Privacy

Operator and contact

I'm Cameron Westland. I operate Folded Page from Ontario, Canada, and handle privacy questions at cameron@foldedpage.app. This policy covers foldedpage.app and the Folded Page connection you use with an assistant. Folded Page is for adults aged 18 and older in Canada and the United States.

Information I collect and use

I use your email address to sign you in, identify your account, send account notices, and answer support requests. I store your timezone, subscription status, billing identifiers, and connection records to manage access and date your entries. I also record your confirmation that you are at least 18 and live in Canada or the United States, policy version, consent choices, and acceptance time.

I store the entries you save, including your words, reflections, revisions, dates, and source information. I also store summaries that your assistant creates and search data derived from entry text. I use these records to provide saving, reading, editing, search, and export. Your assistant decides which text to send when it calls Folded Page; review what you ask it to save.

If you save a Story of you, I store its approved text, earlier versions, and any related-entry references. Your connected assistant can read and update it with your agreement. Folded Page stores the story; your assistant writes it.

I use operation counts, durations, and error categories to monitor the service. These application statistics exclude journal text, account identifiers, and access tokens. Hosting and authentication providers may also record request metadata, such as IP addresses, for operating and securing their services.

I also use account creation times, subscription status, and successful entry-save records to measure how many people start and return to journaling. These product statistics are available only to authorized owner accounts and exclude internal test accounts. I do not use journal text to calculate them or send them to a third-party analytics service. When an account is deleted, I retain weekly statistical counts without account identifiers, email addresses, or individual activity histories.

If you contact me, I use your message and contact information to handle your request. Share only the journal content needed for that request. I use OpenAI Codex to review support messages and prepare replies, so the message and contact information may be processed by OpenAI. I review replies before sending them.

The assistant you connect

Approving a connection lets that assistant read and search your journal, save and edit entries, append text, and move entries to trash, subject to your account access. It may receive sensitive text from earlier entries when it reads or searches your journal.

Your assistant provider handles conversations and journal text it receives under its own terms and privacy policy. You can disconnect an assistant in Account. That stops future access through the connection; it does not remove copies the provider already holds.

Providers I use

• I host the application with Fly.io in Toronto, Canada.
• I store account information, journal content, and search data in Supabase in Ohio, United States, which I also use for authentication.
• I send entry text and search queries to Voyage AI to create embeddings, numerical representations that help find entries with related meanings. I have opted out of Voyage model training and content retention. Under this setting, Voyage deletes submitted text after processing it and excludes it from model training. Voyage may retain service metadata.
• I send login messages and account notices, and receive support mail, through Resend in its US East region.
• You enter payment details through Stripe. I use Stripe for subscription management and refunds, and store billing identifiers and subscription status.

These providers process information to perform the functions described here. I may also disclose information if applicable law requires it. I process journal text in readable form on the application server and through the search provider.

Information is processed in Canada and the United States. Providers may also use other providers or process information in other countries under their own policies. Information processed outside your country can be subject to that country’s laws and lawful government access.

Cookies

I use authentication cookies to keep you signed in and authorize account actions. Blocking those cookies can prevent you from using your account. The application uses no advertising trackers or third-party marketing analytics.

Retention and deletion

I keep your journal while you maintain your account, subject to the deletion choices and expiry rules below. Editing an entry preserves earlier revisions; your export includes those revisions.

Moving an entry to trash removes it from normal reads and search. You can restore it for 30 days. After that period, I delete it from active storage through the maintenance process. You can choose permanent deletion on the website before those 30 days end.

Your story is a separate piece of writing. Editing or deleting a related entry does not change its approved text. Account lets you delete the story and all its versions while keeping your journal entries. Exports include story versions, and closing your account deletes them with the rest of your journal.

After paid access expires, I retain your journal for 365 days so you can read, search, export, or delete it without renewing. I send a notice before account deletion and allow at least seven days after that notice before deleting the account.

Closing your account ends access. I cancel future billing before deleting your account and journal from active storage. Supabase keeps daily database backups for seven days, so deleted data can remain in those backups until they expire. These backups are not part of normal journal access.

Support, billing, and provider records

For copies I keep outside provider systems, I delete support correspondence and downloaded attachments within 90 days after a case closes, unless a dispute or legal obligation requires longer retention. Provider-held copies follow each provider’s retention policy and may expire earlier or remain longer for their own obligations.

I keep necessary billing and tax records for six years after the relevant calendar year, or longer when required by law. Those records are separate from journal content. Stripe may retain payment and transaction records for its own fraud-prevention, regulatory, and legal obligations.

Supabase’s project logs and Fly’s searchable application logs have seven-day retention windows. Resend’s standard message-data retention is 30 days, with backups retained for seven days. These periods do not cover every security, account, financial, or legal record a provider may hold under its own policy.

Access, correction, and privacy requests

You can inspect and correct entries on the website, download your journal from Account, and delete entries or close your account. For other access or correction requests, or to raise a privacy concern, email me. I may need to verify your identity before sharing account information or carrying out a request.

I respond to requests within the time required by applicable law. You can also contact the Office of the Privacy Commissioner of Canada or another regulator with authority over your concern.

Changes to this policy

I will date published revisions and notify account holders of material changes to my privacy practices. If a new use or disclosure requires consent, I will request it before starting that use or disclosure.