Privacy Policy
Last updated August 2026. Foliyo is operated for users in India under the Digital Personal Data Protection Act, 2023 (DPDP).
What we collect
When you create a hosted account we store your email, password hash, profile content you add (projects, experience, education, skills, and related portfolio/resume data), consents, and basic technical logs (IP and user agent at consent time).
Why we process it
- Provide your portfolio and resume pages
- Authenticate you and secure the account
- Process payments if you upgrade (via Razorpay)
- Send transactional emails (verification, welcome, export/deletion notices)
- Comply with law and prevent abuse
Consent
Signup requires agreement to this Privacy Policy. Optional product-update marketing is not enabled in the current product; we will ask separately before sending marketing email.
Your rights (DPDP)
- Access / export — download a JSON copy of your data from Dashboard → Settings
- Correction — edit your profile and library in the dashboard
- Erasure — request account deletion from Settings (30-day grace; cancel anytime before then)
Retention
Active accounts keep data while the account exists. After a deletion request we permanently remove account data after 30 days unless you cancel. Payment records may be retained as required for tax and dispute handling.
Processors
Hosting and email providers act as processors on our behalf. Card payments are handled by Razorpay; Foliyo does not store full card numbers.
Self-hosting
If you run Foliyo yourself (open-source), your data stays on your infrastructure. This policy applies to the hosted foliyo.dev service.
Contact
Privacy questions: privacy@foliyo.dev