Back

Privacy Policy

**Note to Yagnesh:** This is a stub template. You should have a lawyer review and finalise this before launching publicly, especially if you have users in the EU (GDPR) or California (CCPA). Replace `[DATE]`, `[YOUR NAME/COMPANY]`, and `[YOUR EMAIL]` throughout.

**Last updated:** [DATE] **Effective:** [DATE]

1. Who we are

folio ("we", "us", "our") is operated by [YOUR NAME/COMPANY]. Our service is available at [your domain].

For privacy questions: [YOUR EMAIL]

2. What we collect

Information you provide

  • **Account information** — name, email address, username, headline, bio, LinkedIn URL
  • **Profile photo** — if you upload one
  • **Case study content** — everything you write in the 7-step wizard, plus any images or links you attach as evidence

Information collected automatically

  • **Usage data** — pages visited, features used, time spent (via PostHog analytics)
  • **Session data** — managed by Clerk authentication. We store a session token in a cookie.
  • **IP address and browser** — collected by our hosting provider (Vercel) and analytics provider for security and performance

3. How we use it

  • To provide and operate the folio service
  • To display your public portfolio at `/{username}`
  • To send transactional emails (password reset, email verification) via Clerk
  • To improve the product using aggregated, anonymised usage data
  • To respond to support requests

We do **not** sell your personal data. We do **not** use your data to train AI models.

4. Who we share it with

| Provider | Purpose | Privacy policy | |---|---|---| | **Clerk** | Authentication, session management | clerk.com/privacy | | **Vercel** | Hosting and CDN | vercel.com/legal/privacy-policy | | **Neon / Prisma Postgres** | Database | [link] | | **Cloudflare** | Image storage (R2) | cloudflare.com/privacypolicy | | **PostHog** | Product analytics | posthog.com/privacy |

5. Your public profile

Content you publish to your folio (name, headline, bio, case studies) is **publicly accessible** at `/{username}`. Anyone with the URL can view it. You can: - Unpublish individual case studies at any time - Enable maintenance mode to hide your entire folio temporarily - Delete your account and all content permanently from Settings → Danger Zone

6. Data retention

We retain your data for as long as your account is active. When you delete your account, all associated data (profile, case studies, images) is permanently deleted within 30 days.

7. Your rights

Depending on your location, you may have rights to: - Access the personal data we hold about you - Correct inaccurate data - Request deletion of your data - Object to or restrict processing - Data portability

To exercise these rights, email [YOUR EMAIL].

**EU/EEA residents:** You also have the right to lodge a complaint with your local data protection authority.

8. Cookies

We use cookies for: - Session authentication (Clerk) — strictly necessary - Analytics (PostHog) — performance/analytics, can be disabled

9. Children

folio is not directed at children under 16. We do not knowingly collect data from children.

10. Changes to this policy

We'll update the "Last updated" date and notify active users by email for material changes.

11. Contact

Questions about this policy: [YOUR EMAIL]