Privacy Policy

Folio is a place to build a basket of tokenized equities, trade it, and post about it. This page says what the app collects, what it puts in front of other people, and who else handles it. It is written from what the product does today, and it changes when the product does.

Signing in

Sign-in runs through Privy. You sign in with Google or with an email address, and Privy creates an embedded wallet on your account at the same time. Folio never sees your Google password. What Privy passes to Folio is your account id, the email address on the account, and the wallet address.

What Folio stores

• Your account: the Privy id, your email address, and your embedded wallet address.
• Your profile: display name, handle, bio, profile picture and banner.
• What you do here: who you follow, your posts and replies, the folios you create, and the trades, deposits and withdrawals you make through the app.

What is public

Folio is a social product, so most of what you do here is visible to other people on Folio by design. Your profile page carries your name, handle, picture, banner, bio, who you follow and who follows you, your posts and replies, the folios you built, your positions and their value, and a tape of your trades. Leaderboards rank people by how those positions have performed.

Your email address is not shown to anyone. Your wallet address is, because the positions and the transactions attached to it are on public blockchains and can be read there by anyone, whether or not they use Folio.

Who else handles it

• Privy runs sign-in and holds the embedded wallet. Your login and your keys are theirs to keep, not ours.
• Folio's own server stores your profile and everything social in a hosted Postgres database.
• Vercel hosts the site and keeps the ordinary request logs a host keeps.
• Lighter and the blockchains receive the trades and transfers you ask for. A record written to a chain is public and permanent. Nobody, Folio included, can delete it later.
• Sentry receives a report when the app hits an unexpected error, on the builds where it is switched on. Session replay is off, so it never records what you type. A report carries your account id at most, never your email or your handle.
• Loops is the service Folio uses to send email. After your account is created Folio asks you once whether you want updates by email, and nothing goes to Loops unless you say yes. If you do, and the integration is configured on that deployment, Folio sends Loops the email address Privy verified for your account, which door you signed in through (wallet or google), your wallet address when you have one, your account id, a mark that it came from signup, and the time you said yes. It happens once. Every email Loops sends you has a link to unsubscribe.

Prices, logos and market listings are fetched by Folio's server rather than by your browser, so those sources see the server asking and not you.

Folio may show previews of public posts from X accounts it tracks, each with a link back to the original on X. Those accounts are Folio's own curated watchlist, not a read of your X account, and the watchlist is not switched on on every deployment.

There is no advertising network here, and no third-party analytics or session-replay product. Folio does not sell anything about you. Loops is the one outside service that receives anything about you for its own sending.

Cookies and what your browser keeps

Folio sets no cookies of its own. Privy sets what it needs to keep you signed in. The app keeps your session token and small interface preferences in your browser, such as your watchlist, your recent searches and whether you last looked at a list or a grid. When your account is first created it also keeps a short-lived mark so Folio can ask you once about email; that mark is cleared as soon as you answer. Signing out clears the session.

Keeping it and deleting it

Your profile and your posts stay until you ask for them to go. There is no delete button in the app yet, so write to contact@folio.market from the address you signed in with and we will remove your profile, your posts and your social record. Folio cannot remove everything for you: anything already written to a blockchain, whatever Privy holds for your account (deleted through Privy), and a contact that was already sent to Loops.

Changes

When this policy changes, the new version goes up on this page and the date at the top moves. Folio is early and under active work, so expect it to.

Contact

Questions about any of this go to contact@folio.market.