Back to Home
Legal & Privacy Compliance

Privacy Policy

Last Updated: • Effective Date: January 1, 2026

1. Overview and Commitment

At Folioblaze ("we," "our," or "us"), protecting your personal information and respecting your privacy is our foundational priority. Folioblaze is a zero-code portfolio builder, blogging platform, and AI assistant service designed to showcase your professional work to clients, recruiters, and the public.

This Privacy Policy explains what personal information we collect, why we collect it, how it is processed and secured, and your rights under global privacy regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Information We Collect

We collect information in three ways:

  • Information You Provide Voluntarily: When you register an account, publish a portfolio, write a blog post, or configure your profile, you provide your name, email address, biographical details, work history, project descriptions, case studies, social profile links, and contact information.
  • Recruiter & Client Inquiries: When visitors submit a message via your portfolio's contact form, we collect their sender email, timestamp, and message body so you can review and reply in your private dashboard.
  • Automated Device & Usage Telemetry: When you or visitors view a Folioblaze page, our servers log aggregated, privacy-preserving technical metadata such as browser user agent, device category (desktop, mobile, tablet), referral URLs, and country-level geographic region. We do not use third-party cross-site trackers.

3. AI Assistant & Profile Data Training

Folioblaze includes a personalized 24/7 AI chatbot assistant embedded on your public portfolio page. We are transparent about how your data is used with AI:

  • Isolated Knowledge Base: Your AI assistant only references the public data you explicitly supply in your portfolio (bio, skills, projects, and public blogs).
  • No Public Model Poisoning: We do not sell or feed your private personal data or confidential portfolio drafts into public foundation models for generalized third-party training.
  • Chat Transparency: Conversations between visitors and your AI assistant are processed securely in real time to provide accurate responses based on your published profile.

4. How We Use Your Information

We use the collected information for the following legitimate business purposes:

  • To host, render, and deliver your server-side portfolio and blog globally via edge CDN.
  • To optimize your public pages for Google search indexing and structured rich snippets.
  • To provide customer support and notify you of critical security or system updates.
  • To protect against abuse, bot attacks, DDoS incidents, and unauthorized account access.
  • To calculate aggregate traffic statistics for your personal creator dashboard.

5. Cookies and Local Storage

Folioblaze uses essential cookies and local storage tokens solely for session authentication, security CSRF protection, and dark/light theme preferences (folioblaze-theme). We do not employ third-party advertising tracking cookies or invasive cross-domain marketing pixels.

6. Your GDPR and CCPA Privacy Rights

Regardless of your geographical location, Folioblaze respects your fundamental data rights:

  • Right to Access: You may request a complete export of all personal data we hold about you.
  • Right to Rectification: You can edit or update any of your portfolio information at any time via your dashboard.
  • Right to Erasure ("Right to be Forgotten"): You can delete your account and all associated portfolios, blogs, and stored messages permanently.
  • Right to Data Portability: You can export your case studies and markdown blogs in standard machine-readable formats.
  • Right to Non-Discrimination: We will never penalize or restrict features for users exercising their privacy rights.

7. Data Retention and Security Measures

We employ industry-standard encryption protocols, including TLS 1.3 in transit and AES-256 at rest. All infrastructure is hosted in SOC-2 compliant data centers. We retain your data for as long as your account remains active. Upon explicit account deletion, all personal data is permanently wiped from our production databases within 30 days.

8. Contact Our Privacy Officer

If you have any questions about this Privacy Policy, wish to file a data deletion request, or desire to exercise your GDPR/CCPA rights, please reach out to our dedicated privacy desk: