FolioFast

Legal

Privacy Policy

Last updated: April 2026

1. Introduction

FolioFast ("we") provides a platform that helps developers build personal portfolios quickly. This policy explains how we collect, use, and protect your information when using our service at foliofast.site.

2. Data We Collect

2.1 Account Information (via Google OAuth)

When you sign in with Google, we receive from Google:

  • Email address
  • Display name
  • Public profile picture from your Google account

2.2 User-Uploaded Content

When building your portfolio, you may upload images (avatar, project illustrations, etc.). These files are stored on Supabase Storage and are only used to display on your portfolio.

2.3 Technical Data

We may log basic technical information such as IP address and browser type for security and troubleshooting purposes.

3. How We Use Your Data

  • Identifying and authenticating your account
  • Displaying information on your personal portfolio
  • Sending account-related emails (confirmation, password reset)
  • Improving and maintaining the service

We do not use your data for advertising or commercial analytics purposes.

4. Third-Party Services

We use the following trusted service providers to operate FolioFast:

  • Supabase — database storage, session authentication, and file storage (Supabase Storage). Data is stored on Supabase servers per their privacy policy.
  • Google Cloud / Google OAuth — user identity authentication via Google Sign-In per Google's privacy policy.
  • Vercel — application hosting platform.

We do not sell, rent, or exchange your personal information with any third party for commercial purposes.

5. Your Rights

You have full control over your data:

  • Delete individual uploaded images at any time from the portfolio editor.
  • Delete your entire account and all associated data (including images, portfolios, personal information) through account settings.
  • Request data export or deletion assistance by contacting us via email.

When an account is deleted, all your data will be permanently removed from our systems within 30 days.

6. Data Security

We implement appropriate technical security measures including data encryption in transit (HTTPS/TLS), secure authentication via Supabase Auth, and strict access control through Supabase's Row Level Security (RLS).

7. Cookies & Local Storage

We use session cookies created by Supabase Auth to maintain your login state. We do not use tracking or advertising cookies.

8. Policy Changes

We may update this policy from time to time. For significant changes, we will notify you via email or in-app notification. The last updated date is always displayed at the top of this page.

9. Contact Us

If you have questions about this privacy policy or wish to exercise your rights, please contact: