Privacy Policy

The controller of the personal data of Folioss users is Jordi Espies García, Spanish tax ID (NIF) 49810779R, with address at Carrer Llobregat 134, 08903 L'Hospitalet de Llobregat (Barcelona), who runs Folioss as a self-employed individual. You can contact the privacy team by writing to privacidad@folioss.com.

We process data in compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

To provide the service we process the following categories of data:

• Account data: name, username, email address, encrypted password and, if you sign up with an external provider, the basic data from that provider (Google, GitHub, etc.).
• Folio data: its public address, which we explain below in "Your folio's address", and the content you choose to publish (bio, projects, images, links, attachments).
• Data from your profile in the network, if you choose to switch it on: what you do, where you work, how much you charge and the rest of your answers to the form. We list them one by one below, in "Your profile in the network".
• Usage data: pages visited within the platform, technical errors and aggregated metrics to improve the product.
• Payment data: when you buy a plan or an NFC card, payments are handled by external PCI DSS–certified providers. We do not store your card number.
• Support data: any information you send us when you contact the team.
• Moderation data: if someone reports content, or you report something, we keep what was reported, when, and what we decided. We explain this in "Reports and moderation".
• Data from the Instagram or TikTok accounts you connect to a folio with the "Social Media Feed" block: your profile, your latest posts and the access keys, encrypted. We describe them in "Connected Instagram and TikTok accounts".
• If you create your account from a Folio's window (by clicking its "Created with Folioss" badge and then "Claim your @" or "Sign up free"), we store in your account which Folio it was, whose it was and the date. Nothing else: not your IP or your browser, and we don't show it to that Folio's owner.

Each published folio has its own address, like folioss.com/@yourname. If the folio is in more than one language, the other languages carry their code in front (for example, folioss.com/en/@yourname). That address is public: anyone who has it can open it, without an account, unless you protect the folio with a PIN, in which case the PIN is needed to see it. While the folio is not published, nothing is shown at its address.

If your plan includes appearing in search engines, a published folio may appear on Google and other search engines, and we include it in the list of pages we give them so they can find it (if it has its own domain, it is not on that list). We don't do this, and we ask search engines not to show it, if you turn off "Allow indexing in search engines" in the folio settings or if you protect it with a PIN.

When you create your account you choose your username, and that is the address of your first folio (folioss.com/@yourname) and of your network profile if you create one. You type it yourself, so it doesn't have to include your first or last name, and it is reserved for your account for as long as the account exists. We suggest some based on your name (or, if your account has no name, on what comes before the @ in your email), but only the one you choose is stored.

Other folios, and the first one in accounts created before usernames existed, get their address automatically, from your name: your account name or, if you create the folio with AI, the name you give the assistant or the one in your résumé. Marta López gets folioss.com/@marta-lopez. Your full email address never appears. But if your account name came from your email (this happens, for example, when you sign in with a Google account that has no name), the address is built from what comes before the @, without numbers or symbols: martalopez@… would give folioss.com/@martalopez, and marta.lopez92@… would give folioss.com/@marta-lopez. Generic mailboxes such as info or hola are not used. If you don't like it, you can change it for free.

You can change it for free, on any plan, within the limits explained in the Terms and Conditions. The previous address keeps leading to your folio forever, so that the QR codes, NFC cards and links you have already shared don't break, and nobody else can ever use it.

If you delete a folio that was never published, its address becomes free. If it was published, its addresses are blocked so that nobody can use them, and whoever opens them sees "This page no longer exists"; the same happens to the addresses of all your published folios if you delete your account. For those addresses we keep only the name and the date, with nothing that says whose they were; we explain this in "How long we keep your data".

The Folioss network is the directory where people find professionals by trade and by area. Joining is voluntary: your profile starts switched off and doesn't appear anywhere until you turn on the switch. While it is off, only you can see what you have written.

When you create your account we ask you, with an unticked box, whether you want to appear in the network. If you tick it, we create your profile with your answers (who you are and what you are looking for), but switched off: it isn't visible anywhere until you complete it and switch it on yourself. If you don't tick it, we create nothing.

