Privacy Policy

Information you give us

• Account details: your name, email, username, country, profile photo, and a securely hashed password. If you sign in with Google or GitHub, we receive your name, email, and profile photo from them.
• Portfolio content: the text, images, projects, links, and domain settings you add.
• Resumes and cover letters: contact details, experience, education, skills, and the company or job details you add to a letter.
• Folix AI: the messages you send, files you upload in chat, and the replies. We save your conversations so you can come back to them.
• Support messages: what you send us through the contact form or email, including any attachments.

Information collected automatically

• Basic device and browser details, pages you visit on folix.io, and error and performance logs
• Your approximate country, based on your connection
• How much of your plan you've used, such as AI messages and uploads

Payment information

Lemon Squeezy processes your payment details. We receive your plan, billing status, and invoice history, but never your full card number.

We use your information to:

• Create, host, and publish your portfolio, resumes, and cover letters
• Run Folix AI, for example to read an uploaded resume or draft a cover letter
• Keep your account secure, verify your email, and prevent fraud and abuse
• Process payments and apply your plan's limits
• Show you analytics about visitors to your published portfolios
• Answer support requests and send account emails
• Send product news, only if you've left that option on
• Understand how Folix is used so we can fix problems and improve it

We never sell your personal data, and we don't use your content to train AI models.

When you use Folix AI, the relevant parts of your profile, your messages, and the text of any file you upload are sent to our AI provider so it can write a response. We only send what's needed for that request.

When you upload a resume PDF, we extract its text to fill in your details. The PDF file itself is not stored. The details you choose to keep are saved to your account like any other content.

Your published portfolios, and any resume you share with a public link, can be seen by anyone and may be indexed by search engines. Your drafts, private resumes, cover letters, and AI conversations are only visible to you.

When someone visits a published portfolio, we record page views, clicks, referring sites, campaign tags, device type, browser, and country. To count unique visitors, the visitor's browser stores a random ID, which we scramble on our servers before saving it. We don't store visitors' names or IP addresses, and visits by the portfolio owner aren't counted.

Portfolio owners see this data in aggregate. How far back they can look depends on their plan: 7 days on Starter, 30 days on Creator, and up to 24 months on Studio.

We keep this to what Folix needs to work:

• Sign-in cookies keep you logged in and protect against forged requests
• Preferences, such as your theme and whether the sidebar is collapsed
• Visitor ID on published portfolios, used only for the anonymous analytics described above

Our site analytics are cookieless, and we don't use advertising or cross-site tracking cookies.

We share data only with service providers that help us run Folix, and only what each one needs:

These providers process data on our behalf under their own security and privacy commitments. We may also share information if the law requires it, to protect people from harm, or as part of a merger or sale of Folix, in which case we'll tell you before your data moves to a new owner.

We always send emails you need, like verification, password resets, and billing receipts. You can turn product news and account activity updates on or off in Settings under Notifications, or use the unsubscribe link in any of those emails.

• All traffic to Folix is encrypted with HTTPS
• Passwords are hashed and never stored in plain text
• Verification and reset links are single-use and expire
• Access to user data inside Folix is limited to what's needed to run and support the service

We keep your content while your account is open. Visitor analytics are kept as long as your plan allows you to view them. When you delete your account, we delete your portfolios, resumes, cover letters, and AI conversations. Copies in backups are removed as those backups expire.

We may keep limited records longer when we must, such as invoices for tax purposes or information needed to resolve a dispute.

Depending on where you live, including under GDPR and CCPA, you can ask us to:

• Give you a copy of your personal data
• Correct information that's wrong
• Delete your account and data
• Stop or limit certain uses of your data, like product emails

You can edit most of your information yourself in Settings. For anything else, email hi@folix.io. We may need to confirm it's you before acting on a request. You can also complain to your local data protection authority.

Folix and our providers operate in several countries, so your data may be processed outside the country where you live. When that happens, we rely on our providers' safeguards, such as standard contractual clauses, to protect it.

Folix isn't meant for anyone under 13, or the minimum age in their country. We don't knowingly collect their data. If you think a child has given us information, contact us and we'll delete it.

We'll update this policy when Folix changes. For significant changes, we'll email you or show a notice in the app before they take effect. The date at the top shows when it was last updated.

Questions or requests about your privacy? Email hi@folix.io or use our contact form. Our Terms of Service cover the rest of how Folix works.