Privacy Policy

Folio is a product operated by Threelance Inc., a corporation incorporated in the State of Delaware ("Threelance," "we," "us," or "our"). This Privacy Policy explains what personal information we collect, how we use it, and your rights with respect to that information when you use the Folio platform at folio.link (the "Platform").

Please read this Policy carefully. By using the Platform, you agree to the practices described here. If you do not agree, please do not use Folio.

We may update this Policy from time to time. If changes are material, we will notify you via email or an in-app notice. The effective date at the top of this document reflects the most recent revision.

Folio is a platform designed for freelancers to present their professional identity (portfolio, social links, contact info, and secure payment details) through a single shareable link. The data controller for information processed through the Platform is Threelance Inc.. If you have questions about this Policy, contact us at privacy@folio.link.

3.1 Information You Provide Directly

When you create a Folio account and build your profile, we may collect:

• Account information: email address, password (hashed and stored securely), name, and username;
• Profile content: biography, portfolio items, photos, project descriptions, and links you add to your profile;
• Social and contact links: social media handles, personal website URLs, email addresses, and phone numbers you choose to display;
• Pay-Me information: payment details such as bank account identifiers, Venmo handles, PayPal addresses, Zelle addresses, or similar payment information you voluntarily enter for display to authorized visitors;
• Communications: messages or support requests you send to us.

3.2 Information Collected Automatically

When you or visitors interact with the Platform, we may automatically collect:

• Usage data: pages viewed, links clicked, time on page, session duration, and referral sources;
• Device and technical data: IP address, browser type, operating system, device identifiers, and time zone;
• Analytics data: aggregated profile performance metrics such as total views, unique visitors, and click-through rates;
• Cookie and tracking data: see Section 8 for details.

3.3 Information We May Collect as Features Expand

As Folio grows, we anticipate adding new features that may involve collecting additional types of information, including but not limited to:

• Integration data from connected third-party platforms (e.g., Behance, LinkedIn, Instagram, GitHub);
• Lead and inquiry data if we introduce contact form or client inquiry features;
• Engagement signals if we introduce analytics dashboards or audience insights;
• Payment history and transaction metadata if we introduce built-in invoicing or payment tracking features;
• Identity verification data if features require it for compliance purposes.

We will update this Privacy Policy and provide notice before collecting any materially new categories of information.

3.4 Pay-Me Data

Pay-Me is a display feature, not a payment processor. We store the payment information you enter into Pay-Me (e.g., bank details, payment handles) in encrypted form on our servers solely for the purpose of displaying it to visitors who present the correct password. We do not transmit, process, or handle funds. We do not share your Pay-Me information with third parties except as required by law or described in this Policy.

You are responsible for the security of your Pay-Me password. If you believe your password has been compromised, you should update your Pay-Me settings immediately.

We use the information we collect to:

• Create and manage your account and profile;
• Operate, maintain, and improve the Platform;
• Provide customer support and respond to inquiries;
• Send transactional communications (e.g., account confirmations, security alerts);
• Provide analytics and insights about your profile's performance;
• Detect and prevent fraud, abuse, and security incidents;
• Comply with legal obligations;
• With your consent, send marketing or product update communications.

We do not sell your personal information to third parties. We do not use your information to serve third-party advertising on the Platform.

If you are located in the European Economic Area or the United Kingdom, we process your personal information on the following legal bases:

• Contract performance: processing necessary to provide the Platform pursuant to our Terms of Service;
• Legitimate interests: analytics, security, fraud prevention, and platform improvement, where these interests are not overridden by your rights;
• Consent: for marketing communications and certain optional data collection activities;
• Legal obligation: compliance with applicable laws and regulatory requirements.

