Privacy Policy

1. Who we are

hessianheadless.com and the Hessian Headless CMS service are owned and operated by Folsom Holdings, LLC, organized under the State of Maine. Folsom Holdings, LLC is the controller responsible for personal information processed through the Service.

2. Information we collect

• Account information — such as your name, email address, and organization, provided when you register or contact us.
• Billing information — when you subscribe to a paid plan. Payment card details are handled by our payment processor; we do not store full card numbers.
• Content and usage data — the documents, metadata, and provenance records you create, and logs about how the Service is used.
• Technical data — such as IP address, device and browser information, and cookies needed to operate the Service.

3. How we use information

• to provide, maintain, and secure the Service;
• to process subscriptions, billing, and payments;
• to communicate with you about your account, support, and service changes;
• to comply with legal obligations and enforce our agreements.

4. Payment processing

Paid subscriptions are billed by Folsom Holdings, LLC through a third-party payment processor. The processor handles your payment details under its own privacy and security terms. We receive limited information needed to manage your subscription, such as the last four digits of a card and its status.

5. How we share information

We do not sell your personal information. We share it only:

• with service providers (such as hosting and payment processors) that process data on our behalf under appropriate confidentiality obligations;
• when required by law, legal process, or to protect rights and safety;
• in connection with a merger, acquisition, or sale of assets, subject to this policy.

6. Cookies

We use cookies and similar technologies that are necessary to operate the Service, keep you signed in, and understand usage. You can control cookies through your browser, but some features may not work without them.

7. Data retention

We retain personal information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account, subject to obligations we are required to keep.

8. Security

We use reasonable technical and organizational measures to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, or to object to or restrict certain processing. To exercise these rights, contact us at privacy@hessianheadless.com.

10. Children

The Service is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their personal information.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy with a new effective date and, where appropriate, provide additional notice.

12. Contact

For privacy questions or requests, email privacy@hessianheadless.com. See our contact page for other ways to reach Folsom Holdings, LLC.