Privacy Policy

The data controller for personal data processed through folioV is Rijkly. You can contact us at privacy@foliov.com.

If you are in the EEA, UK, or Switzerland, our legal bases are:

• Contract performance — processing necessary to provide the folioV service you signed up for.
• Legitimate interests — security monitoring, fraud prevention, product improvement using aggregated analytics, and customer support.
• Consent — for optional analytics cookies and marketing emails (you may withdraw consent at any time).
• Legal obligation — where required by law (e.g. fraud investigation, law enforcement requests with valid legal basis).

• To create and manage your account.
• To power AI evaluation: your CV and job descriptions are sent to Anthropic’s API for analysis. Anthropic may not train models on API inputs by default — see their privacy policy.
• To provide the job scanner and pipeline management features.
• To send transactional emails (e.g. password reset, important account notices).
• To send product update emails if you opt in (you can unsubscribe at any time).
• To improve the product through aggregate, anonymised analytics (no individual profiling).
• To detect and prevent fraud, abuse, and security incidents.
• To comply with legal obligations.

We do not sell or rent your personal data. We share data only with the following sub-processors, under contractual data-processing agreements:

We may disclose your data to law enforcement or regulators where required by valid legal process, in which case we will notify you unless legally prohibited from doing so.

Some sub-processors (Anthropic, Vercel, Resend) are based in the United States. When we transfer personal data from the EEA/UK to the US, we rely on Standard Contractual Clauses (SCCs) or other approved transfer mechanisms. You may request a copy of the applicable safeguards by emailing dpa@foliov.com.

• Active accounts: data retained for as long as your account is active.
• Deleted accounts: account data deleted within 30 days. Backups purged within 90 days.
• Legal holds: data may be retained longer if required by law or ongoing legal dispute.
• Logs: server and access logs retained for up to 90 days for security purposes.

Depending on your jurisdiction you may have some or all of the following rights:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate data.
• Erasure — request deletion of your data (“right to be forgotten”).
• Restriction — ask us to pause processing while a dispute is resolved.
• Portability — receive your data in a machine-readable format (JSON/CSV).
• Objection — object to processing based on legitimate interests.
• Withdraw consent — at any time for consent-based processing.
• CCPA / CPRA (California) — right to know, delete, opt-out of sale (we do not sell data), and non-discrimination.

To exercise any right, email privacy@foliov.com. We will respond within 30 days (or sooner where required by law). We may need to verify your identity before fulfilling a request.

If you believe we have not adequately addressed your request, you have the right to lodge a complaint with your local data protection authority.

We implement appropriate technical and organisational measures including TLS encryption in transit, AES-256 encryption at rest (Supabase), row-level security (RLS) so each user can only access their own data, and strict access controls. No method of transmission or storage is 100% secure; in the event of a personal data breach we will notify affected users and relevant supervisory authorities as required by law.

folioV is not directed at, and does not knowingly collect data from, individuals under the age of 16. If we become aware that we have collected personal data from a child under 16 without verifiable parental consent, we will delete that information promptly. If you believe we have collected data from a minor, please contact privacy@foliov.com.

folioV uses large language models (LLMs) provided by Anthropic to analyse your CV and job descriptions and produce evaluation reports. By using the AI evaluation feature you acknowledge that:

• Your CV content and job description text will be transmitted to Anthropic’s API.
• Outputs are automated assessments and should not be relied upon as professional career advice.
• You remain responsible for verifying any AI-generated content before acting on it.
• Rijkly is not liable for decisions you make based on AI-generated outputs.

We may update this Privacy Policy from time to time. Material changes will be communicated via email (to your registered address) or via an in-app notice at least 14 days before taking effect. Continued use of folioV after the effective date constitutes acceptance of the revised policy. The date at the top of this page indicates when it was last updated.

For any privacy-related questions, data subject requests, or to reach our Data Protection contact: