← Folio Tax

Privacy Policy

How we collect, use, and protect your information.

Last updated: April 23, 2026

1. Overview

Primetimeindy Holdings LLC ("we") operates Folio Tax at folio.tax. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights.

2. Information We Collect

Information you provide

  • Account: name, email, password (hashed), and profile details
  • Billing: payment information (processed by Stripe — we never store your full card number), billing address
  • Support: messages you send us, including attachments

Information collected automatically

  • IP address, browser type, device information, OS
  • Pages visited, actions taken, timestamps
  • Cookies and similar tracking technologies (see our Cookie Policy)

3. How We Use Information

  • Provide, maintain, and improve the Service
  • Process payments and send billing-related notifications
  • Authenticate your identity and prevent fraud
  • Communicate about updates, security notices, and (with your consent) marketing
  • Comply with legal obligations

4. Who We Share Information With

We never sell your personal data. We share information only with:

  • Service providers that help us operate the Service, under strict confidentiality obligations:
    • Stripe (payment processing)
    • Vercel (hosting & deployment)
    • Supabase (database & authentication)
    • Resend (transactional email delivery)
    • PostHog (product analytics, if enabled)
  • Legal authorities when required by law, court order, or to protect our rights
  • A successor entity in the event of a merger, acquisition, or sale of assets — we will notify you in advance

5. Data Retention

We retain your information as long as your account is active or as needed to provide the Service. After you close your account, we delete or anonymize your data within 90 days, except where we are legally required to retain it (e.g., tax records for 7 years).

6. Security

We use industry-standard security measures including TLS encryption in transit, encryption at rest for sensitive data, access controls, and regular security reviews. No system is perfectly secure — we encourage you to use strong, unique passwords and enable two-factor authentication where available.

7. Your Rights

Depending on your location, you may have the right to:

  • Access — request a copy of the personal data we hold about you
  • Correct — update inaccurate or incomplete data
  • Delete — request deletion of your data (subject to legal retention)
  • Opt out — unsubscribe from marketing communications anytime
  • Portability — receive your data in a portable format

To exercise any of these rights, email support@primeholdco.com. We respond within 30 days.

California residents (CCPA)

California residents have the right to know what personal information we collect, request deletion, and opt out of "sale" of personal information (we do not sell your data). To exercise these rights, contact us at the email above.

EU/UK residents (GDPR)

Our legal bases for processing are: contract (to provide the Service), consent (for marketing), legitimate interest (fraud prevention, improvement), and legal obligation. You have the right to lodge a complaint with your local supervisory authority.

8. Children

The Service is not directed to children under 13 (or under 16 in the EU/UK). We do not knowingly collect data from children. If you believe a child has given us information, contact us and we will delete it.

9. International Transfers

We are based in the United States. If you access the Service from outside the US, your information will be transferred to, stored, and processed in the US. By using the Service, you consent to this transfer.

10. Changes to This Policy

We may update this policy. We will notify you of material changes by email or by posting notice in the Service at least 14 days in advance. Continued use after the effective date constitutes acceptance.

11. Contact

Questions? Reach us at support@primeholdco.com.