1. Scope
This Privacy Policy explains how personal data is processed on the website, the admin panels and the solution modules offered through them (Donation Center, Smart Desk, WhatsApp Hub, Donation Card, Gift Hub, Renovation & Project Management and others) operated by FBS Inc. ("FBS Platform", "we").
2. Data Controller
Under the European Union General Data Protection Regulation ("GDPR") and related legislation, the data controller is:
- Name: FBS Inc.
- Place of incorporation: Delaware, United States of America
- E-mail: privacy@fbson.com
3. Personal Data Collected
The following categories of personal data may be processed on the platform:
- Identity and contact data: full name, e-mail, phone number, username.
- Account and authorisation data: tenant/organisation, roles and permissions, session records, two-factor authentication (2FA) status.
- Financial data: payment transaction history, wallet balance, bank account details (card numbers are not stored by the platform; payment providers process them).
- Identity verification (KYC) documents: images of identity documents requested by certain modules (e.g. Donation Card, withdrawal approval).
- Usage and technical data: IP address, browser information, cookies, log records, device information.
- Communication content: support requests and messages sent over WhatsApp or e-mail (only where the relevant module is active).
4. Purposes of Processing
- Creating accounts, verifying identity and securing access,
- Running the purchased solution modules and billing for them,
- Processing payments and preventing fraud,
- Meeting legal obligations (tax, accounting, data protection),
- Answering customer support and contact requests,
- Measuring service quality and improving the platform.
5. Legal Basis
Personal data is processed under GDPR Article 6 on the grounds of performance of a contract, compliance with a legal obligation, legitimate interest and explicit consent. The same processing activities apply to users accessing from the European Union under GDPR Article 6.
6. Parties Data Is Shared With
To provide the service, personal data is shared to a limited extent with:
- Payment infrastructure providers (e.g. Stripe, virtual POS providers, crypto payment infrastructure),
- Hosting and infrastructure providers (servers, databases, backups),
- E-mail, SMS and notification service providers,
- Public authorities legally entitled to request it.
Data is shared only as far as the processing purpose requires and under the necessary contractual safeguards.
7. International Transfers
FBS Platform is a global service; some subprocessors (e.g. cloud hosting, payment infrastructure) may run servers in a country other than the one the user is in. Where that happens, the transfer mechanisms required by GDPR (standard contractual clauses and the like) apply.
8. Retention Period
Personal data is kept for the retention periods required by applicable law and for as long as the processing purpose requires; at the end of those periods it is deleted, destroyed or anonymised.
9. Cookies
The website uses strictly necessary and functional cookies for session management, remembering preferences (e.g. theme, language) and basic usage analytics. Cookie preferences can be managed from your browser settings.
10. Your Rights
As a data subject you have the following rights:
- To learn whether your personal data is being processed,
- To request information about that processing,
- To learn the purpose of processing and whether the data is used accordingly,
- To know the third parties the data is transferred to, domestically or abroad,
- To request correction of incomplete or inaccurate data,
- To request deletion of your data where the conditions are met,
- To request that corrections and deletions be notified to the third parties the data was transferred to,
- To object to a decision that goes against you as a result of automated analysis,
- To claim compensation if you suffer loss because of unlawful processing.
For European Union users, the rights of access, rectification, erasure, restriction of processing, data portability and objection under GDPR Articles 15-22 can be exercised through the same channel.
11. Making a Request
To exercise your rights, write to privacy@fbson.com. Requests are answered within 30 days at the latest.
12. Changes
This policy may be updated as our services or the applicable legislation change. The current version is always published on this page.