The moment you switch it on, this data becomes public and anyone can see it, whether or not they have a Folioss account:

• Your name and your profile photo, the same ones as in your account.
• Your profile's address, which comes from your username or, if your account predates usernames and has none, from your account name (for example, folioss.com/red/yourname).
• Your headline: the sentence you use to introduce yourself.
• Whether you are a person or a company, and what you are looking for right now (clients, a job, an internship, to commission work or to hire).
• Your main trade and up to five more specialities.
• Your country, your city, how far you travel and whether you take emergencies.
• How you work (on site, at the client's home, remotely...) and the languages you speak.
• Your availability and, if you sell your services, your "from" price with its unit and currency.
• If you are looking for a job, when you can start and what working hours you want. If you are a company, how many people you are.
• How many days ago you last updated your profile.

If your profile's address comes from your account name and you change that name, the address follows it (at most once every 30 days), and the previous ones, up to twenty, keep leading to your profile for as long as it exists: an old link with your previous name still leads to you. If you want them to stop doing so, write to privacidad@folioss.com and we'll remove them.

And this is never published: your email address, your password, your phone number, your postal address, your IP address or the time you connect. That's why the profile says "updated three days ago" and not the date with the hour and minute: counting days answers the only thing a viewer needs to know (whether it is still active) without revealing your schedule.

Keep one important thing in mind: public means really public. Google and other search engines can find your profile, index it and keep a copy; anyone can take a screenshot or copy the text. If you switch the profile off, it disappears from the Folioss search instantly and its link stops opening, but external search engines may take days to update what they stored, and we have no control over that.

The legal basis is your consent (Article 6(1)(a) GDPR), which you give by turning on the switch and withdraw by turning it off, whenever you want and without giving reasons. Switching the profile off doesn't delete it: it stays saved in case you want to come back one day, and only you can see it. If you also want to delete it completely, write to us and we'll delete it; if you delete your account, it is deleted with it.

We don't sell the directory, we don't share it with anyone and we don't use your profile to show you advertising or to profile you. The order in which results appear doesn't depend on what you pay: today it isn't possible to pay to appear higher.

Who has viewed your profile

If you are signed in, your profile is switched on and you open someone else's profile, we record that you visited it so that person can know who has viewed their profile. Depending on their plan, they see your name and your photo, or only how many people have visited it and, if at least two are from the same trade, how many there are from each trade. We store only who visited whom and the date of the last visit, nothing else, and it is deleted automatically 90 days after that last visit. If you switch your profile off, you stop appearing in those lists while it stays off.

Nothing is recorded if you have no profile or it is switched off, if you are not signed in, if either of you has blocked the other, or if either of you visits anonymously. That switch, "Visit anonymously", is in your network profile: when you turn it on you stop leaving a trace, the trace you had already left is deleted, and you can't see who visits you either.

The legal basis is our legitimate interest in letting people in the network know who in the network has shown interest in their profile, as in other professional networks. You can object at any time, without giving reasons, by turning on "Visit anonymously".

When someone reports content in the network we keep a record with the date, the reported link, the reason, a literal copy of how that content looked at that moment, the decision we took and the notice we sent. We don't do it for fun: the law requires us to be able to prove that we handled the notice and what we did with it, and without that record it is as if we had done nothing.

The legal basis is compliance with a legal obligation (Regulation (EU) 2022/2065, the Digital Services Act, and Spanish Law 34/2002) and our legitimate interest in being able to defend the decision if someone disputes it.

When something is removed, we tell the person what was removed and why, but we don't tell them who reported it, unless an authority or a court requires us to. We keep that record for one year from the decision, and longer only if there is an open claim or proceeding.

• Some Folios have a "Write to me" button. If you use it without signing in, we store your name, your email, what you write and what they reply, to deliver it to the Folio's owner and to email you about their replies. That person will see your name, your email and your messages; we never give them your IP address, which we don't store.
• Before sending, you accept it with a checkbox, and we keep the text you accepted and when. We email you a private link to the conversation; we only notify you of replies once you have opened it, and you can unsubscribe in every notification.
• If you write with your Folioss account, it is a network message between the two accounts and follows the rules of network messages: the other person sees your name and your photo, not your email.
• To stop spam we check that you are a person with Cloudflare Turnstile and count submissions in the server's memory, without storing your IP.
• You can delete the conversation whenever you want from the private link. Otherwise, it is deleted automatically 12 months after the last message, or earlier if the Folio's owner deletes it or closes their account.
• The legal basis is your consent, which you withdraw by deleting the conversation or unsubscribing from the notifications. What the Folio's owner does with what you write to them is their own business, and they are responsible for it.
• If you are under 14, don't use it without permission from your mother, father or guardian.

