Privacy policy

Folio is a browser PDF editor. The controller for this service is the operator reachable at imranmohsin184@gmail.com and on X as @mims3590. This notice is written so a person in the EU or UK can see what is collected, why, and how to use their rights.

What never leaves your device

PDF and image files you open are parsed, edited, and exported in your browser. Folio does not upload the document, does not keep a copy, and does not use document contents to train models. If you ask Grok to edit, Folio sends your instruction and the text lines already read in the browser — including their size and style, not the PDF file — so Grok can retype, format, find and replace, or reorder those pages.

What we do store

• Account identity from Google or X: name, email, profile image, and the session cookie.
• A guest desk, if you skip sign-in: a random id in an httpOnly cookie, the credit balance, and a hash of the network address so the welcome grant cannot be repeated. The address itself is not stored.
• Credit balance and a ledger of why it changed.
• Payment claims you submit: pack, amount, the PayPal note you type, optional X handle and message.
• Consent records for analytics cookies.
• Operational events such as opening a document or exporting. Page-view analytics only if you opt in.

Why (lawful bases)

• Contract: account, credits, and payment claims so the service you asked for can run.
• Consent: optional analytics cookies and page views. You can refuse with no loss of editing.
• Legitimate interests: securing the session, preventing abuse, and keeping a minimal audit of credit grants.

How long

Account data stays until you erase it from the account page. Payment claims and the credit ledger are kept with the account because they are the record of what was granted. Consent logs are kept up to 24 months. After erasure, a tombstone (your internal user id and the time) remains so welcome credits are not granted again on the same login. Document files are not retained because they were never stored.

Who else sees it

Sign-in is brokered so Google or X can authenticate you. Payments happen on PayPal, which is not our processor of record — you pay the operator directly and tell us you did. Hosting and the database may sit in the United States. Asking Grok to edit calls the xAI API with those text lines and your instruction. We do not sell personal data.

Your rights

You can access and download a JSON export, ask for correction by contacting imranmohsin184@gmail.com, withdraw analytics consent, and erase Folio-held data from the account page. You may also lodge a complaint with your local supervisory authority. Erasure does not delete the account at Google or X.

Children

Folio is not directed at children under 16.