Privacy Policy
Introduction
Factory Holdings LLC ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use thefactoryhq.com (the "Site").
Please read this Privacy Policy carefully. By using the Site, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the Site.
Information We Collect
We collect several types of information from and about users of our Site:
Personal Information
We may collect personally identifiable information that you voluntarily provide to us when you:
- Register for an account
- Complete your investor profile
- View or interact with investment deals
- Contact us for support
This information may include:
- Name, email address, and contact information
- Accredited investor verification details
- Professional background and investment experience
- Company or entity information
Factory Club Membership Information
If you are invited to or join Factory Club, we may collect and retain:
- Your invitee, checkout, and verified account email addresses
- Your invitation and membership status and relevant dates
- Your selected membership plan and billing interval
- Stripe customer, subscription, and price identifiers and payment status
- Administrative records needed to manage access, cancellations, and support requests
Automatically Collected Information
When you access the Site, we automatically collect certain information about your device and usage:
- IP address and device identifiers
- Browser type and version
- Operating system
- Pages visited and time spent on pages
- Referral source and exit pages
- Date and time of access
How We Use Your Information
We use the information we collect for various purposes:
- To provide and maintain the Site: Including presenting investment deals and managing your account
- To verify investor status: Confirming your eligibility as an accredited investor to access deal materials
- To improve the Site: Understanding how users interact with the Site helps us enhance functionality and user experience
- To communicate with you: Sending updates about deals, account notifications, and other Site-related information
- To ensure security: Detecting, preventing, and addressing technical issues, fraud, and security breaches
- To comply with legal obligations: Meeting regulatory requirements, including securities regulations, and responding to legal processes
Data Sharing and Third Parties
We do not sell your personal information. We may share your information in the following circumstances:
SMS consent information will not be shared with, sold, or disclosed to third parties for marketing or promotional purposes.
Service Providers
We may share your information with third-party service providers who perform services on our behalf:
Infrastructure & Database
- Supabase: Database, authentication, and storage services
Authentication Providers
- Google and Microsoft: If you choose one of these sign-in methods, the provider processes the authentication request and may provide identity data you authorize, such as your name, email address, account identifier, and basic profile information.
Hosting
- Vercel / Render: Application hosting and deployment
Transactional Email
- Resend: Transactional email delivery. Resend receives recipient email addresses, message content, and delivery metadata needed to send and troubleshoot Site messages.
Operational Logging
- Better Stack: Receives operational and error logs used to monitor, secure, and troubleshoot the Site. We configure logs to minimize personal data and do not intentionally include passwords, authentication tokens, complete payment card details, or full request payloads.
Analytics & Site Measurement
- Google Analytics: Google Analytics is enabled on our public marketing pages to measure visits, sessions, referral sources, page interactions, approximate location, and browser and device information.
- Google Tag Manager: When configured, Google Tag Manager loads and manages analytics or measurement tags. The data collected depends on the tags configured to run.
- Microsoft Clarity: When configured, Microsoft Clarity helps us understand use of public marketing pages through interaction analytics, heatmaps, and session recordings. Clarity may process page content, device and browser details, and events such as clicks, scrolling, and navigation.
Payments & Billing
Stripe processes payment card details directly and provides payment, subscription, invoice, and billing-management services for Factory Club. We do not store complete payment card numbers or card security codes on our systems.
We limit information shared with providers to what is reasonably necessary for the relevant service. Providers may process information under their own terms and privacy policies and, where applicable, agreements with us. Their roles and permitted uses vary by service.
Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities, including to meet securities regulatory requirements.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal information may be transferred. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.
Data Security
The security of your data is important to us. We implement appropriate technical and organizational measures to protect your personal information against unauthorized or unlawful processing, accidental loss, destruction, or damage.
Security measures include:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication mechanisms
- Secure backup procedures
However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
Bot Protection
We use Cloudflare Turnstile on public forms to help distinguish human visitors from automated traffic and protect our Site from spam, abuse, and other malicious activity. Turnstile may process limited technical signals, such as device, browser, interaction, and network information, for this security purpose.
When Turnstile is configured in invisible mode, the verification may run in the background without displaying a separate challenge widget. For more information about Cloudflare's processing of Turnstile data, please review the Cloudflare Turnstile Privacy Addendum.
Data Retention
We will retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
When we no longer need your personal information, we will securely delete or anonymize it. You may request deletion of your account and associated data at any time by contacting us, subject to legal, regulatory, security, fraud-prevention, or operational obligations. Backups may continue to contain deleted information until they expire under our backup retention practices.
Your Privacy Rights
Depending on your location within the United States, you may have certain rights regarding your personal information.
CCPA Rights (California Users)
If you are a California resident, you have the right to:
- Know what personal information we collect, use, disclose, and share
- Access a copy of personal information we maintain about you
- Correct inaccurate personal information
- Request deletion of your personal information
- Opt out of the sale or sharing of your personal information (we do not sell personal information)
- Limit certain uses of sensitive personal information where required by applicable law
- Non-discrimination for exercising your privacy rights
You may also designate an authorized agent to make a request on your behalf where permitted by law.
Privacy Requests
You can contact us to request access, correction, deletion, or restriction of your personal information. You may submit a deletion request or email legal@thefactoryhq.com with enough detail for us to understand the request and locate the relevant account or submission.
Some requests may require verification before we can act on them. We may also decline or narrow a request when we need to retain information for legal, regulatory, security, fraud-prevention, or operational obligations, including securities compliance, dispute prevention, audit logs, and service integrity.
Children's Privacy
Our Site is not intended for individuals under the age of 18. We do not knowingly collect personally identifiable information from children under 18.
If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from children without verification of parental consent, we take steps to remove that information from our servers.
Changes to This Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this Privacy Policy.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
Contact Information
If you have any questions about this Privacy Policy, your privacy rights, or how we handle your personal information, please contact us:
Factory Holdings LLC