Privacy Notice

1. Controller and contact

Boris Shkolnikov, a UK sole trader, controls Folio website, trial, purchase and support data. For privacy requests, write to 13 Kyrle Road, London, SW11 6BD, United Kingdom or email shk.boris.uk@gmail.com.

If your draft contains someone else's personal data, you are responsible for having permission to use it. Do not enter sensitive or confidential client material in this preview.

2. Information we receive

• From you: slide text, author name, images and brand settings. Your browser saves drafts and any separate brand preset on your device. An export sends the current content to our server to make a PDF or ZIP. We do not create an online draft account.
• From your browser and our server: browser-generated trial and event identifiers, network address during requests, hashed rate-limit references, export results, timestamps and limited error codes.
• From payment provider, if checkout opens: Stripe checkout reference and payment/refund status, used with our pass and quota records. Folio does not receive the full card number.
• From support: your email, message, category and page if submitted, plus subsequent correspondence. Please omit drafts, card numbers, passwords and secrets.
• From optional analytics: with your consent, page visits and limited product events, not draft content, support text, email or card details.

3. Purposes and lawful bases

• Render and deliver requested exports and any future paid pass: steps requested before a contract or performance of a contract.
• Secure the service, limit abuse, diagnose errors and measure whether it works: our legitimate interests in a reliable service; internal events use limited identifiers rather than draft text.
• Answer support and refund requests: contract where relevant, otherwise legitimate interests in helping users.
• Keep applicable payment, tax and dispute records if sales open: legal obligation or legitimate interests, as applicable.
• Run optional Google Analytics: consent, which you can decline or withdraw without losing the editor.

We do not sell personal data, add support requesters to a marketing list, train an AI model on drafts or make solely automated decisions with legal or similarly significant effects.

4. Browser storage and cookies

Local storage keeps your draft and brand preset for editing, a browser reference for free-use controls, and a separate first-party visitor reference for internal usage measurement. The internal events may be recorded even when you decline optional Google Analytics. Session storage may hold a pending checkout reference during that browser session. If enabled, a paid pass uses an HTTP-only access cookie. Reset draft removes the draft but not a separate brand preset; clearing this site's browser data removes both and may remove trial or access proof.

Google Analytics cookies are optional and are not set by our analytics integration unless you allow them. Use Analytics preferences on the site to change your choice; clearing browser data also clears the saved preference.

5. Recipients and sharing

Amazon Web Services hosts Folio and processes service data. Our email provider receives messages you email us and our replies. Google receives analytics data only after consent and configuration. Stripe receives checkout and payment data only when checkout is enabled. We may disclose information if required by law or to protect legal rights. We do not publish your drafts.

The help form is disabled, so Folio currently sends no form submissions to Formspark. Use email when the contact address above is available.

6. International processing

The web application is hosted in AWS's London region, but provider operations or support access may involve processing outside the UK. Google, Stripe and Formspark, when active for the purposes above, may use international infrastructure and subprocessors. We have not finished verifying all transfer destinations and safeguards for paid or form processing, so those features remain disabled in this preview. Ask us for details applicable to your information.

7. Retention

• Draft and brand preset: remain on your device until reset or clearing browser storage. Export files are returned to the browser; we do not maintain an online draft library.
• Export rate-limit hashes: removed on later rate-limit checks after the 10-minute window. Trial and internal event records currently have no automatic expiry, even after the browser identifier is cleared.
• Support: correspondence remains in our mailbox until reviewed or deleted. If the form is later enabled, local abuse hashes are removed on later checks after 30 days. Formspark says submissions remain until deleted by us, with a further 30-day recovery window, and submitter IP data for 12 months.
• Payment, logs and backups: no paid checkout is active. Their deletion schedule must be defined and verified before paid launch.

The missing schedules are not a claim that indefinite retention is acceptable. This is a limited preview while deletion rules are implemented. Contact us to request review or deletion of identifiable records where applicable.

8. Security and choices

We use HTTPS, export size and request limits, and restricted server access. No online service is risk-free. You can use the sample without entering your own text, reset drafts, clear site data and refuse optional Google Analytics. You can object to first-party usage measurement by contacting us; a self-service opt-out has not yet been implemented. Export input is needed to make your file; a reply address may be needed to answer support.

9. Rights and complaints

Depending on the processing, you may request access, correction, erasure, restriction or portability. You may object to processing based on our legitimate interests. You may withdraw analytics consent at any time without affecting earlier processing. Contact the controller above; we may verify your identity. You may complain to the UK Information Commissioner's Office.

We will update this notice when processing changes. See Terms and refunds and Help.