Legal
Privacy Policy
Last updated: August 2026
FolioMate (“we”, “us”) helps you create invoices, quotations, and receipts. This policy explains what we collect, why, and your rights.
Who is responsible for your data
FolioMate, Bacolod City, Negros Occidental, Philippines, is the data controller for personal data processed through FolioMate. Contact us about anything in this policy at support@foliomate.app.
What we collect
- Account data - your name and email, via Google sign-in or email/password (handled by Supabase Auth).
- Your documents - the invoices, quotes, clients, and business details you create. These are yours.
- Billing data - handled by LemonSqueezy, our payment processor. We never see or store full card numbers.
- Usage - basic counts (e.g. AI generations per month) to enforce plan limits.
How we use it
To run the product: store your documents, generate them with AI, enforce your plan, and email documents to recipients when you ask us to. We do not sell your data.
Why we are allowed to process it
- To provide the service - storing your documents, generating them, sending what you ask us to send. This is processing necessary to perform our contract with you.
- To take payment and prevent abuse - billing records, plan limits and rate limiting. Our legitimate interest in running a working, paid product.
- Product update emails - only if you tick the box. That is consent, and you can withdraw it at any time from Settings or the link in any such email, without affecting anything else.
Payment detection (optional)
If you paste a restricted Stripe key to scan for payments, the key stays in your browser. Each scan passes it through our server to Stripe for that one request; we never store or log it. Revoke it any time from your Stripe dashboard.
Smart-link acceptances
When your client accepts a document through a smart link, we store the name they type, the time, and a fingerprint of the document version - this is the acceptance record shown to you. We use it for nothing else.
AI processing
When you describe a job or upload a photo, that text/image is sent to Anthropic's Claude API to produce your document. It is not used to train models. We send only what is needed to generate the document you asked for.
Sub-processors
- Vercel - hosting and content delivery (United States)
- Supabase - authentication and database
- Anthropic - AI generation
- LemonSqueezy - payments & subscriptions
- Resend - transactional email
Where your data goes
FolioMate is operated from the Philippines, and the providers listed above are largely based in the United States. If you are in the UK, the EEA or another region with data-transfer rules, using FolioMate means your data is transferred and stored outside that region. We rely on our providers' standard contractual clauses for those transfers, and we only send each provider what it needs to do its job.
Cookies, and what we store in your browser
FolioMate stores your documents in your own browser, which is what makes the app work offline and load instantly. That storage is part of the service you asked for, not tracking, and it never leaves your device except to sync to your own account.
Signing out clears it, so a shared computer keeps nothing after you leave.
Cookies & analytics
FolioMate sets only essential cookies - the session cookie that keeps you signed in. We do not use advertising or cross-site tracking cookies, which is why there is no cookie banner. If analytics are enabled, we use cookieless, aggregate page statistics (no personal profiles, no identifiers stored in your browser).
Retention
Your documents and account data are kept for as long as your account is active. Deleting a document removes it; deleting your account removes your data from our systems, after which it also leaves our encrypted backups on their normal cycle.
Your rights
Depending on where you live, you have some or all of the following rights. We honour them for everyone rather than checking your location first.
- See it - ask for a copy of the personal data we hold about you.
- Correct it - fix anything inaccurate, mostly directly in the app.
- Delete it - delete individual documents, or your whole account.
- Take it with you - export your documents and books as CSV at any time, in a form another tool can read.
- Object or restrict - tell us to stop a particular use of your data.
- Withdraw consent - turn off product-update emails whenever you like.
Most of these you can do yourself in the app without asking. For anything else, email support@foliomate.app and we will respond within 30 days.
If you are in the UK or EEA and think we have handled your data badly, you can complain to your national data-protection authority. We would rather you told us first so we can put it right.
Children
FolioMate is a business tool and is not intended for anyone under 16. We do not knowingly collect data from children.
Contact
Questions? support@foliomate.app.