Legal

Privacy Policy

Last updated: March 2026

We built Fullstory to help people share who they really are. That means handling your personal information with the same honesty. This policy explains what we collect, why we collect it, and what you can do about it.

01

Who we are

Fullstory is operated by JULY17 SIA, a company registered in Latvia, European Union. For the purposes of the General Data Protection Regulation (GDPR), JULY17 SIA is the data controller responsible for your personal data.

JULY17 SIA, registered in Latvia, European Union. Privacy contact:[email protected]

02

What we collect

We collect only what we need to provide and improve the service.

Information you give us directly:

  • Your email address - used for authentication via magic link
  • Your full name - displayed on your public profile
  • Your username - becomes your public profile URL (fullstory.me/username)
  • Profile content - text blocks, section titles, and images you add to your story

Information collected automatically:

  • Usage data - pages visited, features used, time spent (via Google Analytics)
  • Device and browser information - browser type, operating system, screen size
  • IP address - used for security and analytics, not stored long-term
  • Cookies and similar technologies - see Section 5 for details

03

How we use your data

We process your data on the following legal grounds under GDPR:

  • Contract performance (Art. 6(1)(b)): creating your account, sending authentication links, displaying your public profile, and saving your content.
  • Legitimate interests (Art. 6(1)(f)): analysing usage patterns to improve the product, preventing fraud, and maintaining security. We balance these interests against your rights before relying on this basis.
  • Legal obligations (Art. 6(1)(c)): complying with applicable law, including Latvian and EU data protection regulations.
  • Consent (Art. 6(1)(a)): where we ask for your permission, such as for non-essential cookies or marketing communications. You can withdraw consent at any time.

We do not sell your personal data. We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

04

Third-party services

We use a small number of trusted third-party services to operate Fullstory. Each acts as a data processor on our behalf.

Google Analytics - We use Google Analytics to understand how people use the site (pages visited, session duration, general location by country). Google may process your data on servers outside the EU; this is governed by Google's Standard Contractual Clauses and their participation in the EU-US Data Privacy Framework. You can opt out using theGoogle Analytics opt-out browser add-on.

Postmark - We use Postmark (by ActiveCampaign) to deliver transactional emails, including authentication links. Postmark processes your email address to deliver these messages. Email delivery logs are retained for up to 45 days.

We do not share your data with any other third parties, advertisers, or data brokers.

05

Cookies

We use cookies and similar technologies for the following purposes:

  • Essential cookies: required for the service to function (e.g. keeping you logged in). These cannot be disabled.
  • Analytics cookies: set by Google Analytics to help us understand usage patterns. These are only placed with your consent.

You can manage or delete cookies through your browser settings at any time. Disabling analytics cookies will not affect your ability to use Fullstory.

06

How long we keep your data

We keep your data only for as long as necessary:

  • Account data (name, email, username, profile content): retained while your account is active. Deleted within 30 days of a verified account deletion request.
  • Analytics data: retained for up to 26 months in Google Analytics, in line with Google's default retention settings.
  • Email delivery logs: retained by Postmark for up to 45 days.
  • Server access logs: retained for up to 90 days for security purposes.

After these periods, data is either deleted or anonymised so it can no longer be linked to you.

07

Your rights

As a resident of the EU (or anywhere else we serve), you have the following rights regarding your personal data. To exercise any of them, email us at[email protected]. We will respond within 30 days.

  • Access - Request a copy of the personal data we hold about you.
  • Rectification - Ask us to correct inaccurate or incomplete data.
  • Erasure - Request deletion of your personal data. We will comply unless we are required by law to retain certain information.
  • Portability - Receive your data in a structured, machine-readable format and transfer it to another service.
  • Objection - Object to processing based on legitimate interests. We will stop unless we have compelling grounds to continue.
  • Restriction - Ask us to limit how we use your data while a dispute or request is being resolved.
  • Withdraw consent - Where processing is based on your consent, you can withdraw it at any time without affecting past processing.

You also have the right to lodge a complaint with the Latvian data protection authority: Datu valsts inspekcija (DVI), www.dvi.gov.lv.

08

International data transfers

JULY17 SIA is based in Latvia, EU. Some of our third-party service providers (Google, Postmark/ActiveCampaign) may process data on servers located outside the European Economic Area, including in the United States.

Where such transfers occur, we ensure they are protected by appropriate safeguards - including Standard Contractual Clauses approved by the European Commission and, where applicable, participation in the EU-US Data Privacy Framework.

09

Children and minimum age

Fullstory is not intended for children under the age of 14. We do not knowingly collect personal data from anyone under 14. If you believe a child under 14 has provided us with personal data, please contact us at [email protected] and we will delete it promptly.

Users aged 14-17 may use Fullstory, but we recommend that a parent or guardian review this policy with them.

10

Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email.

Continuing to use Fullstory after changes are posted means you accept the updated policy.

11

Contact us

If you have any questions about this policy or how we handle your data, please get in touch:

JULY17 SIA, data controller

Email: [email protected]

We aim to respond to all privacy enquiries within 5 business days.