Privacy policy
Last updated 15 October 2026
Folio has no accounts, no tracking and no advertising cookies. Your draft lives in your browser. We only keep what's needed to publish your site and honour what you bought.
X-GenAI, based in Amsterdam, the Netherlands, is responsible for the data described here. Questions or requests go to hello@x-genai.com.
What stays in your browser
Your draft portfolio, your purchase receipts and the edit keys for sites you've published are saved in your browser's local storage. They don't leave your device unless you use one of the features below.
What we receive and why
| When you | We receive | How long we keep it |
|---|---|---|
| Preview or download your site | Your draft, to build the page | Not stored. It's used for that request only. |
| Publish a site | The finished page, with whatever details you chose to show (for example your name, photo, email or phone), plus a scrambled copy of your edit key | Until you ask us to remove the site. The page is public at the address you picked. |
| Use the AI features | The CV, text or instruction you send | Not stored by us. It's passed to our AI provider to process and the result comes straight back to you. |
| Make an AI portrait | The photo of yourself you choose for it | Not stored by us. It's passed to our image provider to make the portrait, which comes straight back to your browser. The photo and the portrait stay in your draft on your own device until you publish or remove them. |
| Use a free AI try | A one-way scrambled code made from your IP address, so we can count free uses per day | Kept as a daily count. It can't be turned back into your IP address. |
| Buy something | From Stripe: the payment's reference, what you bought and whether it went through | As long as tax and accounting law requires, which is 7 years in the Netherlands |
The legal basis is the contract with you (to publish your site and deliver what you paid for), our legitimate interest in preventing abuse of the free tier, and our legal duties for accounting.
Who else handles data
- Cloudflare hosts Folio and published sites. It processes connection data such as IP addresses to deliver pages and block attacks, and may set a short-lived security cookie for that.
- Anthropic provides the AI model behind the AI features. It receives what you send to those features. It doesn't use this data to train its models, and it may keep it for a limited time for safety and abuse checks.
- Google provides the image model behind AI portraits, through its paid Gemini API. It receives the photo you send to that feature. Under its paid API terms it doesn't use this data to train its models, and it may keep it for a limited time for safety and abuse checks.
- Stripe processes payments. You give your card or payment details to Stripe, not to us. Where Stripe acts as the reseller for your purchase, Stripe is responsible for the payment data it collects. See Stripe's privacy policy.
- Google Fonts serves the fonts on Folio and on published sites, so Google sees the IP address of the browser loading them.
Some of these companies process data outside the EU, including in the US. Those transfers are covered by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
Your rights
You can ask to see, correct or delete data we hold about you, to restrict or object to how we use it, or to get a copy to take elsewhere. Email us and we'll answer within a month. To delete a published site, email us from the address shown on the site or include its edit key.
If you're unhappy with how we handle your data, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority where you live.
Changes
If we change this policy, we'll update the date at the top. If a change affects how we use data you've already given us, we'll say so on this page before it takes effect.