We do not sell your personal information. We may share it in the following limited circumstances:

• Service providers: we engage trusted third-party vendors who process data on our behalf under data processing agreements. These providers are contractually prohibited from using your data for any purpose other than providing services to us.
• Legal requirements: we may disclose information when required by law, court order, or government request, or when necessary to protect the rights, safety, or property of Folio, our users, or others.
• Business transfers: in connection with a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email or in-app notice before your information is transferred and becomes subject to a different privacy policy.
• With your consent: in any other circumstances, we will ask for your explicit consent before sharing your personal information.

The service providers (sub-processors) we currently rely on are:

• Supabase — database and authentication;
• Cloudflare — image and video storage, optimization, and content delivery;
• Resend — sending your sign-in and product emails;
• PostHog — product analytics (EU-hosted);
• Vercel — application hosting;
• Google — if you choose to sign in with Google.

Some of these providers are based outside the EEA/UK (for example, in the United States). Where that is the case, transfers are protected by appropriate safeguards such as the EU-US Data Privacy Framework or Standard Contractual Clauses.

Your Folio profile is public by default. Information you choose to display on your profile, including your name, bio, portfolio items, social links, and public contact details, is accessible to anyone on the internet, may be indexed by search engines, and may be shared by visitors. Do not post sensitive personal information (such as a home address or government ID numbers) on your public profile.

Pay-Me information is not public. It is accessible only to visitors who enter your Pay-Me password.

We use cookies and similar tracking technologies to operate and improve the Platform. These may include:

• Essential cookies: required for basic platform functionality such as session management;
• Analytics cookies: to understand how users interact with the Platform, using tools such as privacy-respecting analytics services;
• Preference cookies: to remember your settings and preferences.

We do not use advertising or third-party tracking cookies for the purpose of behavioral advertising. You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect Platform functionality.

We retain your personal information for as long as your account is active or as needed to provide the Platform. If you close your account, we will delete or anonymize your personal information within ninety (90) days, except where retention is required by applicable law, for fraud prevention, or to resolve outstanding disputes.

Analytics data may be retained in aggregated, de-identified form after account closure.

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit (TLS) and at rest;
• Encrypted storage of Pay-Me payment information;
• Access controls limiting data access to authorized personnel;
• Regular security assessments and monitoring.

No system is perfectly secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: request a copy of the personal information we hold about you;
• Correction: request that we correct inaccurate information;
• Deletion: request deletion of your personal information, subject to legal retention obligations;
• Portability: receive your information in a structured, machine-readable format;
• Objection and restriction: object to or request restriction of certain processing activities;
• Withdrawal of consent: where processing is based on consent, withdraw it at any time without affecting prior lawful processing.

To exercise any of these rights, contact us at privacy@folio.link. We will respond within the timeframes required by applicable law (typically 30 days).

12.1 California (CCPA/CPRA)

California residents have the right to know what personal information we collect, to request deletion, to correct inaccurate information, to opt out of the sale or sharing of personal information, and to non-discrimination for exercising these rights. To exercise these rights, contact privacy@folio.link or submit a request through your account settings.

We do not sell personal information. We do not use sensitive personal information beyond the purposes permitted under the CCPA.

12.2 Other U.S. States

Residents of Virginia, Colorado, Connecticut, Texas, Utah, and other states with applicable privacy laws may have similar rights as described above. To exercise these rights, contact privacy@folio.link.

Folio operates in the United States. If you access the Platform from outside the United States, your information may be transferred to and processed in the U.S., which may have different data protection laws than your country. By using the Platform, you consent to this transfer. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for transfers from the EEA, UK, or Switzerland.

The Platform is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected information from a minor, we will delete it promptly. If you believe we have collected information from a minor, contact us at privacy@folio.link.

We may update this Privacy Policy from time to time. If changes are material, we will notify you at least thirty (30) days in advance via email or in-app notice. Your continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the changes.

For questions, requests, or concerns regarding this Privacy Policy or your personal information:

• Email: privacy@folio.link
• Mailing address: Threelance Inc. (registered address to be added)

We are committed to working with you to resolve any privacy concerns in good faith.