Privacy Policy
Last updated: June 21, 2026
This Privacy Policy explains how Ashlytic Labs LLP ("Foliodesk", "we", "us") collects, uses, and protects information when you use Foliodesk at foliodesk.app. We operate from Flat 104, Nisargsundar Apartments, Kothrud, Pune – 411038, Maharashtra, India.
1. Information we collect
Account information. When you create an account we process your email address and, optionally, your name.
Documents you upload. Files you upload (e.g. PDFs) are stored to provide the sharing and analytics service. We do not sell or mine the contents of your documents.
Viewer information on shared links.When someone opens a link you created, depending on your link settings we may process: the viewer's email address (for email-gated links), a one-time verification code, approximate location (country/region derived from IP), device/browser type, and per-page engagement (time spent on each page, downloads). We do not store full IP addresses for analytics.
Usage & diagnostics. We collect aggregate usage and error diagnostics to operate and secure the service.
2. How we use information
- To provide document sharing, access control, and analytics.
- To send transactional email (verification codes, view notifications).
- To secure the service (rate limiting, abuse and fraud prevention).
- To diagnose errors and improve reliability.
- To comply with legal obligations.
3. Sub-processors
We share data with the following service providers strictly to operate the service:
- Supabase — database, authentication, and document storage
- Vercel — application hosting
- Resend — transactional email delivery
- Cloudflare — DNS and network security
- Upstash — rate-limiting infrastructure
- Sentry — error diagnostics (PII redacted before transmission)
- Google Analytics — aggregate usage analytics
We do not sell your personal information.
4. Data retention
Documents and analytics are retained while your account is active or as needed to provide the service. One-time verification codes expire within minutes. You can delete documents and links at any time; deletion removes the associated stored objects. We may retain limited records as required by law.
5. Security
Documents are stored in a private bucket protected by row-level security; viewers never receive a direct storage URL — content is streamed through access-checked endpoints. Data is encrypted in transit. No method of transmission or storage is 100% secure, but we apply industry-standard safeguards.
6. Your rights
Subject to applicable law (including India's Digital Personal Data Protection Act, 2023 and, where applicable, the EU/UK GDPR), you may request access to, correction of, export of, or deletion of your personal data. To exercise these rights, email privacy@foliodesk.app.
7. International transfers
We operate from India and use providers that may process data in other regions (e.g. the United States and the EU). Where required, transfers rely on appropriate safeguards.
8. Children's privacy
Foliodesk is not directed to children under 16, and we do not knowingly collect their personal data.
9. Cookies
We use strictly necessary cookies for authentication and a limited set of analytics cookies. You can control cookies through your browser settings.
10. Changes
We may update this policy; material changes will be reflected by the "Last updated" date above.
11. Contact
- Privacy: privacy@foliodesk.app
- General support: support@foliodesk.app
- Operating entity: Ashlytic Labs LLP, Flat 104, Nisargsundar Apartments, Kothrud, Pune – 411038, Maharashtra, India