Privacy Policy
Draft — under review by counsel.
Last updated: [DATE]
Folio is talent-management software used by modeling agencies. This policy explains what we collect and how we handle it, for three groups: agency users (agents/bookers), talent (models whose information agencies manage in Folio), and casting contacts (clients who receive packages).
What we process
For agency users: account details (name, email, role), the content you create (briefs, submissions, notes), and product usage signals (searches run, profiles opened) used solely to power suggestions inside Folio. Usage signals are never shown to your agency's administrators or colleagues, and you can turn them off in Settings at any time.
For talent: the profile your agency maintains — name, photographs, measurements, dates of birth, representation history, availability, self-reported characteristics (such as ethnicity, recorded exactly as self-described and never inferred by us), and work history. Folio processes this on the agency's behalf; your relationship and agreements are with your agency. Agencies may manage data about minors in the ordinary course of the industry; we treat all talent data, and minors' data especially, with strict access controls.
For casting contacts: name and email if an agency stores them or if you volunteer them when reviewing a package (“Reviewing as…”), your selections and feedback on packages, and basic technical logs when you open a package link (timestamp, browser type). We do not build advertising profiles and we do not track you across sites.
How it's protected
Every agency's data is isolated at the database layer — one agency can never query another's records. Data is encrypted in transit and at rest. Photographs and files live in access-controlled storage. Access by Folio personnel is limited to what's needed to operate and support the product.
What we never do
- Sell personal data.
- Share one agency's data with another.
- Use talent photographs for anything other than displaying them to the agency and the casting recipients the agency chooses.
- Infer sensitive characteristics about people.
AI processing
Folio uses AI (Anthropic's Claude) to parse casting emails into structured briefs and to power search and suggestions over your agency's own data. AI processing operates only on your agency's data for your agency's benefit; it is not used to train third-party models.
Aggregated insights
We may produce aggregated, anonymized industry statistics (for example, average response times across all agencies). These never identify an agency, a model, or a casting contact.
Your rights
Agency users and casting contacts can request access, correction, or deletion of their personal data at privacy@foliohq.app. Talent should direct requests to their agency (the data controller); we execute erasure on the agency's instruction, including pseudonymization of historical records, within 30 days. EU/UK individuals have GDPR rights (access, rectification, erasure, restriction, portability, objection) and may lodge complaints with their supervisory authority.
Retention
Agency data is retained while the agency has an account and deleted or returned within 30 days of account closure, except minimal records we must keep by law. Email-derived records (casting briefs) follow the same rule.
Sub-processors
Supabase (database, auth, storage), Vercel (hosting), Resend (email), Anthropic (AI processing), Stripe (payments, when enabled).
Contact
[FOLIO ENTITY NAME] · [ADDRESS] · privacy@foliohq.app