Privacy Policy

Folia ("we", "us") is the controller of the personal data described here. For any privacy question, data request, or to reach our data-protection contact, email support@foliadocs.com.

Folia is a Windows desktop application. All PDF processing happens locally on your computer — the files you open, edit, sign, redact, convert, or run on-device AI features against are never uploaded. We do not receive, store, or have any access to their contents.

The data below relates only to your website account, purchases, and software licensing — not your documents.

Account data: your email, name (if given), a securely hashed password (PBKDF2 — we never store the plaintext), your plan, and your license key(s). If you use "Sign in with Google", Google provides your basic profile (email, name) to create or access your account.

Security / session data: each sign-in creates a session record that includes your IP address and browser user-agent, kept ~30 days, used only for security and the "device list" / "sign out everywhere" features in Settings.

Optional account security: if you enable two-factor authentication (TOTP) or a passkey (WebAuthn), we store the credentials needed to operate those features.

Licensing / activation: a purchase mints a license key tied to your account. The first computer to activate binds the key (one key = one computer). The app works offline after activation but re-checks entitlement online roughly every 30 days, sending only a hashed machine identifier and the license id — never any document data.

Contact form data: if you email us, we receive whatever you include so we can reply. We run no analytics, ad trackers, or marketing mailing lists.

One strictly-necessary session cookie (HttpOnly) keeps you signed in; it is not used for tracking or advertising. Your theme and language preferences are stored in your browser's local storage and never leave your browser.

Payments are handled entirely by Lemon Squeezy as Merchant of Record (the seller of record, which processes your card). We never see or store your card number; that data is governed by Lemon Squeezy's privacy policy.

We share the minimum data necessary with: Cloudflare (hosting + storage on its global network, and Turnstile bot-protection on our forms); Lemon Squeezy (payments / Merchant of Record); Resend (transactional email only — verification, license delivery, password reset); and Google (only if you choose "Sign in with Google"). We do not sell your personal data.

Account data is stored on Cloudflare's global infrastructure, so it may be processed in multiple regions; payment data is held by Lemon Squeezy. We keep account data while your account is active, session records ~30 days, and may retain limited records where required for legal, tax, or fraud-prevention purposes.

You may access, correct, delete, or obtain a copy of your data, and object to or restrict certain processing. EEA/UK (GDPR): you also have portability and the right to complain to your supervisory authority; our legal bases are contract, legitimate interests (security, fraud prevention), and consent where applicable. Korea (PIPA): we collect the data in §3 for the stated purposes, retain it per §7, and share it with the recipients in §6; our data-protection contact is support@foliadocs.com.

You can delete your account any time from Settings — this removes your account, sessions, license keys, 2FA credentials, and passkeys. For help, email support@foliadocs.com.

Folia is not intended for anyone under 14 (or the minimum age your country's law requires), and we do not knowingly collect their data. We may update this policy; we will change the date above and give additional notice of material changes where appropriate.