Privacy Policy
Last updated: March 19, 2026
1. What we collect
Customer data: When you sign up, we collect your email address and the URL you provide for FAQ scanning. We store your selected plan, context slug, and payment reference.
Widget data: When visitors use the FAQlue widget on your site, we collect anonymous interaction data: which questions are clicked, search queries entered, and question suggestions submitted. We do not collect personal information from your visitors.
Crawl data: When we scan your website to extract FAQ content, we fetch the page HTML, extract questions and answers, and store them in your account. We do not store the full HTML.
2. How we use your data
We use your data to provide the FAQlue service: displaying your FAQ widget, tracking click-based ordering, processing question suggestions, and sending you notifications about your account.
Anonymous widget interaction data (clicks, searches) is used to improve question ordering on your FAQ. This data is aggregated and not tied to individual visitors.
We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except the service providers listed below.
3. Third-party services
| Service | Purpose | Data shared |
|---|---|---|
| Supabase | Database & auth | Account data, FAQ content, interaction events |
| Stripe | Payments | Email, plan selection (we never see your card details) |
| Vercel | Hosting | Request logs, IP addresses |
4. Data storage & security
Your data is stored in Supabase (PostgreSQL) with row-level security enabled. All data is encrypted in transit (TLS) and at rest.
The FAQlue widget runs in a Shadow DOM on your visitors' sites and communicates with our API over HTTPS. We use service role keys server-side only.
We do not store passwords. Authentication is handled via magic links sent to your email.
5. Data retention
FAQ content: Retained while your subscription is active. Deleted within 30 days of account cancellation.
Interaction data: Click and search events are retained for 90 days, then automatically purged.
Billing data: Managed by Stripe according to their retention policy.
6. Your rights
You can request access to, correction of, deletion of, or export of your data at any time. We will respond within 30 days.
Under GDPR, you also have the right to restrict processing and to data portability. Contact us at the email below.
7. Cookies
The FAQlue website uses essential cookies only (authentication). We do not use advertising or tracking cookies.
The FAQlue widget embedded on your site does not set any cookies on your visitors' browsers.
8. Changes to this policy
If we make material changes, we will notify you by email. The "last updated" date at the top reflects the latest revision.
9. Contact
Questions about this policy? Email us at hi@faqlue.com
FAQlue is a product of Handoff, based in the Netherlands.