Privacy Policy

1. Who we are

Foldout is operated by Foldout LLC, a Georgia limited liability company ("Foldout," "we," "us"). Foldout provides software that helps real estate syndication general partners ("GPs") turn their operating notes into polished, branded investor updates. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. It covers our website (foldout.io) and our application (app.foldout.io). If you have questions, contact us at campbell@foldout.io.

2. The information we collect

Information you give us directly:

• Account information: your name, email address, firm name, and password (stored only in hashed form by our authentication provider). If you sign in with Google, we receive basic profile information from your Google account.
• Content you put into Foldout: the operating notes, metrics, commentary, and financial documents you submit for a deal, and information about your investors (for example, names that appear in an update). We process this to generate and deliver your investor updates.
• Branding: logos, colors, and firm details you provide so your updates are white-labeled to your firm.
• Waitlist information: if you join our early-access waitlist, the email address (and optional name and firm) you submit.
• Communications: messages, feedback, or comments you send us.

Information we collect automatically:

• Usage and device data: how you interact with the product (pages viewed, actions taken, approximate timing), plus standard technical data such as browser type and IP address.

We do not intentionally collect special categories of sensitive personal data, and we ask that you not submit any that aren't necessary for an investor update.

3. How we use information

We use this information to: provide, operate, and maintain the service, including generating draft updates from your inputs; authenticate you and secure your account; communicate with you about your account, the service, and product updates; understand and improve how the product is used; protect against fraud, abuse, and security threats; and comply with legal obligations.

4. What we do not do with your data

• We do not train or fine-tune any AI model on your content. Your operating notes, financials, edits, prior updates, and voice profile are used only to generate your own updates.
• We do not pool or combine your content with any other customer's content, and we never use it to generate anything for another customer.
• We do not sell your personal information.
• We do not share your data across customers. Your deals, content, and voice profile are isolated to your own workspace and are not visible to other Foldout customers.

5. AI processing and voice matching

To generate a draft update, the operating notes and related inputs you submit are sent to our AI provider (Anthropic) to produce text from those inputs. We send only what is needed to generate the update, and we rely on our AI provider's commercial terms, under which your inputs and outputs are not used to train their models.

Foldout can also make your drafts progressively sound more like the person signing the letter. To do that, we give that person's own prior updates, your edits, and a short style profile to the AI as context at the moment a draft is generated. This shapes style and tone only. It never changes, invents, or infers facts, and you remain responsible for reviewing every draft before you send it.

This voice matching is not model training. Each draft is a private, one-time generation for you. Your content and voice profile are stored in your own workspace, used only for you, never used to train or fine-tune a model, and never pooled or shared across customers. You can review, edit, and delete your voice profile and your content in your workspace at any time.

6. Service providers (sub-processors)

We will keep this list current as our providers change.

7. Investor (LP) information

When you include information about your investors in an update, you are responsible for having the right to use that information, and Foldout processes it on your behalf and under your direction solely to produce and deliver your updates. You remain responsible for your own obligations to your investors regarding their data. As between you and Foldout, you are the controller of your investors' personal information and Foldout acts as a processor that handles it only on your documented instructions to provide the Service. You are responsible for having a lawful basis for that information and for providing any notices or obtaining any consents your investors are owed.

8. How we protect your data

We use encryption in transit, access controls and row-level security to isolate each customer's data, hashed passwords, and regular backups. No method of storage or transmission is perfectly secure, but we work to protect your information using industry-standard measures. If we become aware of a security breach affecting your data, we will notify you without undue delay and as required by applicable law.

9. Data retention and deletion

We keep your information for as long as your account is active or as needed to provide the service. Your content and voice profile live in your workspace, where you can review, edit, and delete them at any time. You can request access to, correction of, or deletion of your data by emailing campbell@foldout.io, and we will respond within a reasonable time and as required by applicable law.

10. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise any of these, contact campbell@foldout.io. You can also unsubscribe from non-essential emails at any time.

11. Children

Foldout is a business tool and is not directed to anyone under 18. We do not knowingly collect personal information from children.

12. Changes to this policy

We may update this policy as the product and our practices evolve. We will revise the "Last updated" date above and, for material changes, take reasonable steps to notify you.

13. Contact

Questions about this policy or your data: campbell@foldout.io.