Privacy Policy

Last updated: 2026-10-01

1. Who we are

FolioPress is a website and blog builder with translation built in, operated by M. Marcos ("FolioPress," "we," "us," or "our"), based in the European Union. For EU/EEA data protection purposes, we're the data controller for the personal data described below. Contact us about privacy at privacy@foliopress.io.

If you run a site on FolioPress, you're the controller of any personal data about your own site's visitors and users, and we process it on your behalf only to host your site.

2. What we collect

Account information: your name, email address, and password (stored only as a salted hash, never in plain text).
Content you create: pages, posts, tags, and any text or images you upload to your FolioPress site.
Billing information: if you subscribe, our merchant of record (Polar) collects and processes your payment details directly. We receive your subscription status, plan, and billing country, but never your full card number.
Technical data: IP addresses and request logs that our servers record to keep the Service secure and running (for example, to prevent abuse and diagnose errors).
Support communications: anything you send us when you contact us.

On foliopress.io we use Plausible, a privacy-friendly analytics tool that we host ourselves: it counts visits in aggregate, uses no cookies, and doesn't identify you. We don't use advertising or third-party tracking scripts.

3. How we use it and why

To provide the Service you signed up for (contract): creating and hosting your site, signing you in, sending service emails such as verification codes and site notifications.
To process payments (contract and legal obligation): through Polar, and to keep records required for tax and accounting.
To provide AI features you request (contract): the content you choose is sent to our AI provider only to generate that specific translation, summary, or proofreading suggestion.
To keep the Service secure (legitimate interest): rate limiting, abuse prevention, backups, and error diagnosis.
To answer your requests (contract or legitimate interest).

We don't sell your personal data, and we don't use your content to train AI models.

We share data only with the service providers we need to run FolioPress, each bound by data processing terms:

Hetzner Online (Germany): servers hosting the Service and your data, located in Finland (EU).
Cloudflare (USA): DNS, network protection, content delivery, and encrypted backup storage.
Polar (USA): merchant of record for subscriptions and payments.
Resend (USA): delivery of service emails.
OpenAI (USA): AI provider for translation, summarization, and proofreading, only when you use an AI feature and only for the content you submit.
Authorities: when required by law or to protect our rights or the safety of others.

5. Cookies

We only use cookies that are strictly necessary for the Service to work, so no consent banner is needed:

Session cookie: keeps you signed in.
Security cookie (csrftoken): protects forms against cross-site request forgery.
Language cookie (language): remembers the language you chose.
Appearance cookie (themeMode): remembers whether you chose light or dark mode.
Signup cookies: remember an invite code or the plan you picked while you confirm your email address.

We don't use advertising, analytics, or cross-site tracking cookies.

6. Data retention

We keep your account and content for as long as your account is active. If your subscription ends or you delete your account, we delete your site and personal data within a reasonable period after notifying you, except where we must keep certain records (such as invoices) for legal, tax, or accounting purposes. Backups are encrypted and deleted on their normal rotation. Server logs are kept only as long as needed for security and troubleshooting.

7. Your rights

If you're in the EU/EEA or UK (GDPR/UK GDPR): you have the right to access, correct, delete, restrict, or receive a portable copy of your personal data, and to object to processing based on legitimate interest. You can also lodge a complaint with your local data protection authority (in Portugal, the CNPD).

If you're a California resident (CCPA/CPRA) or in another US state with similar consumer privacy law: you have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to not be discriminated against for exercising these rights. We don't sell or share personal information as defined under these laws.

To exercise any of these rights, contact us at privacy@foliopress.io. We'll respond within the timeframe required by law.

8. International data transfers

Your site and account data are stored in the EU (Finland). Some of the providers listed in Section 4 are located outside the EU/EEA. Where personal data is transferred to the United States, we rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses.

9. Security

We use industry-standard measures, including encryption in transit, hashed passwords, encrypted backups, and access controls, to protect your data. No system is perfectly secure, but we'll notify you and the relevant authority without undue delay if a breach affects your personal data, as the law requires.

10. Children's privacy

The Service isn't directed at children under 16, and we don't knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we'll delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. We'll post the updated version here with a new "Last updated" date and, for material changes, notify account holders by email in advance.

12. Contact

Questions about this Privacy Policy or your data? Reach us at privacy@foliopress.io.