If you add the "Social Media Feed" block to a folio and connect your Instagram or TikTok account, we bring from that account what is needed to show your profile and your latest posts on that folio. You start the connection yourself, from the editor, and you accept it on Instagram's or TikTok's official page, which tells you which permissions you are granting before you accept. You can only connect your own account, and we never see your Instagram or TikTok password.

What data we bring

• From Instagram, which only allows professional accounts (Business or Creator) to be connected, with the instagram_business_basic permission: the account ID, the username, the profile picture, the biography and the number of followers and posts; and from your latest posts (at most 20), the type, the image or thumbnail, the link to Instagram, the caption, the date and the number of likes and comments.
• From TikTok, with the user.info.basic, user.info.profile, user.info.stats and video.list permissions: your TikTok ID (open_id), your display name and avatar, your username, your bio and your follower and like counts; and from your latest public videos (at most 20), the cover image, the title, the link to TikTok and the number of views, likes and comments.
• The access keys (tokens) that Instagram or TikTok give us to read that data on your behalf. We store them encrypted and only use them to request that data.
• Nothing else: we don't publish anything on your behalf, we don't read your messages, we don't touch your comments and we don't download your videos. We don't bring data about your followers or about other accounts either.

What we use it for

Only to show it on the folio where you placed the block: at the top your photo, your name, your bio and your numbers, and below your latest posts, each with its link to Instagram or TikTok. If the folio is published, anyone who opens it sees them, like the rest of the folio; if it isn't, only you, in the editor. We don't copy the images: Instagram or TikTok serve them, so when someone opens the folio, the visitor's browser requests them from their servers.

We don't use this data for anything else: not for advertising, not to profile you and not to train artificial intelligence. We don't sell it or share it with anyone. The legal basis is the performance of the contract (Article 6(1)(b) GDPR): you ask us to show that content on your folio, and we can't do it without this data.

How long we keep it

It is stored in our database, in the European Union, like the rest of your folio. While the account stays connected, we update the data once a day, and the covers of TikTok videos every few hours, because TikTok makes them expire. Each update replaces the previous one: we don't keep a history of your posts.

We delete all of it, including the access keys, when you disconnect the account, when you remove Folioss's permission from Instagram or TikTok, when you delete the folio and when you delete your Folioss account. And after 30 days if the connection stops working (for example, because the permission expired) and you don't connect it again, or if your plan stops including the block and you don't go back to one that includes it.

How to disconnect the account and request deletion

• From Folioss: in the editor, select the "Social Media Feed" block and press "Disconnect". We immediately delete the profile, the posts and the access keys, and on TikTok we also revoke the permission you gave us.
• From Instagram: in your account settings, under "Apps and websites", remove Folioss. Instagram notifies us and we delete that account's data. If it gives you a confirmation code, you can use it to ask us about the deletion.
• From TikTok: in "Settings and privacy", among the apps and services allowed to access your account, remove Folioss. TikTok notifies us and we delete that account's data.
• By email: write to privacidad@folioss.com, if possible from the email of your Folioss account, saying which Instagram or TikTok account you want to disconnect, and we will delete everything within 30 days at most. You can also exercise any of the rights we explain in "Your rights" this way.

We use your personal data for the following purposes:

