Privacy Policy

1. Introduction

Folio ("we", "us", "our") provides a portfolio tracking dashboard for Nigerian stock market investors. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using Folio, you agree to the practices described here.

2. Information We Collect

We collect the following categories of information:

• Account information: your name, email address, and password (or Google account details if you sign in with Google).
• Contract note data: when you upload broker contract note PDFs, we extract trade details (ticker, units, price, date) to build your portfolio. The PDF file itself is processed in memory and discarded, not stored.
• Portfolio data: your holdings, transaction history, and any dividend records associated with your account.
• Payment information: if you subscribe to Folio Premium, payment is processed by Paystack. We do not store your card details ourselves.
• Usage data: basic technical information such as browser type and general access logs, used only for security and reliability purposes.

3. How We Use Your Information

We use your information to:

• Build and display your portfolio dashboard, including live prices and dividend eligibility.
• Send you transactional emails you have opted into, such as dividend alerts, payout notifications, and weekly summaries.
• Process payments and manage your subscription.
• Maintain the security and integrity of the platform.

4. Third-Party Services

Folio relies on the following third-party services to operate. Each processes a limited scope of your data solely to provide their service to us:

• Supabase hosts our database and handles authentication. Your account and portfolio data is stored on Supabase's infrastructure.
• Resend delivers transactional emails on our behalf, including dividend alerts, receipts, and summaries.
• Paystack processes subscription payments. For card payments, Paystack creates a recurring subscription on your behalf: we store a reference to the subscription (not your card number) so renewals can be processed automatically. Card details are handled directly by Paystack and never touch our servers. Bank transfer payments do not create a recurring subscription.
• Google shares your name and email address with us as part of the sign-in process when you sign in with Google.
• NGX Pulse supplies live stock price and dividend data used to calculate your portfolio value.

5. Data Storage and Security

Your data is stored on Supabase's infrastructure with row-level security enabled, meaning your holdings and transactions are only accessible to your own account. Uploaded contract note PDFs are parsed in memory and never written to permanent storage. We take reasonable technical measures to protect your data, but no system is perfectly secure, and we cannot guarantee absolute security.

6. Your Rights

You can:

• Access and review the personal data associated with your account at any time from your dashboard.
• Update your profile information from Settings.
• Delete your account permanently from Settings, which removes your holdings, transaction history, and account data from our systems.
• Unsubscribe from any individual email notification from the Settings page without affecting your account access.

7. Cookies

Folio uses essential cookies required for authentication and session management. We do not use third-party advertising or tracking cookies.

8. Children's Privacy

Folio is not directed at, and should not be used by, anyone under the age of 18. We do not knowingly collect information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify users by email or through a notice on the dashboard.

10. Contact Us

If you have questions about this Privacy Policy or how your data is handled, reach us at noreply@mail.ngxfolio.cc.