Drupefruit LLC ("Drupefruit," "we," "us," or "our"), a California limited liability company, operates .folio™ ("the Service"). .folio is a digital-identity and link-in-bio product: you create a profile and public page, route to it with a QR code or NFC tag, and, on paid plans, use AI photo assistance, document storage, and masked email aliases. This Privacy Policy describes how we collect, use, and protect your information when you use .folio.
Scope
This Policy covers the .folio Personal and .folio Professional plans. Other FolioLive platform features that are not part of your plan are not covered here and are addressed by separate policies presented before you can access them. We describe here only the data the .folio Service actually collects.
1. Information We Collect
Account Information
When you create a .folio account, we collect your email address and, as you choose to provide them, your display name, handle, and optional profile details (such as a business or personal name, tagline, bio, links, service area, and website).
Profile and Page Content
We store the content you add to your .folio profile and public page - text, links, images, and the blocks you arrange - so we can display and route to your page.
Images and Documents
Photos (FolioScan™): Images you upload for AI assistance are processed to produce suggestions such as background removal or content descriptions. You review the results before you use them.
Documents (FolioVault™): Files you upload for your own storage and verification are kept privately and served through expiring signed links. You control their visibility.
Masked Email (FolioShield™, Professional)
On the Professional plan, we provide masked email aliases and route messages sent to an alias to your real email address. We process those messages only to deliver them; we do not use their contents for advertising.
Payment Information
Paid subscriptions are processed by Stripe. We do not collect or store your full card number - Stripe handles card data directly. We retain a record of your subscription, plan, and billing status.
Usage Data
We collect standard usage and analytics data - pages visited, features used, page views, tap and scan counts, and device/browser information - to operate, secure, and improve the Service.
2. How We Use Your Information
Service delivery: To create and display your profile and page, route QR and NFC taps, process images and documents you submit, deliver masked-email messages, and manage your subscription.
Communication: To send account and transactional messages - sign-in codes, receipts, renewal reminders, and important account or security notices.
Security: To detect and prevent fraud and abuse, validate access, and enforce our Terms of Service.
Improvement: To analyze aggregate usage patterns and improve features. We do not use your uploaded content to train general-purpose AI models.
3. What We Do NOT Do
We do not sell, rent, lease, or trade your personal information or content to third parties for advertising or any other purpose.
We do not send you unsolicited marketing blasts.
We do not use the documents or photos you upload to train general-purpose AI models.
4. Information Sharing
We share your information only in these limited circumstances:
Service providers (subprocessors): We use third-party providers - for example for payment processing, cloud data and file storage, AI processing, and email delivery - to operate the Service. They process data on our behalf under their own privacy policies and data-processing agreements. The current list is maintained at foliolive.link/subprocessors and forms part of this Policy.
Your public page: Information you choose to publish on a public or unlisted .folio page is visible to anyone with the link. You control what you publish and your page's visibility.
Legal requirements: We may disclose information when required by law, subpoena, or legal process, or to protect our rights, our users, or safety.
Business transfers: If Drupefruit is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this Policy.
5. Google User Data
If you connect a Google Calendar to FolioLive, we access a strictly limited slice of your Google account data, solely to operate the scheduling features you asked for.
What we access: busy and free time intervals on the calendars you select, over a rolling 60-day forward window. We do not access event titles, descriptions, attendees, locations, or attachments.
What we store: start and end times only, plus an identifier used to avoid duplicates. No event content is stored.
What we write: bookings made through FolioLive, and only to a separate calendar that FolioLive creates on your account. We cannot read or change your other calendars.
How long: each sync replaces the previous one. Disconnecting a calendar, or deleting your account, deletes the stored intervals.
FolioLive's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.
We do not sell or transfer your Google user data, use it for advertising, or use it to train generalized artificial intelligence or machine learning models.
6. Data Security
We implement industry-standard security measures including:
Encrypted data transmission (TLS/HTTPS)
Row-level security on database tables
Token-based authentication
Signed, expiring URLs for private file access (documents)
Masked email routing that avoids exposing your real address
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Data Retention
Account and profile data: Retained while your account is active and for 30 days after you delete your account, then permanently deleted.
Uploaded images and documents: Retained until you delete them or close your account.
Payment records: Retained as required by financial and tax regulations (typically up to 7 years).
8. Your Rights & Choices
Depending on where you live, you may have the right to:
Access the personal data we hold about you
Correct inaccurate information in your account settings
Delete your account and associated data
Export your data in a portable format
Opt out of the sale or sharing of personal information - we do not sell or share your personal information, so there is nothing to opt out of
California residents have these rights under the California Consumer Privacy Act (CCPA/CPRA) and will not be discriminated against for exercising them. To exercise any right, contact us at [email protected]. We will verify your request against your account before acting on it.
9. Children's Privacy
The Service is intended for individuals 18 years of age and older and is not directed to children. We do not knowingly collect personal information from anyone under 13; if we learn that we have, we will delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify account holders of material changes via email. The "Effective date" at the top of this page indicates the latest revision.