Privacy Policy

Effective Date: September 18, 2026 Last Updated: September 18, 2026

This Privacy Policy explains how Tailored Folio LLC ("Tailored," "we," "us," or "our") collects, uses, discloses, retains, and protects personal information in connection with tailoredfolio.com, app.tailoredfolio.com, share.tailoredfolio.com, and related Tailored services (collectively, the "Service").

Tailored is initially offered to users in the United States.

1. Information We Collect

Account Information

We may collect your name, email address, authentication identifiers, account settings, subscription status, billing references, and Workspace information.

Career and Professional Information

You may choose to provide employment history, roles, responsibilities, skills, project descriptions, accomplishments, education, credentials, career goals, and similar professional information.

Source Content and Files

You may upload resumes, work samples, presentations, screenshots, project documents, images, and similar materials.

Private Corpus and Raw Ledger Information

Tailored lets you maintain a private body of professional information called your Corpus. The Raw Ledger is the private, unfiltered layer of that Corpus.

Raw Ledger content may include detailed descriptions of your work, confidential or proprietary information, descriptions of clients or employers, and information about colleagues, stakeholders, or other people.

Raw Ledger content is not shared with other people by default. You decide whether information from it is transformed into a Render or included in a Package you publish.

Generated and Derived Information

We may create or store information derived from material you provide, including extracted facts, structured career records, summaries, anonymization or redaction mappings, draft Renders, and Packages.

Operational and Technical Information

We may collect device, browser, session, log, IP address, event, error, performance, and similar technical information needed to operate, secure, troubleshoot, and improve the Service.

Safety and Security Information

We may collect moderation signals, malware and file-validation results, suspected abuse indicators, safety incidents, account actions, and records associated with authorized safety or security review.

Recipient Activity

When a Recipient accesses a shared Package, we may collect information associated with that access, such as the access link used, approximate timing, session information, and coarse device or browser data.

This information may allow a Tailored user to see that a Package or access link was viewed. It does not necessarily establish that a particular named person personally viewed the Package.

2. How We Use Information

We may use personal information to:

• provide, operate, maintain, and improve the Service;
• create and maintain your Corpus;
• process files and other materials you provide;
• generate Renders, Packages, and other outputs at your direction;
• authenticate users and secure accounts;
• publish and serve Packages you choose to share;
• manage subscriptions, billing status, and customer support;
• detect malware, abuse, fraud, prohibited content, and security threats;
• comply with applicable law and valid legal process;
• investigate and enforce our Terms of Service and Acceptable Use Policy;
• provide service-related, billing, security, and legal communications; and
• understand product usage and reliability through privacy-conscious analytics.

We do not sell your Career Information, Source Content, Raw Ledger content, or other private Corpus content.

We do not use private Corpus content for third-party advertising.

3. AI-Assisted Processing

Tailored may use third-party AI services to provide AI-assisted features such as organizing information, drafting Renders, summarizing source material, or helping redact or anonymize professional information.

Our current AI-assisted generation provider is Anthropic.

When an AI-assisted feature is used, Tailored is designed to send only the information reasonably needed to perform the requested task rather than automatically sending an entire Corpus for every request.

Tailored's own use of AI-assisted processing does not give us ownership of your content.

The handling of information by an AI provider is also governed by our contractual arrangements with that provider and the provider's applicable service terms.

4. Content Safety, Malware, and Legal Compliance

Because Tailored permits users to upload text and files, we use automated and, in limited circumstances, human review processes to detect malware, abuse, prohibited content, and certain illegal material.

Current safety and security services may include:

• OpenAI moderation services for content-safety signals;
• Microsoft PhotoDNA Cloud Service for image hash matching associated with known child sexual abuse material;
• Cloudmersive for malware scanning; and
• internal file-validation, policy, and account-security controls.

Different parts of the Service may use different enforcement thresholds depending on whether content is private, being processed, or being published to a Recipient.

Ambiguous or severe safety incidents may be reviewed by a limited number of authorized personnel. Administrative access is intended to be role-restricted and logged.

Where applicable law requires us to report suspected illegal material or activity, we may make required reports to law enforcement or other authorities. This includes reports to the National Center for Missing & Exploited Children's CyberTipline where reporting is required by applicable law. We may preserve related records and content for the period required by law.

5. Service Providers and Other Third Parties

We use third parties to operate portions of the Service. Depending on the service being performed, these providers may receive or process information on our behalf or under their own applicable legal terms.

Current providers include:

Purpose	Provider
Hosting and deployment	Vercel
Database and file storage	Supabase
Authentication and SSO	WorkOS
Payments and billing	Paddle
Transactional email	Resend
Background job orchestration	Inngest
AI-assisted features	Anthropic
Content moderation signals	OpenAI
Child-safety image hash matching	Microsoft PhotoDNA Cloud Service
Malware scanning	Cloudmersive
Product analytics and error monitoring	PostHog

We seek to limit information shared with a provider to what is reasonably necessary for that provider's function.

Paddle

Paddle acts as merchant of record for purchases made through the Service. Paddle processes payment and transaction information under its own applicable terms and privacy practices. Tailored generally receives transaction, subscription, and billing-reference information rather than full payment-card credentials.

Legal and Business Disclosures

We may also disclose information:

• when required by applicable law, regulation, court order, subpoena, or other valid legal process;
• when reasonably necessary to protect Tailored, our users, Recipients, or others from fraud, abuse, security threats, or unlawful activity;
• to enforce our Terms of Service or Acceptable Use Policy;
• with your direction or consent; or
• in connection with a merger, financing, acquisition, reorganization, sale of assets, or similar business transaction, subject to applicable law.

6. Information About People Who Are Not Tailored Users

Tailored is designed to let users privately document their professional experiences. As a result, a user's private Corpus may contain information about colleagues, clients, stakeholders, managers, employees, or other people who do not have Tailored accounts.

That information remains within the user's private content unless the user chooses to incorporate it into a Render or Package.

Tailored does not independently verify the accuracy of statements users record about other people.

If you believe Tailored holds personal information about you within another user's account and you have a question or request relating to that information, you may contact us at admin@tailoredfolio.com. Our ability to identify, access, disclose, alter, or delete another user's private content may be limited by privacy, security, legal, and confidentiality considerations.

7. Data Retention and Deletion

We retain account and Corpus information while an account is active as reasonably necessary to provide the Service.

If you delete specific content or close your account, we will delete or de-identify the affected personal information from active systems within 30 days, except where continued retention is reasonably necessary or required for:

• legal or regulatory obligations;
• fraud prevention or security;
• safety investigations or required reporting;
• dispute resolution or enforcement;
• tax, accounting, billing, or transaction records; or
• another purpose permitted by applicable law.

Copies of deleted information may remain temporarily in backups until those backups expire or are overwritten through our ordinary backup-retention process.

Safety incident records and information subject to a legal preservation requirement may be retained longer than ordinary product content.

Deleting a source Artifact or Work Item may not automatically delete every Render, Package, or other derived item that you separately chose to create from that material. Tailored may provide product controls or notices explaining related downstream content so that you can manage those items separately.

8. Security

We use administrative, technical, and organizational measures intended to protect information processed through the Service.

These measures may include encryption in transit and at rest, private file storage, expiring or signed access links, authentication controls, role-restricted administrative access, logging, malware screening, and content-safety controls.

No method of storage, transmission, or security is completely secure, and we cannot guarantee absolute security.

If a security incident involving personal information occurs, we will investigate and provide notifications required by applicable law.

9. Your Privacy Rights and Choices

Depending on your state of residence and applicable law, you may have rights relating to personal information, which may include rights to:

• request access to personal information we maintain about you;
• request correction of inaccurate information;
• request deletion;
• obtain a portable copy of certain information; or
• appeal or exercise other rights provided by applicable privacy law.

Tailored may provide account, export, and deletion controls directly within the Service.

You may also submit a privacy request to admin@tailoredfolio.com. We may need to verify your identity before fulfilling certain requests.

We do not discriminate against users for exercising privacy rights provided by applicable law.

10. Cookies, Local Storage, and Analytics

We use cookies, local storage, or similar technologies that are necessary to operate the Service, maintain authentication, secure sessions, and support Recipient access controls.

We also use PostHog for product analytics and error monitoring. We use analytics to understand product usage, performance, and reliability rather than for third-party advertising.

We do not use Tailored's private Corpus content for behavioral advertising.

11. Children's Privacy

Tailored is intended for adults and is not directed to anyone under 18.

We do not knowingly permit anyone under 18 to create a Tailored account. If we learn that we have collected personal information directly from a child in circumstances requiring deletion or other action under applicable law, we will take appropriate steps.

12. Changes to This Policy

We may update this Privacy Policy from time to time.

If we make material changes, we will provide reasonable notice, such as through the Service, by email, or on our website, before the changes take effect when required or reasonably practicable.

The Effective Date above identifies when the current version became effective.

13. Contact

Questions, privacy requests, or concerns about this Privacy Policy may be sent to:

Tailored Folio LLC
Email: admin@tailoredfolio.com