Skip to main content
Folio
Nº 11Privacy notice - how Folio handles personal data

Privacy

Privacy notice.

This notice explains how Folio handles personal data when you visit heyfolio.ai or contact the team.

At a glance

We collect what is needed to answer enquiries, protect the service, and—with your consent—improve our website and product through analytics.

Last updated · 21 July 2026

Who is responsible

Veriteer Ltd is the controller responsible for the personal data described in this notice. Folio is its service available at heyfolio.ai. Veriteer Ltd is a company registered in Northern Ireland under company number NI644852, with its registered office at 23 High Street, Moneymore, Magherafelt, Northern Ireland, BT45 7PA. Privacy questions and rights requests can be sent to hello@heyfolio.ai.

Information we handle

Contact enquiries: the name, email address, company, message, and any other information you choose to provide, together with delivery and anti-abuse metadata. Name, work email, and message are required so we can understand and respond to your enquiry. Company and team size are optional. If you do not provide the required fields, we cannot submit or answer the enquiry.

Service and security information: request identifiers, timestamps, route and response information, browser or network signals used to protect forms, and diagnostic error information. Contact-form contents are excluded from operational logs.

Optional analytics: if you accept analytics, PostHog processes page views, interactions, attribution, device and browser information, performance, errors, diagnostic console messages, heatmaps, and privacy-masked session replays. This visit may be connected with your Folio account after you sign in, giving Folio a continuous view of the website journey and product usage. We do not use this profile to make solely automated decisions that have legal or similarly significant effects.

We receive enquiry information directly from you. Browser analytics, operational, and security information comes from your browser or device, the requests it sends, and the service providers described below.

Why we use it

We use enquiry information to respond to you, take steps you request before a possible contract, and manage our relationship with prospective customers. Where your enquiry concerns steps before entering a contract, the lawful basis is UK GDPR Article 6(1)(b). Otherwise, we rely on our legitimate interests under Article 6(1)(f) in answering enquiries and maintaining appropriate prospective-customer and business records.

We use limited operational and security information for our legitimate interests in protecting the service, preventing abuse, diagnosing faults, and keeping the website reliable. BotID may automatically reject a submission that appears to be automated abuse. This does not produce a legal or similarly significant effect. If a genuine enquiry is rejected, email hello@heyfolio.ai instead.

We rely on your consent for PostHog analytics, error analytics, and session replay. You can withdraw that consent at any time using the analytics control in the footer.

Service providers

We use Vercel to host and protect the website, including Vercel BotID for contact form security; Resend to deliver contact-form emails; and PostHog EU Cloud for consented browser analytics, error analytics, and session replay. PostHog also receives limited operational logs needed to monitor the contact service; those logs exclude contact-form contents and direct form identifiers. These providers process information to supply their services to Folio and may use approved subprocessors.

Where a provider processes information outside the UK or European Economic Area, the transfer is protected by applicable UK adequacy regulations or, where required, the UK International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses, together with provider security measures. Email us to request more information about the safeguard used for a particular transfer.

How long we keep information

Enquiry records are normally retained for up to 24 months after our last meaningful contact, and may be kept longer where needed for a contract, legal claim, or legal obligation. Limited operational and security records are kept only for as long as reasonably needed to protect and troubleshoot the service. PostHog event and error data may be retained for up to seven years; privacy-masked session recordings are retained for up to 30 days. Browser storage durations are listed in our cookie policy.

Your rights

Depending on the circumstances, you may ask for access to your personal data, correction, deletion, restriction, portability, or object to its use. Where we rely on consent, you can withdraw it at any time without affecting earlier lawful processing. Send a request to hello@heyfolio.ai.

You can also complain to the UK Information Commissioner's Office. We would appreciate the opportunity to address your concern first.

Changes to this notice

We review this notice when our services, providers, or data practices change. The date above shows when it was last updated.