Skip to main content

Trust

Security

Connected context stays scoped, encrypted, and reviewable — before anything moves.

SIGN-INIdentity only.Reads nothing.a separate, revocable grant eachGMAILreads threads you receiverevokeCALENDARreads events and holdsrevokeDRIVEreads files you openrevokeOUTLOOKreads mail and eventsrevokeSIGN-INIdentity only. Reads nothing.a separate, revocable grant eachGMAILreads threads you receiveCALENDARreads events and holdsDRIVEreads files you openOUTLOOKreads mail and events

Access model

Sign-in is identity only. Each source connects through its own OAuth grant, scoped to what that feature reads — and disconnecting it revokes that token immediately.

Read-only by default

Foldera observes and drafts. It never sends an email, edits a file, or takes any action on a connected account unless you explicitly approve that specific move.

AUTOMATICReads connected sourcesReconstructs what changedWrites a draftSTOPS HERENothing crosses without you.Approval is per move, not a setting.REQUIRES APPROVALSend an emailEdit a fileAny outward actionAUTOMATICReads connected sourcesReconstructs what changedWrites a draftSTOPS HERENothing crosses without you.Approval is per move, not a setting.Send an emailEdit a fileAny outward action

Encryption

Signal content and OAuth tokens are encrypted separately at the storage layer. Data in transit uses TLS.

Sub-processors

Supabase (database), Vercel (hosting), Anthropic (language model), Resend (transactional email), and Stripe (billing) run core product infrastructure. None of them receive your data for any purpose beyond serving your Foldera account.

ONE SIGNALExtractedday 0Purged automaticallyday 180scheduled job — not a request you fileONE SIGNALExtractedday 0Purged automaticallyday 180a scheduled job — not a request you file

Data retention

Extracted signals older than 180 days are purged automatically by a scheduled job. Deleting your account removes your data according to the same retention policy.

Never trained on

Your content is not used to train models. It is processed to generate your outputs and nothing else.