Privacy Policy
This policy explains what Folioo stores, how it uses your information, and what happens when you publish or connect another service.
Accounts and sessions
When you create an account, Folioo stores your name, email address, and a password hash. We use this information to sign you in and associate your workspace with your account. A session cookie keeps you signed in. Folioo also uses browser storage for features such as local drafts.
Workspace files and published sites
Folioo stores files, project details, release history, and library records so you can work on them and retrieve them later. Access to your workspace and library is tied to your account. Published sites and their assets are accessible to visitors. Proposal owners can require a password. Anyone who accesses a public site may copy or share its contents.
AI requests and indexing
When you use AI features, Folioo sends the relevant prompts, files, source code, or excerpts to an external AI provider to complete the request. Folioo uses Google Gemini and can also route some text requests through OpenRouter when configured. Indexing creates searchable representations of library content. Folioo records model and request information, including token counts when the provider reports them, to show usage in your workspace.
Discord, MCP, and email
If you link Discord, Folioo stores the account association and processes the commands and attachments you send to the bot. MCP clients can use a token you create to access the actions it permits. Outreach stores contacts and message drafts. When you confirm an email send, your configured relay receives the recipient and message to deliver it.
Support requests
When you contact Folioo, we store your reply email, topic, message, and request reference so we can respond and track the issue.
Published proposal activity
Folioo uses first-party tracking on published proposal pages to count opens, estimate unique browsers, and measure visible time on the page and its sections. It uses a browser identifier when storage is available and stores a hash rather than the identifier itself. Activity tracking does not require cookies and honors Do Not Track and Global Privacy Control. Folioo retains view records for 90 days and does not store raw IP addresses in those records. Acceptances and comments are shared with the proposal owner.
Website analytics
Folioo measures visits and visible time on a limited set of website pages and sections using its own analytics endpoint. These records contain an in-memory random visit identifier stored as a hash, an allowlisted page name, counters, and timestamps. We do not collect form contents, query strings, account identifiers, cookies, browser fingerprints, or raw IP addresses in these records. We honor Do Not Track and Global Privacy Control, and delete records after 90 days. Visible time is an estimate, not proof that someone read the content.
Payments and billing
Pricing is a preview. Folioo uses Dodo Payments only for configured test-mode checkout. Live billing is disabled. Test transactions do not charge real money or activate paid plans.
Storage and your choices
Saved files and projects stay available for use across sessions. You can delete library files, remove sites, and revoke Discord and MCP access in Folioo. Clearing local drafts from a browser affects that browser. Copies already downloaded, shared, or delivered through another service may remain there.