Privacy Policy

1. Who is responsible for your data

Foliocraft is operated by ADILA CONSULTANTS LIMITED("we", "us"), the data controller for the personal data described here. Registered office: 8 Ben Macdui Drive, East Calder, Scotland, EH53 0UY, United Kingdom. You can reach us at support@adilacoonsult.shop or +44 7656064489.

2. What we collect

• Account data: name, email address and authentication details when you register.
• Content you provide: the project descriptions, experience notes, tone choices and any text you enter into the studio, plus the drafts we generate for you.
• File uploads and sample data: any documents or example material you upload to inform a draft.
• Subscription & billing data: plan, billing status and the last four digits and card brand as returned by our payment processor. We never receive or store your full card number.
• Support data: messages you send us and the context needed to help.
• Technical data: IP address, device and browser type, and essential log data needed to run and secure the service.

3. Collection sources (where the data comes from)

We are transparent about our collection sources. The sources of the personal data we hold are:

• Directly from you — when you register, enter content into the studio (your user input), generate drafts, subscribe or contact us.
• Automatically from your device — technical and log data generated by your browser when you use the service.
• From our payment processor (Stripe) — subscription and billing status, and a masked card reference.
• From our AI provider — the generated output returned in response to your prompt.

We do not buy personal data, and we do not build profiles from third-party data brokers or other external sources beyond the processors listed above.

4. Why we use it and our legal bases

• To provide the studio (generate and store your drafts, manage your account) — performance of our contract with you.
• To take payment and manage subscriptions — performance of a contract and compliance with legal obligations.
• To provide support — our legitimate interest in helping users, and performance of contract.
• To secure and improve the service — our legitimate interest in a safe, reliable product.
• To send service and, where you opt in, product emails — consent or legitimate interest, which you can withdraw at any time.

5. AI data handling: your user input, generated output and uploads

User input. The project descriptions, experience notes, tone choices and any files you enter into the studio are your user input. We process user input only to run the tool for you — to send it to the AI model and return your draft, and to store it in your account so you can revisit and export it. Because career and experience details can be sensitive, we minimise what we collect and keep it only as long as needed (see retention).

Generated output. The case studies, About pages, headlines, brand-voice guides and self-introduction scripts the studio produces are your generated output. Generated output is stored so you can return to it, edit it, export it (as Markdown, text or PNG) and delete it. When an AI provider is used, your prompt (user input) is sent to that provider solely to return your generated output.

File uploads and example data. Any documents or sample material you upload are treated as user input, processed only to inform your draft, and deleted with the rest of your content on request.

No model training. We do not use your user input, uploads or generated output to train AI models, and we contractually require our AI provider not to train on your content. You can delete your user input and generated output at any time from your account or by emailing us, and we then remove it (subject to the retention limits below).

6. Payment provider boundary

Payments are processed by Stripe. Card details are entered on Stripe's secure, PCI-DSS compliant systems — they do not pass through or get stored on our servers. We receive only the information needed to fulfil and account for your subscription (for example, plan, status, and a masked card reference). See Stripe's privacy notice for how it processes payment data.

7. Who we share it with

We share personal data only with processors that help us run the service, under data-processing agreements:

• Hosting & infrastructure: Vercel (application hosting) and Supabase (database, authentication and file storage).
• Payments: Stripe.
• Email: our transactional email provider for receipts and service notices.
• AI generation: the AI provider that returns your drafts, bound not to train on your content.

We do not sell your personal data. We may disclose data if required by law or to protect our rights and users.

8. International transfers

Some processors operate outside the UK/EEA. Where data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement/Addendum and EU Standard Contractual Clauses, plus adequacy decisions where they apply.

9. How long we keep it

• Account data: for the life of your account and up to 12 months after closure.
• Studio inputs and generated drafts: until you delete them, or up to 12 months after account closure.
• Billing records: as required by tax and accounting law (typically up to 6 years).
• Support messages: up to 24 months.

10. How we protect it

We use encryption in transit, access controls, least-privilege administration and reputable infrastructure providers. No system is perfectly secure, but we work to protect your data and will notify you and the relevant regulator of a qualifying breach as required by law.

11. Your rights

Under UK GDPR and EU GDPR you may access, correct, delete, port, restrict or object to processing of your data, and withdraw consent at any time. To exercise a right, email support@adilacoonsult.shop from your account address.

California residents (CCPA/CPRA): you may request access to and deletion of your personal information, and you have the right to non-discrimination for exercising these rights. We do not sell or share your personal information as those terms are defined under California law.

12. Automated decisions, children and minors

The studio generates text you review and edit; it does not make automated decisions that produce legal or similarly significant effects about you. Foliocraftis not directed at children. You must be at least 13 to use it, and users aged 13–17 must have a parent or guardian's consent. We do not knowingly collect data from children under 13; if you believe a child has provided data, contact us and we will remove it.

13. Complaints and contact

Contact us first at support@adilacoonsult.shopand we will try to resolve any concern. UK and EEA users also have the right to complain to a supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk).