Privacy at AnimoFolio

Privacy-preserving abuse protection

Public forms and analytics endpoints use short-lived request limits. To enforce them without retaining a readable IP address or device profile, AnimoFolio stores only a keyed, one-way fingerprint that is scheduled for automatic deletion.

Information we collect

We store account details, authentication identifiers, profile and portfolio content, project media references, tailored client-link settings, client messages, plan and credit records, product preferences, and security or moderation actions.

With your analytics permission, we collect limited product analytics such as page events, locale, pseudonymous session identifiers, approximate country when available, and feature adoption. Essential operational records such as request performance, AI token totals, provider cost, billing delivery, and security events are processed separately to run and protect the service. We do not intentionally collect payment card numbers; the payment provider handles checkout data.

Account safety controls and moderation appeals are account-scoped and included in the creator data export. Internal abuse evidence and private operator security notes remain access-restricted.

How we use information

We use information to create and secure accounts, publish portfolios, deliver creator tools, route client inquiries, enforce plan limits, meter AI usage, prevent abuse, provide support, process privacy requests, and understand product reliability and adoption.

We do not sell personal information. Any future advertising or materially different use will require an updated notice and the choices required by applicable law.

AI features

AI runs only when a creator chooses an AI feature. Relevant project inputs are sent to the configured provider to generate the requested result. Usage metadata, token totals, latency, cost, and error state may be recorded to operate credits and control spending.

Creators should not submit secrets, payment data, highly sensitive personal data, or material they are not permitted to process through AI.

Service providers and transfers

AnimoFolio currently relies on services such as Supabase for database and authentication, Vercel for hosting, Resend when transactional email is enabled, OpenAI when AI tools are enabled, Google Analytics for product analytics, and Lemon Squeezy when paid checkout is enabled. A provider is used only when its related feature is configured.

These providers may process data in countries different from yours. Appropriate contracts, transfer safeguards, and a final processor list must be confirmed before commercial launch.

Retention and deletion

Account content is retained while the account is active. A deletion request immediately hides the public portfolio and starts a 30-day review window during which the creator can cancel the request. Eligible accounts are then deleted by the protected lifecycle job.

Some security, billing, fraud-prevention, backup, or legal records may need limited additional retention. Exact commercial retention periods will be finalized with legal and provider requirements.

Your choices and rights

Analytics is off until you choose to allow it. You can reopen Privacy choices from any page, withdraw consent, and remove analytics cookies. Withdrawing consent does not affect essential account, security, billing, or service records already needed to operate the platform.

Creators can make a portfolio private, update account content, download an account export, and request or cancel deletion from Account settings. Depending on location, additional access, correction, objection, restriction, portability, or complaint rights may apply.

When account abilities are limited, an eligible creator can submit an appeal from Account settings, receive a human-reviewed response, or withdraw the appeal before a decision.

Security, children, and contact

We use access controls, row-level data separation, signed provider webhooks, upload and usage limits, and audit records. No online service can promise absolute security; creators should retain original copies of their work and report suspected compromise promptly.

The Beta is not directed to children below the minimum digital-consent age that applies where they live. Privacy questions and requests can be sent to privacy@animofolio.com.