Fabric

GDPR overview

There is no GDPR mention at all. Across the four pages collected — homepage, pricing, terms of service and privacy policy — the words GDPR, data protection officer, EEA and Article 27 appear nowhere, neither in the visible text nor in the archived HTML. No data processing agreement is offered and no EU representative is named. The governing law is California and disputes go to the courts of San Francisco; the publisher is WFHLAND, Inc., a US-based Delaware C-Corp. Some rights are granted in practice, simply not under GDPR labels: you can delete your account and its contents at any time, deleted data is purged within 30 days, a full export is available on demand, and you can opt out of anonymized data use from your settings. One address, team@fabric.so, handles every privacy question.

Who owns the data?

Fabric's terms draw a clean line: you own the material you upload or create, called Customer Materials, and Fabric owns the Service itself (ToS 3.6). The privacy page repeats it plainly — “Your data is yours, not ours” — and states that personal data is never sold to third parties. Two carve-outs matter. Models and algorithms improved through anonymized, aggregated data belong exclusively to Fabric, with no ownership rights flowing back to you (3.6), and that anonymized data may be used in collaboration with third-party partners, with an opt-out and Enterprise plans excluded by default (3.5.1). Any feedback or suggestion you send is assigned irrevocably to Fabric (3.5).

Reuse rights

You can reuse your own content outside Fabric without asking: entire folders or individual files can be downloaded at any time, and a full export of everything held in your account is delivered automatically as a .ZIP file. The terms then set the limits. You may not resell, sublicense, rent or otherwise redistribute the Service (3.2), you may not extract data from Fabric by automated or programmatic means (3.3), and you may not use Fabric to build a competing product (3.3). The license granted covers internal business or personal use depending on your account type (4.1).

Data retention & training

Hosting summary

Fabric hosts the Services on Amazon Web Services, as stated in the terms (11.11) and echoed on the privacy page, where AWS and Cloudflare are named as storage partners and data is described as encrypted at rest and encrypted in transit to and from storage. AWS also handles authentication — login, logout and signup — and stores email addresses and usernames in that capacity. Bunny is used as a secure CDN, serving images at several resolutions. No hosting country or region is published anywhere on the pages collected, so the jurisdiction your data sits in cannot be known from the site; the only geographic anchors are corporate. The publisher is WFHLAND, Inc., a US-based Delaware C-Corp, and the terms are governed by California law. DNS resolution observed for the domain points to 76.76.21.21, geolocated in the United States. Announced protection is AES-256 encryption at rest, SSL/TLS in transit, CASA Tier 2 compliance, and optional password protection on files and folders.