Privacy policy

Who runs Folio

Folio is operated by Oluyi Adetomiwa Damilola, an individual based in Nigeria. They decide how your data is used and are responsible for it.

To ask anything about your data, email tomiwaoluyi@gmail.com.

What we collect

We collect what you give us and a small amount of technical information:

• Account details: your name, email address, username and password. The password is stored only as a hash, never as you typed it.
• For verification: your legal name and country, and the identity document and selfie you upload.
• Your profile, CV and portfolio content, including the images you upload.
• For brands: company details, the work email address and website you verify, the official social media account you prove you control, and a business document.
• Payment and payout records, and the bank account details you give us for payouts. Card details go straight to the payment provider; Folio never sees or stores them.
• The email addresses of brands you ask to confirm your work, and the name and job title of the person who confirms it.
• Opportunities brands post, and your replies to them.
• Job descriptions you paste in to tailor a CV.
• Technical logs kept by our hosts: IP address, browser and the time of each request.

Why we use it

We use your data to run your account and show your work; to check identity and prevent fraud and impersonation; to process payments; to send you emails about your account, such as verification, work confirmations, opportunities that match you and payment updates; and to meet our legal duties.

The lawful bases we rely on are: performing our agreement with you, your consent (which you can withdraw at any time), legal obligation, and our legitimate interest in keeping the service safe.

What other people can see

A published portfolio and its link-preview image are public to anyone, including search engines.

Verified brands can see creator profiles in the directory. A brand that confirms your work sees the entry it is asked to confirm.

When someone confirms a work entry, their name and job title are shown with that entry, including on a published portfolio.

Opportunities brands post can be seen by signed-in users they are aimed at; the brand sees the replies it gets.

A private preview link shows your unpublished portfolio to anyone you give it to, until it expires.

Identity documents, selfies, bank details and payment records are never shown to other users.

Companies that handle data for us

These companies process data on our behalf and act only on our instructions:

Some of them are outside Nigeria, so your data may be stored or processed in other countries, including the European Union and the United States.

• Neon: stores the database.
• Cloudflare: stores uploaded files (R2).
• Resend: sends email.
• Paystack: takes payments and sends payouts.
• Stripe: takes payments from payers outside Africa.
• Anthropic: tailors CVs and drafts cover letters from the text you give it.
• Vercel: hosts the website.
• Render: hosts the server.
• GitHub: supplies public profile figures when you add a GitHub username.

CV tailoring

When you tailor a CV or draft a cover letter, the relevant parts of your profile and the job text you paste are sent to Anthropic to produce it. Folio does not use that text for anything else.

Please do not paste information about other people into a job description.

Cookies

Folio sets one cookie, folio_session, which keeps you signed in. There are no advertising or analytics cookies.

When you pay, the payment provider may set its own cookies inside its checkout.

How long we keep it

We keep your data while your account is open.

When you ask us to delete your account, we will delete your profile, portfolio, CVs and uploaded files within 30 days of your request.

We will delete identity documents and selfies within 90 days of a verification decision, unless we need them to resolve a dispute that is still open.

Payment and payout records are kept for six years, because financial records must be.

Backups roll off within 30 days.

Your choices and rights

You can see and correct most of your data in the app.

You can ask for a copy of your data, a correction, deletion, or that we stop a particular use of it, by emailing tomiwaoluyi@gmail.com. We answer within 30 days.

There is no account deletion button in the app yet, so deletion is by email.

The law we follow

Folio follows the Nigeria Data Protection Act 2023. You can complain to the Nigeria Data Protection Commission.

If you live elsewhere you may have further rights under your own law, and you can complain to your local regulator.

Age

Folio is not for anyone under 18. If we learn that an account belongs to someone under 18, we close it and delete its data.

Security

Connections to Folio are encrypted. Passwords are hashed. Single-use links are stored only as hashes. Access to identity documents is limited to verification review.

No system is perfectly secure. If a breach puts you at risk, we will tell you and the regulator, as the law requires.

Changes to this policy

When we change this policy we change the date at the top. For a significant change, we email you before it takes effect.