• Providing the service: creating and maintaining your account, storing your Folio and showing it when someone visits it.
• Publishing your network profile and making it appear in the search, if you are the one who switches it on.
• Telling people who have a network profile which people from the network have visited it, as we explain in "Who has viewed your profile".
• Showing on your folio your profile and your latest posts from Instagram or TikTok, if you connect one of those accounts, as we explain in "Connected Instagram and TikTok accounts".
• Operational communications: notices about your account, changes to the service or technical incidents. If you start a free Pro trial, also its emails: when it starts, two days before it ends (to remind you of the charge) and when the plan is charged or the trial ends. They are part of the contract, so they are not turned off with "Reminders" and don't include an unsubscribe link.
• Reminders about your account: if you open an account and don't publish any folio, we write to you at most twice, around 24 hours and around 72 hours after signing up, to remind you that you have an unpublished draft or that your first folio made with artificial intelligence is free; if you publish before, you won't receive any more. If your account still has no published folio, whether you have started one or not, we may also send you a similar reminder, only once, and if you take part in the affiliate programme, a summary for each month in which your link had activity. They only talk about your account and what you started in it: they carry no third-party advertising and don't offer you paid plans. You turn them off in Settings, under "Reminders", or with the unsubscribe link included in each of them, and from then on you won't receive any more.
• Product improvement: aggregated usage analysis, error detection and development of new features.
• Keeping the network in good shape: handling reports, removing what cannot be published and keeping a record of what we decided.
• Legal compliance: invoicing, keeping tax records and responding to legitimate requests.
• News and offers from Folioss by email, with free unsubscription in every email and in Settings. If you create your account from October 10, 2026, we send them to you unless you tick the box "I don't want to receive emails with Folioss news and offers"; if your account is older, only if you told us yes. We explain this in "News and offers by email".
• Knowing how many people each person brings us, through their affiliate link or from their Folios' window, and how many of them pay, so that we can thank or reward them. With those figures and the visits to their Folios we calculate, solely for internal use by the Folioss team, a simple score for each account; it doesn't decide anything on its own or change anything in your account. It is based on our legitimate interest in knowing where our users come from; you can object by writing to us and we will remove it from your account.

The processing of your data is based on one of these five bases:

• Performance of the contract when you create an account and accept our Terms and Conditions. It also covers showing on your folio what we bring from Instagram or TikTok, if you connect one of those accounts.
• Explicit consent to publish your network profile, which you give by turning on the switch and withdraw by turning it off, and for news and offers by email when you tell us yes (with the "I want…" box, in Settings or in the notice in the dashboard). Today we don't use non-essential cookies; if we ever add them, we will also ask you first.
• The customer exception of Article 21.2 of Spanish Law 34/2002 on information society services (LSSI), which reflects Article 13.2 of Directive 2002/58/EC, to send you news and offers about Folioss products and services similar to the ones you use, if you created your account from October 10, 2026 and didn't tick "I don't want…" when creating it. The Court of Justice of the European Union has confirmed that a free account within a service with paid plans counts for this exception and that, when it applies, no other basis is needed (judgment of November 13, 2025, case C-654/23, Inteligo Media). You can object at any time, free of charge, in every email or in Settings.
• Legitimate interest to improve the product, prevent fraud and ensure security; to tell people who have a network profile who has visited it (you can object by turning on "Visit anonymously"); and to send you the reminders about your account, because we want to help you finish what you started in it (you can object by turning off "Reminders" in Settings or with the unsubscribe link in any of them, and we always respect that).
• Compliance with legal obligations in tax, accounting and consumer matters, in handling reports about content published in the network, and in checking the Robinson List before campaigns of news and offers (Article 23.4 of Organic Law 3/2018).

From time to time we may write to you with news and offers from Folioss: plans, new features, the network, link pages or the NFC card. Always from Folioss and similar to what you already use; never from other companies.

• If you create your account from October 10, 2026: next to the buttons to create it ("Create Account", "Continue with Google" or "Continue" on the "One last step" screen) there is an unticked box that says "I don't want to receive emails with Folioss news and offers". If you tick it, we don't send them to you. If you don't tick it, we send them to you as a Folioss customer, without the need for a separate yes (the customer exception we explain in "Legal basis").
• If you sign up in Polish or from Poland, or in Italian or from Italy, the box is the opposite: "I want to receive emails with Folioss news and offers", also unticked, and we only send them to you if you tick it. We work out the country from your IP address at that moment, without storing it. If we can't tell the country, we look at the languages set in your browser: if Polish or Italian is among them, you also get the "I want…" box. We don't store those languages.
• If your account was created before October 10, 2026, nothing changes: we only write to you if you told us yes, when signing up, in Settings or, if you sign in with Google for the first time, by ticking "I want to receive emails with Folioss news and offers" on the "One last step" screen. Inside the dashboard we may ask you whether you want to receive them, with two buttons ("Yes, I want news and offers" and "Not now"); we will never ask you by email.
• You can unsubscribe for free whenever you want: with the link in every email (one click, without signing in) or in Settings, under "News and promotions". From then on you won't receive any more.
• We keep proof of what you were shown and what you answered: when, on which screen, in which language, from which country (without your IP address) and with which text, so that we can prove it if necessary. If you change your mind, we also keep the change.
• Before each campaign of news and offers to people who haven't expressly told us yes, we check the Robinson List (the advertising opt-out system run by Adigital) and don't write to anyone registered on it for email. To check it, Adigital receives the email addresses of that campaign only to compare them with the list; we explain this in "Who we share your data with".
• Offers from other companies, including other businesses of the person who runs Folioss, would only reach you if you authorise it separately, with its own unticked box. Today we don't send any, and we don't give your email to anyone to send you advertising.

