Privacy Policy

Matrix Minds IT, Cairo, Egypt, operates Folier and is the controller of the personal data described here. Questions, requests and complaints go to matrixmindsit@gmail.com.

• Account data — your name, email address and a password that is stored only as a cryptographic hash, never in readable form. If you sign in with Google we store the identifier Google gives us and your verified email, never a password.
• What you put in your portfolio — the text, links, images and any CV you upload. You choose all of it, and you can edit or delete any of it at any time.
• Payment data — the amount, currency, date, status and the payment provider's own transaction reference. We never receive, see or store your card number, CVV or wallet PIN: those are entered on the provider's own secure page and never reach our servers.
• Technical data — a session cookie, and ordinary server logs (IP address, request, timestamp) kept for security and debugging.

• To run your account: signing you in, verifying your email address, resetting a password.
• To provide the service: storing, rendering and publishing the portfolio you build.
• To take payment and manage your subscription, including reminders before a period ends and notices when a payment is outstanding.
• To answer support requests and send service messages about your account. We do not send marketing email you did not ask for, and we never sell or rent your data to anyone.
• To keep the service secure and to meet legal and accounting obligations.

A portfolio you publish is public by design: everything in it is served to anyone with the link and can be indexed by search engines and shown in social previews. A portfolio you have not published is not served to anyone, never appears in our sitemap or structured data, and is visible only to you when signed in. Unpublishing takes the page offline; search engines may still show a cached copy for a while, which is their cache and not ours.

One cookie, for signing in. It holds your session, is marked HttpOnly and SameSite so other sites cannot read it, and expires after seven days. There are no advertising cookies, no third-party trackers and no cross-site profiling on this site — which is why you are not asked to dismiss a consent banner.

We use a small number of specialist providers, each handling only what its job requires and none of them permitted to use your data for their own purposes:

• Our payment provider, which processes card and wallet payments and holds the payment credentials we deliberately never see.
• Our image provider, which stores and delivers the pictures you upload through a global CDN.
• Our email provider, which delivers verification, password-reset and billing emails.
• Our hosting and database providers, which run the application and store its data.
• Where CV import is enabled, the text of a CV you upload is sent to an external language-model provider purely to extract its fields into your portfolio. It is not used to train anyone's model. If you would rather not have that happen, fill the sections in by hand instead — the feature is optional.

Some of these providers operate outside Egypt, so your data may be processed abroad under contractual terms requiring protection equivalent to this policy.

• Account and portfolio data: while your account exists, and deleted when you delete the account.
• Payment and invoice records: at least 18 months after the transaction, because payment rules and tax law require us to be able to produce them.
• Server logs: a short rolling period for security purposes.

You do not have to ask us: Account settings in your dashboard has a Delete account option, which asks you to type your email address — and your password, if the account has one — because it cannot be undone. Confirming it deletes, immediately and permanently:

• Your account record, including your name, email address and password hash.
• Every portfolio on the account and all of its sections — the text, links, image references and the parsed contents of any CV you imported.
• Any Google sign-in linked to the account, your notifications, and any outstanding password-reset or email-verification links.
• Your subscription record and its payment attempts. Any published portfolio goes offline at once and its URL is released.

Two honest exceptions. Images and CV files you uploaded are stored by our image provider and served from its CDN; deleting your account removes every reference to them from Folier, but a file whose exact URL someone already holds may remain reachable there — email us and we will have those purged too. And the payment and invoice records described above are kept for as long as tax and payment rules require, whether or not the account still exists.

Under Egyptian Personal Data Protection Law No. 151 of 2020 you may ask us to give you a copy of your data, correct it, delete it, restrict or object to a particular use, or withdraw a consent you gave. Email matrixmindsit@gmail.com from the address on your account and we will act within 30 days. You also have the right to complain to the competent Egyptian data protection authority.

• Everything travels over HTTPS, and passwords are stored only as hashes.
• Payment pages are hosted by the payment provider, so card data never touches our systems — there is nothing of that kind for us to leak.
• Payment confirmations are accepted only when cryptographically signed by the provider, so a forged confirmation cannot activate or extend a plan.
• Access to production data is limited to the people who operate the service.
• If a breach ever affects your personal data, we will tell you and the authority as the law requires.

Folier is meant for professionals presenting their own work and is not directed at children under 16. We do not knowingly collect their data; if we learn that we have, we delete it.

If we change how we handle personal data we will update this page and, for anything material, email account holders before it takes effect. The date at the top always shows the current version. See also our Terms & Conditions, Refund & Cancellation Policy and Delivery Policy.