Folio ("the Service", "we", "us") is operated by an individual based in the United Kingdom. For data protection purposes under UK GDPR, we are the controller of your personal data.

To contact us about your data, email hello@folioapp.co.uk.

We collect the minimum data necessary to provide the Service:

• Account data — your email address and name, collected when you create an account via Clerk.
• Subscription status — whether you have an active paid subscription. Payment details (card number, billing address) are processed directly by Stripe and never stored by us.
• Saved content — bookmarks and personal notes you save within the Service, stored in our database.
• Server logs — standard request logs generated by our hosting provider (Vercel), including IP addresses and pages visited. These are retained for up to 30 days.

We do not use third-party analytics tools (such as Google Analytics). We do not sell your data to anyone.

We use your data solely to:

• Create and manage your account
• Process and manage your subscription
• Send transactional emails (e.g. welcome email, payment receipts)
• Provide and improve the Service
• Respond to support requests

Our legal basis for processing is contract performance (providing the service you signed up for) and, where applicable, legitimate interests.

We use the following trusted third-party services to operate the Service:

• Clerk — authentication and account management. Stores your email and name.
• Stripe — payment processing. Handles all card details under PCI-DSS compliance. We receive only subscription status from Stripe.
• Upstash (Redis) — cloud database for subscription records, bookmarks, and cached content.
• Vercel — hosting and serverless infrastructure. Processes request data as part of serving the site.
• Resend — transactional email delivery.
• ElevenLabs / Anthropic / Tavily — used for generating briefing content and audio. No personal data about you is sent to these services.

We use a session cookie set by Clerk to keep you signed in. This cookie is strictly necessary for the Service to function and does not track you across other websites.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

We retain your account data for as long as your account is active. If you request deletion of your account, we will delete your personal data within 30 days, except where we are required to retain records for legal or financial reasons (for example, Stripe transaction records).

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict our processing
• Data portability (receive your data in a portable format)
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at hello@folioapp.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We may update this policy from time to time. Material changes will be communicated by email or by a notice on the Service. The date at the top of this page reflects the most recent update.