disclose information where we reasonably believe disclosure is required to:

• Comply with applicable law
• Respond to valid legal process
• Respond to lawful requests from governmental or regulatory authorities
• Enforce applicable agreements
• Protect legal rights
• Investigate fraud, abuse, or security incidents
• Protect the safety of users or others

Where legally permitted and appropriate, we may seek to notify affected customers before disclosing Customer Content pursuant to a governmental request.

13.4 Corporate Transactions

Information may be disclosed or transferred in connection with a proposed or completed:

• Merger
• Acquisition
• Financing
• Reorganization
• Sale of assets
• Investment
• Change of control
• Insolvency or similar corporate transaction

We will seek to handle personal information appropriately during such transactions and provide notices where required by applicable law.

13.5 With Your Direction or Consent

We may disclose information when you direct us to do so or provide appropriate consent.

14. No Sale of Personal Information

Folksfirst Labs does not sell personal information for monetary consideration.

We also do not operate as a data broker.

Some privacy laws define terms such as "sale" or "sharing" more broadly than an exchange of information for money, particularly in connection with certain digital advertising practices.

If we introduce advertising or marketing technologies that legally constitute the sale or sharing of personal information, we will provide any notices, consent choices, or opt-out mechanisms required by applicable law before or when such practices apply.

15. Third-Party Service Providers

As our services develop, we may use third-party technology providers.

Planned or anticipated providers include:

Amazon Web Services (AWS)

We intend to use AWS infrastructure for hosting or cloud-related services in the future.

When enabled, information processed through our services may be stored or processed using AWS infrastructure.

Stripe

We intend to use Stripe for payment processing if paid subscriptions or purchases are introduced.

Stripe may process payment and billing information in accordance with its own privacy practices.

Google Analytics

We intend to use Google Analytics for website analytics.

When enabled, Google Analytics may process website usage information to help us understand website traffic and performance.

The specific third parties we use may change over time.

Where required, we may update our disclosures or maintain additional information concerning service providers and subprocessors.

16. International Data Transfers

Folksfirst Labs is based in India and may serve customers or use technology providers located in different countries.

As a result, personal information may be processed in countries other than the country in which it was originally collected.

Privacy and data protection laws may differ between jurisdictions.

Where applicable law restricts international transfers, we will seek to use an appropriate legal mechanism or safeguard for the transfer.

Depending on the jurisdiction, these safeguards may include:

• Contractual protections
• Approved standard contractual clauses
• Adequacy mechanisms
• Data processing agreements
• Other legally recognized transfer mechanisms

We may also implement technical and organizational measures appropriate to the nature of the information and processing.

17. Data Security

Protecting information is important to Folksfirst Labs.

We implement and maintain technical, administrative, and organizational safeguards designed to protect personal information and Customer Content against risks such as:

• Unauthorized access
• Unauthorized disclosure
• Accidental loss
• Misuse
• Alteration
• Destruction
• Unauthorized processing

Depending on the applicable system and service, safeguards may include measures relating to:

• Authentication
• Access control
• Account permissions
• Infrastructure security
• Security monitoring
• Logging
• Secure development practices
• Incident response
• Employee and contractor access restrictions

Security controls may vary depending on the type of service, customer configuration, and nature of the information being processed.

Despite our efforts, no internet-connected service, computer system, cloud infrastructure, storage system, or method of transmission can be guaranteed to be completely secure.

You are also responsible for taking reasonable measures to protect your accounts, including safeguarding passwords and authentication credentials.

If you believe your account or information has been compromised, please contact us promptly at info@folksfirstlabs.com.

18. Personal Data Breaches and Security Incidents

If we identify a security incident involving personal information, we will assess the nature and impact of the incident and take appropriate steps to contain, investigate, remediate, and document it.

Where required by applicable law or contract, we will provide appropriate notifications to:

• Affected customers
• Affected individuals
• Regulatory authorities
• Other legally required recipients

The nature, timing, and content of such notifications will depend on applicable legal and contractual requirements and the circumstances of the incident.

19. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or as required or permitted by applicable law.

Retention periods may depend on factors including:

• The nature of the information
• The purpose for which it was collected
• Whether an account remains active
• The duration of a customer relationship
• Contractual obligations
• Security requirements
• Legal requirements
• Accounting or tax obligations
• Potential or existing disputes
• Applicable limitation periods

For example:

Contact Enquiries

Information submitted through our contact form may be retained while we respond to the enquiry and for a reasonable period afterward for business follow-up and recordkeeping.

Customer Accounts

Account-related information may generally be retained while the account or customer relationship remains active and for an appropriate period afterward where required for legitimate business, security, contractual, or legal purposes.

Customer Content

Customer Content will be retained according to the applicable service functionality, customer configuration, agreement, and deletion requirements.

Security Logs

Security and audit information may be retained for periods appropriate to investigate security events, maintain system integrity, meet contractual obligations, or comply with law.

