A little clarity
about your privacy.

Invoice saving is your choice.

Invoice drafts stay in the current tab until you download a draft backup or explicitly choose Save to account. Classic and Minimal PDFs with preset colors, no payment QR code, and no custom footer are generated in your browser. Other designs, custom colors, payment QR codes, or custom footers send the invoice details, logo, and payment instructions to Folio for processing in server memory; exporting does not create a saved invoice record. Hosting infrastructure may buffer requests. No invoice content is automatically saved in browser storage.

Save to account stores the full invoice, including customer details, logos, and payment instructions, in a private Supabase record. Every account can keep up to 200 invoices for free. Only the owning account can read and manage its library through the application. Authorized service operators retain infrastructure access. Sign in to create, read, update, and delete your saved invoices. Deleting an account removes its saved invoice records. PDF and JSON files downloaded to your device are separate copies. Folio does not send invoices or collect customer payments.

Standalone signature images stay in your tab.

The signature generator processes your typed name, drawing, and chosen image in the current browser tab. It does not upload or save signature content to Folio or browser storage. Clearing the tool or refreshing discards the working signature. PNG files you download remain on your device. Website and font requests still use the network. If you later add a signature to a PDF in the editor, that document uses the private cloud saving described below.

Image compression does not upload or save your images.

The image compressor reads and processes selected images in the current browser tab. Source images, previews, and compressed results are not uploaded to Folio or written to browser storage. Clear all or refresh to discard the batch. Images or ZIPs you download remain on your device. The website still loads its scripts and other assets over the network.

Editing can run in your browser while files save privately.

The free PDF annotation, organizing, form, image conversion, and text extraction tools process files in your browser. The main editor separately uploads each opened PDF to private Supabase Storage so refreshing can restore your work.

Some tools use server processing.

The PDF text editor and password protection tool send your PDF to Folio when you explicitly start processing. Password protection also sends the chosen opening password. These operations hold the file and password in memory in a separate processing process; the application does not write them to a document database or object storage. The process is discarded after completion or timeout. Downloaded results are returned to your browser. Hosting infrastructure may buffer requests while processing them.

Accounts and billing use Supabase and Lemon Squeezy.

When connected, Supabase handles Google and email sign-in and stores account, subscription, and processing-count records. The browser stores authentication tokens so you can remain signed in. Lemon Squeezy hosts checkout and the billing portal and handles payment information; Folio does not collect card numbers. These services receive the information needed to provide sign-in and payments. Google supplies your basic profile and email when you choose Google sign-in; Folio does not request access to Google Drive or Gmail. Your PDF is never sent to Lemon Squeezy. Signed-in checkout recovery saves the source PDF and edits to private Supabase Storage.

The main editor saves your workspace automatically.

Opening a PDF in the editor uploads its source to private Supabase Storage. Edit instructions, added images, form values, text changes, page order, and the current page are saved to the private document record in Supabase. Files and edits are accessible only through the owning account or guest session. Authorized service operators retain infrastructure access.

Guest workspaces expire after 24 hours. An HttpOnly session cookie lets the same browser recover them after refresh; clearing cookies removes that access. Signing in attaches the open workspace to your account and removes the guest expiry. Account files remain until deleted from My files. Editor drafts are saved to private cloud storage. Wait for the editor to show “All changes saved” before refreshing; interrupted uploads and unsaved changes may not be recoverable. Expired guest objects are removed by scheduled cleanup, with a two-hour grace period for upload tokens and retries when storage is unavailable.

Moving a selected PDF from a translated page to the English editor briefly stores the file in your browser so it survives the page reload. This transfer can be opened once within five minutes and is deleted when the editor reads it. Abandoned transfers are removed on the next transfer after expiry, or when you clear this site’s browser data. This temporary transfer is separate from cloud draft saving.

Older browser drafts can be reviewed and moved from My files. A browser copy is removed only after its cloud upload succeeds. Existing browser data remains until you move it or clear site data. Account deletion requests go through dashboard support.

Text-editing recovery drafts saved during earlier checkout flows remain in private Supabase Storage until removed. Free downloads do not start a checkout recovery save. They contain the source PDF, text inspection, and edits, and are not restored after seven days. Folio attempts to remove the recovery copy after a successful download or when you choose another PDF. Failed deletions may require a retry or operator cleanup. Opening passwords are never saved. Other standalone tools keep guest work in the current tab; the main editor uses the guest recovery described above. Clearing browser data does not remove cloud copies.

Short links are saved to your account.

The URL shortener stores destination URLs, titles, aliases, and creation and update dates in Supabase. Only your account can list and manage its links. Anyone with a short URL or its QR code can open the destination; shortening does not make a destination private. QR images are generated in your browser. Folio does not record individual click analytics for short links; hosting infrastructure may keep request logs. Creation counters enforce daily and per-minute limits.

Deleting a link removes its destination and title and stops the redirect. Account deletion removes saved links and creation counters. Only the alias remains reserved to prevent another account from reusing an old shared address. Existing links keep working unless deleted or the account is suspended.

Support and administration records.

Support inquiries store your name, email, message, and conversation in Supabase. Authorized super admins can review inquiries and manage account access, subscriptions, pricing, and site settings. Administrative changes are recorded in an activity log. Replies appear on the support page; email notifications are not currently sent. Support and activity records have no automatic deletion schedule in this version.

You can remove saved copies.

Delete a PDF from My files to remove it from your cloud library. A file you downloaded is separate and remains wherever you saved it. Keep downloaded backups of work you want to preserve.

The website still needs hosting.

Your browser requests website assets from Folio’s host. Hosting infrastructure may handle IP addresses, browser details, and request logs. Vercel Web Analytics is enabled only on Vercel deployments and collects page views and aggregated usage statistics. Local document processing does not send document contents; editor uploads and server processing use the services described above.

Advertising and your choices.

Folio does not currently display ads or load Google advertising scripts. If advertising is introduced, Google and its partners may use cookies to personalize ads based on previous visits to this and other websites. Advertising consent choices will be provided where required before enabling those ads.

Manage Google ad personalization · How Google uses data from partner sites

A shared device needs a little care.

Older browser drafts and open editor tabs can be accessed by someone using the same browser profile. On a shared computer, save your work, sign out, and close your editor tabs when you are done.