Trust & portability
This page summarizes how Folderling stores, processes, shares, deletes, and exports data. It is written for practical product evaluation; the Privacy Policy remains the complete legal description.
Last reviewed 18 September 2026 · Owner: Folderling
Folderling uses hosted infrastructure and service providers, including Neon for database hosting, AWS for document and export storage, Fly.io for the application, and Cloudflare for network delivery and security.
Providers may process data in the European Economic Area and other countries under their contractual and legal safeguards.
Folderling uses encrypted network connections, access controls, protected mobile credential storage, and operational monitoring.
Access is scoped to folders. Each folder has an owner, and invited members can have an editor role. Folderling does not provide anonymous public document links.
Folderling extracts text and metadata to organize and search documents. It uses OpenAI's API for embeddings, Inbox suggestions, and document questions.
Relevant document text, existing tag names, questions, or retrieved passages may be sent to OpenAI when those features are used. Suggestions and answers can be incorrect and should be reviewed against the source document.
Folderling keeps account data and documents while an account is active. After a valid deletion or cancellation request, account data and files are removed from active systems within 30 days.
Legal, billing, security, fraud-prevention, and dispute obligations can require limited continued retention. Residual backups follow their normal rotation schedules.
Your way out is part of the product
Request a ZIP for a folder. It contains the stored original files plus a
manifest.yaml
listing each exported document's identifier, filename, title, date, and tags.
Exports are portable records, not a live synchronization protocol or a guarantee that every other document system can import every field.
Read the full policy for subprocessors, international transfers, legal bases, cookies, account rights, and contact information.