Emails about your account (verifying your address, recovering your password, the Pro trial notices) and the reminders we explain in "What we use your data for" are not this news: they have their own rules and contain no offers.

We don't sell or give your data to anyone. We only share it with the providers we need for the service to work and with whoever the law requires, and these are all of them, by name:

• Hostinger International (Lithuania, European Union): the servers where Folioss runs and where the database is stored.
• Stripe Payments Europe (Ireland, European Union): collecting subscriptions and NFC card payments. We don't see or store your card number.
• Resend (United States): sending the service's emails, such as the verification email or the password recovery email.
• Cloudflare (United States): storage of the images you upload and protection against bots on public forms.
• OVHcloud (France, European Union): artificial intelligence features. When you upload a résumé so that we can generate your folio, the text of that document is sent to this provider to process it. If you dictate to the assistant by voice, the recording is sent to this same provider only to transcribe it. Processing takes place entirely in data centres in the European Union, and the content (including the recording) is not stored or used to train models.
• OpenAI Ireland (Ireland, European Union): occasional artificial intelligence features within the administration panel.
• Adigital (Spanish Digital Economy Association, Spain, European Union), which runs the Robinson List: before each campaign of news and offers to people who didn't tell us yes, we give it the email addresses of that campaign only to compare them with the list and not write to anyone who has signed up to it. We do this because the law requires us to check it (Article 23.4 of Organic Law 3/2018).
• Public authorities and bodies, when there is a legal obligation.

Your résumé doesn't leave the European Union. The document you upload is processed on OVHcloud servers in France, and the database where your folio lives is at Hostinger, within the European Union. It is the most sensitive data you entrust to us, and we process it where European law protects you.

Two providers are outside the European Economic Area, and neither of them receives your résumé: Resend, which sends service emails such as the verification email, and Cloudflare, which stores the images you upload and protects forms against bots. In those cases the transfer relies on the standard contractual clauses approved by the European Commission. We review each provider's documentation continuously and will update this list whenever something changes. If you want to know which specific mechanism covers a particular provider, write to us and we'll tell you.

Artificial intelligence in Folioss is only used to help you create and improve your content. We never take automated decisions about you that produce legal effects or significantly affect you.

We don't use Google Analytics or any other third-party analytics or advertising tool. We calculate your folio's visit statistics ourselves, on our own servers, without recording IP addresses. For each visit we also record the country, which we work out from the IP address at that moment and without storing it, whether it is a mobile, a tablet or a computer and, if it can be known, the network or app the visit comes from. The countries come from DB-IP's "IP to Country Lite" database (db-ip.com), licensed under CC BY 4.0. If a link page shows or hides a link depending on the visitor's country or network, that is decided on our server at that moment and not stored.

To know how many people reach folioss.com and app.folioss.com, which page they land on and where they come from (a search engine, a social network or directly), we count visits on our own server, without cookies or anything stored on your device, from its technical access log (which doesn't store your IP address or your cookies and is deleted automatically after 30 days): from it we only keep daily totals —the page, the site the visit comes from and whether it was a mobile or a computer—, which don't allow anyone to know who you are and which we delete after 25 months.

There is one recipient that isn't a provider and that is worth saying out loud: the public. If you switch on your network profile, the data that is published is received by anyone who comes to see it, including search engines. It isn't a disclosure we make, it is the very purpose of the network, and that's why you have to switch it on yourself.

If you leave your email on a link page to see a link, your email (and your name, if you enter it) and your acceptance reach the owner of that page, who decides how to use them; Folioss stores them on that person's behalf in their inbox.