Payment and Transaction Records

When paid services become available, billing and transaction information may be retained as required for accounting, taxation, dispute resolution, fraud prevention, and legal compliance.

Backups

Deleted information may temporarily remain in encrypted or protected backup systems until those backups are overwritten or deleted in accordance with applicable backup retention cycles.

When information is no longer reasonably required, we may delete or anonymize it, subject to applicable legal obligations.

20. Your Privacy Rights

Depending on where you live and which privacy laws apply, you may have rights regarding your personal information.

These rights may include the ability to:

• Request confirmation of whether we process your personal information
• Request access to personal information
• Request correction of inaccurate information
• Request completion or updating of information
• Request deletion or erasure
• Withdraw consent where processing is based on consent
• Object to certain processing
• Request restriction of certain processing
• Request portability of information where applicable
• Opt out of certain marketing communications
• Obtain information about certain disclosures
• Lodge a complaint with an applicable regulatory authority
• Exercise other rights provided under applicable law

Not every right applies in every jurisdiction or circumstance.

Some rights may also be subject to legal exceptions.

21. How to Exercise Your Privacy Rights

You may submit a privacy request using:

Email: info@folksfirstlabs.com

You may also contact us using the company contact information provided at the end of this Privacy Policy.

Please clearly describe the request you are making.

To protect users and customer information, we may need to verify your identity before completing certain requests.

Verification may involve confirming information reasonably associated with your account or previous interactions with us.

We will not intentionally request more information than reasonably necessary for verification.

If a request relates to information that we process solely on behalf of an organizational customer, we may direct the request to that customer or assist the customer in responding as required by our agreement and applicable law.

We will respond to valid requests within the period required by applicable law.

22. Data Deletion Requests

Individuals and organizations may request deletion of information associated with them, subject to applicable law and contractual obligations.

Deletion requests may be submitted to:

info@folksfirstlabs.com

After receiving a request, we may take reasonable steps to:

1. Verify the identity or authority of the requester.
2. Determine which information is covered by the request.
3. Determine whether any legal or contractual retention obligation applies.
4. Delete, anonymize, or otherwise appropriately handle eligible information.
5. Communicate the outcome of the request where appropriate.

We may be required or permitted to retain certain information where necessary for purposes such as:

• Compliance with law
• Tax or accounting requirements
• Fraud prevention
• Security
• Dispute resolution
• Enforcement of agreements
• Establishment, exercise, or defence of legal claims

Where information must be retained, we will seek to limit further processing to the applicable purpose.

Deletion from active systems may not always result in immediate deletion from backup copies. Residual information may remain until the applicable backup is overwritten or expires through the normal backup cycle, subject to appropriate protections.

23. Consent and Withdrawal of Consent

Where we rely on consent to process personal information, you may withdraw that consent at any time, subject to applicable law.

Withdrawal of consent does not normally affect the lawfulness of processing performed before consent was withdrawn.

Depending on the service, withdrawing consent may mean that certain functionality can no longer be provided if the information is necessary for that functionality.

You may contact us regarding consent at:

info@folksfirstlabs.com

Where consent management functionality is available directly through a website or product, you may also use those controls.

24. Rights Under Indian Privacy Law

Where India's applicable digital personal data protection laws apply to our processing, individuals may have rights provided under those laws.

Depending on the applicable provisions and circumstances, these may include rights relating to:

• Access to information about personal data being processed
• Correction of inaccurate personal data
• Completion of incomplete personal data
• Updating personal data
• Erasure of eligible personal data
• Withdrawal of consent
• Grievance redressal
• Nomination of another individual to exercise certain rights in circumstances permitted by law

Requests may be submitted to info@folksfirstlabs.com.

Applicable legal exceptions and requirements may apply.

25. Rights in the European Economic Area and United Kingdom

If you are located in the European Economic Area, United Kingdom, or another jurisdiction with comparable data protection rights, and the relevant law applies to our processing, you may have rights including:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object to certain processing
• Right to withdraw consent
• Right to lodge a complaint with an appropriate supervisory authority

If we rely on legitimate interests, you may have the right to object to certain processing based on your particular circumstances.

Where we rely on consent, withdrawal of consent will not affect processing lawfully carried out before withdrawal.

If you believe our handling of your information violates applicable data protection law, you may also have the right to contact your local data protection authority.

26. California Privacy Rights

If you are a California resident and the California Consumer Privacy Act or another applicable California privacy law applies to Folksfirst Labs and the relevant processing, you may have rights including:

• The right to know what categories of personal information are collected
• The right to request access to eligible personal information
• The right to request deletion
• The right to request correction of inaccurate personal information
• The right to know certain categories of third parties to whom information is disclosed
• The right to opt out of the sale or sharing of personal information where applicable
• The right to limit certain uses of sensitive personal information where applicable
• The right to exercise applicable privacy rights without unlawful discriminatory treatment

Folksfirst Labs does not currently sell personal information for monetary consideration.

