Access model
Sign-in is identity only. Each source connects through its own OAuth grant, scoped to what that feature reads — and disconnecting it revokes that token immediately.
Trust
Connected context stays scoped, encrypted, and reviewable — before anything moves.
Sign-in is identity only. Each source connects through its own OAuth grant, scoped to what that feature reads — and disconnecting it revokes that token immediately.
Foldera observes and drafts. It never sends an email, edits a file, or takes any action on a connected account unless you explicitly approve that specific move.
Signal content and OAuth tokens are encrypted separately at the storage layer. Data in transit uses TLS.
Supabase (database), Vercel (hosting), Anthropic (language model), Resend (transactional email), and Stripe (billing) run core product infrastructure. None of them receive your data for any purpose beyond serving your Foldera account.
Extracted signals older than 180 days are purged automatically by a scheduled job. Deleting your account removes your data according to the same retention policy.
Your content is not used to train models. It is processed to generate your outputs and nothing else.