We keep your data while you have an active account. If you decide to delete your account, we delete your personal data within a maximum of 30 days, except for the data we must keep by legal obligation (for example, invoices for the period set by tax regulations).

Your network profile follows the same rule: when you delete the account it is deleted with everything else. If you only switch it off, it stays saved and unpublished until you switch it on again or ask us to delete it. Moderation records are the exception we explain in the reports section: they are kept for one year from the decision even if the account no longer exists, because they are the proof that we handled a notice.

There is another, small exception: if you start a free Pro trial, we keep your email address (without additions like +something) and a fingerprint of your card provided by Stripe (never the number) so that the trial is one per person. We keep it even if you delete your account, and only for that purpose: if we deleted it when the account is deleted, it would be enough to open another account to chain trials. The basis is our legitimate interest in preventing that abuse.

And a third one: the public addresses of what you delete. If you delete a folio that was published, or your account, we keep its public addresses (also your username, if it was ever shown at a public address) so that nobody else can use them. We keep only the name and the dates, with no other data and nothing that says whose it was; but if your address contained your name, that name on its own may make people think of you. We do this so that a QR code, an NFC card or a link you have already shared never leads to someone else's page, who could impersonate you. The basis is our legitimate interest in preventing it, and we keep it for as long as Folioss operates, because print doesn't expire. You can object by writing to privacidad@folioss.com: we will consider it, bearing in mind that, if we release that address, someone else could take it.

The data from the Instagram or TikTok accounts you connect doesn't wait until you delete your account: it is deleted when you disconnect the account, when you remove our permission from Instagram or TikTok, when you delete the folio or your account, and after 30 days if the connection stops working or your plan stops including the block. We explain this in "Connected Instagram and TikTok accounts".

You can exercise the following rights at any time:

• Access: knowing what data we hold about you.
• Rectification: correcting inaccurate data.
• Erasure: asking us to delete your data.
• Restriction: limiting the processing in certain cases.
• Portability: receiving your data in a structured, reusable format.
• Objection: objecting to processing based on legitimate interest and, at any time and free of charge, to receiving news and offers by email.
• Withdrawal of consent at any time, without affecting the lawfulness of the processing carried out before.

To exercise any right, write to privacidad@folioss.com. You can also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider that we have not handled your request properly.

Folioss is a Spanish business and we apply the European General Data Protection Regulation to all users, wherever they live. It is the most demanding standard there is, so your data is equally protected whether you are in Barcelona, Bogotá or São Paulo. In addition, a law of your own country may apply to you, and these are the ones we expressly recognise:

• Brazil — Lei Geral de Proteção de Dados (Law 13.709/2018). You can exercise the rights in its Article 18: confirmation of the processing, access, correction, anonymisation or blocking, portability, deletion, information about who we share your data with and revocation of consent. Our contact channel is privacidad@folioss.com and we also answer in Portuguese.
• Mexico — Federal Law on the Protection of Personal Data Held by Private Parties. This document serves as the comprehensive privacy notice, and you can exercise your ARCO rights (access, rectification, cancellation and objection), as well as revoke your consent or limit the use of your data, by writing to privacidad@folioss.com.
• Colombia — Law 1581 of 2012 and its implementing decree. You can know, update, rectify and delete your data, and revoke the authorisation you gave us. We handle queries within a maximum of ten business days and claims within fifteen.
• Argentina — Law 25.326 on the Protection of Personal Data. You can request access to, rectification, updating or deletion of your data.
• Chile — Law 21.719, applicable from December 1, 2026. You can exercise the rights of access, rectification, cancellation, objection and portability.
• Peru — Law 29733 on the Protection of Personal Data, with the same rights of access, rectification, cancellation and objection.

To exercise any of these rights, just write to privacidad@folioss.com saying what you want to do and which country you are writing from. You don't need to fill in any form or justify your request, and we don't charge anything to handle it. If your country requires a shorter response time than the European one, we apply the shorter of the two.

Your data is stored on servers located in the European Union. When you use Folioss from outside Europe, your data is transferred there so that we can provide the service, with the same level of protection described in this policy.

We apply reasonable technical and organisational measures to protect your data: encryption in transit (HTTPS/TLS), password encryption, encryption of the access keys of the Instagram or TikTok accounts you connect, role-based access control, audit logs and regular reviews. No system is invulnerable, but we work to minimise risks.