If we introduce practices that constitute a "sale" or "sharing" for purposes of applicable California law, we will provide the notices and choices required by applicable law.

California privacy requests may be submitted to:

info@folksfirstlabs.com

We may verify requests as permitted or required by applicable law.

27. Business Customers and Organizational Accounts

Many Folksfirst Labs products are intended for use by organizations.

Where an organization provides access to our services, that organization may determine:

• Which employees or users receive accounts
• What information is submitted to the service
• How the service is configured
• Which administrators have access
• How long information should be retained
• Which product policies apply

Where we process personal information solely on behalf of an organizational customer, that organization may act as the controller or equivalent entity and Folksfirst Labs may act as its processor or service provider.

Individuals with questions about data controlled by their employer or organization may need to contact that organization directly.

We will assist customers with applicable data protection obligations where required by law and the applicable agreement.

28. Children and Minimum Age

Our website and services are intended for users who are 16 years of age or older and are not directed at young children.

We do not knowingly seek to collect personal information from anyone below the applicable minimum age.

Privacy laws in some countries may define a "child" differently or may require parental or guardian authorization for individuals above 16 but below another statutory age.

Accordingly, if applicable law requires parental or guardian authorization for an individual aged 16 or 17, that individual may use the relevant service only where the necessary authorization has been obtained or where another lawful basis applies.

Where applicable law imposes a higher minimum age or additional protections for children, those requirements take precedence.

If you believe that a child has provided personal information to us in circumstances that violate applicable law, please contact us at:

info@folksfirstlabs.com

We will review the matter and take appropriate action.

29. Third-Party Links

Our website may contain links to third-party websites, social platforms, resources, or services.

Folksfirst Labs does not control the privacy practices of third-party websites.

When you follow a third-party link, information collected by that website is governed by its own privacy policy.

We encourage you to review the privacy notices of third parties before submitting personal information.

The presence of a third-party link on our website does not necessarily imply responsibility for or endorsement of that party's privacy practices.

30. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• Our products
• Our website
• Our business operations
• Technology
• Service providers
• Privacy practices
• Legal or regulatory requirements

When we update this Policy, we will revise the "Last Updated" date at the beginning of the document.

Where required by applicable law, or where we make material changes to how personal information is processed, we may provide additional notice through appropriate means such as:

• A website notice
• Email
• Product notification
• Account notification
• Another appropriate communication channel

We encourage users to review this Privacy Policy periodically.

Continued use of a service after an update does not replace consent where applicable law requires new or additional consent.

31. Relationship With Other Agreements

This Privacy Policy should be read together with any applicable:

• Terms of Service
• Customer Agreement
• Subscription Agreement
• Data Processing Agreement
• Product-specific terms
• Security documentation
• Other contractual terms between Folksfirst Labs and a customer

If Folksfirst Labs processes personal information solely on behalf of a customer and there is a conflict between this Privacy Policy and a valid Data Processing Agreement concerning that processing, the applicable contractual terms may govern to the extent permitted by law.

32. Your Responsibilities

When using our services or providing information to Folksfirst Labs, you are responsible for ensuring, where applicable, that:

• Information you provide is accurate
• You have appropriate authority to provide information relating to other individuals
• You comply with applicable privacy laws when uploading or processing personal data
• You protect your account credentials
• You do not intentionally provide information unlawfully
• You follow your organization's security and privacy policies

Organizational customers are responsible for determining whether they have the appropriate legal basis, authority, notices, or consents needed to submit personal information to our services.

33. Privacy by Design

Because Folksfirst Labs develops security-focused technology, privacy and data protection are important considerations in how we design and operate our services.

Where appropriate to the product and processing, we seek to consider principles such as:

• Data minimization
• Purpose limitation
• Access restriction
• Secure processing
• Appropriate retention
• Customer control
• Transparency
• Responsible use of AI
• Separation of customer information from unrelated uses

Specific technical controls may vary by product, deployment model, customer requirements, and service configuration.

Nothing in this section should be interpreted as a representation that any system is immune from every security risk.

34. Contact Us

If you have questions, concerns, complaints, or requests regarding this Privacy Policy or the processing of your personal information, please contact:

Folksfirst Labs

Email:
info@folksfirstlabs.com

Phone:
+91 8275774298

Website:
https://folksfirstlabs.com/

Office Address:
5A, 4th Floor, City Vista
Kolte-Patil Downtown
Kharadi, Pune, Maharashtra
India

For privacy rights, data deletion requests, consent withdrawal, or privacy-related grievances, please use info@folksfirstlabs.com and provide sufficient information for us to understand and appropriately respond to your request.

We may verify your identity or authority before fulfilling certain privacy-related requests where appropriate and permitted by applicable law.

Effective Date: August 17, 2026
Last Updated: August 17, 2026