Privacy Policy

Effective date: July 5, 2026

This Privacy Policy explains how LikeFolio ("we", "us") collects, uses, and shares information when you use LikeFolio.ai and related services (the "Service"). The short version: we collect what we need to run a research product — your email, billing status, and how you use the site — we never see your card number, and we do not sell your personal data.

1. Scope

This policy covers the LikeFolio.ai website, our applications, memberships, the developer API, and emails we send. It does not cover third-party sites we link to or services that have their own privacy policies (for example, Stripe's checkout pages). Capitalized terms not defined here have the meanings given in our Terms of Service.

2. Information We Collect

Information you provide

• Account email. We use magic-link sign-in, so your email address is your account identifier.
• OAuth profile identifiers. If you sign in with Google or Apple, we receive the profile identifiers and email address those providers share for authentication. We do not receive your Google or Apple password.
• Content you submit. Messages you send to our AI chat, watchlist entries, preferences, coverage requests, and anything you include in support emails.

Billing information

• Payments are handled by Stripe. Your card number is entered directly with Stripe and never touches our servers. We store Stripe customer and subscription identifiers, your plan, billing status, and transaction metadata (amounts, dates) needed to run your membership, process the automatic Model Portfolios refund when applicable, and meter API billing.

Information collected automatically

• Usage and telemetry. First-party analytics about how you use the Service — pages viewed, features used, searches, chat feature usage, API request volume and credit consumption, and similar product events tied to your account.
• Cookies. A session cookie to keep you signed in, campaign-attribution cookies that record which marketing link or campaign brought you to the site, and preference cookies (see Section 7).
• Server logs. IP address (which implies an approximate, city-level location), browser and device user-agent, timestamps, and requested URLs, collected automatically for security, debugging, rate limiting, and abuse prevention. We do not collect precise GPS location.

3. How We Use Information

• Provide and operate the Service: sign-in, memberships, model portfolios, API access, and chat features;
• Process payments, manage subscriptions and refunds (including the automatic 30-day Model Portfolios refund), and meter API usage and overage;
• Send transactional email: magic links, receipts, account and billing notices;
• Send research and marketing email you have opted into, with per-category controls (see Section 8);
• Understand product usage in aggregate, prioritize features, fix bugs, and improve the Service;
• Measure marketing campaigns and attribute sign-ups and purchases to their source;
• Protect the Service: enforce our Terms, prevent fraud, account sharing, and API abuse, and secure accounts;
• Comply with legal obligations, including tax, accounting, and lawful requests.

We do not use the content of your private chat messages to market to you, and we do not sell it (see Section 6).

4. Legal Bases for Processing

Where a legal basis is required, we process personal data: (a) to perform our contract with you — running your account, subscription, and API access; (b) for our legitimate interests — securing and improving the Service, preventing abuse, and measuring our own marketing — balanced against your rights and expectations; (c) with your consent — marketing email, which uses double opt-in and can be withdrawn at any time; and (d) to comply with legal obligations — tax and accounting records, and responding to lawful requests from authorities.

5. How We Share Information

We share personal data only with service providers that process it on our behalf, under contracts that restrict their use of it to providing services to us:

• Stripe — payment processing, subscription billing, the billing portal, and refunds;
• Resend — email delivery for transactional and opted-in mail;
• AI model providers (including OpenAI, Anthropic, xAI, and Perplexity) — to generate responses when you use chat and research features; your chat inputs and relevant context are sent to these providers as processors for that purpose;
• Railway — cloud hosting for our application and database;
• Analytics and campaign measurement — our product telemetry is first-party. When our Meta Conversions API integration is enabled, limited conversion-event data (such as a hashed identifier and the event, e.g. a sign-up) may be shared with Meta to measure advertising performance.

We may also disclose information if required by law or legal process; to protect the rights, safety, or property of LikeFolio, our users, or others; or in connection with a merger, acquisition, or sale of assets, in which case this policy continues to apply to your data until it is changed under Section 14. We may publish or license aggregated or de-identified data — such as consumer-demand trends — that does not identify you and cannot reasonably be used to identify you.

6. No Sale of Personal Data

We do not sell your personal data, and we have not sold personal data. Our business is subscriptions and licensing of aggregated consumer-demand signals — not selling member information. To the extent sharing conversion events with an advertising platform could be considered "sharing" for cross-context behavioral advertising under California law, you can opt out as described in Section 13, and where an opt-out preference signal (such as Global Privacy Control) applies under state law, we treat it as a valid opt-out request.

7. Cookies and Attribution

We use a small set of first-party cookies:

• Session cookie — keeps you signed in; required for the Service to work;
• Attribution cookies — record the campaign, source, or referral link that brought you to LikeFolio so we can measure which marketing works and credit sources correctly;
• Preference cookies — remember interface settings.

We do not run third-party advertising cookies on the Service. You can block or delete cookies in your browser settings; blocking the session cookie will prevent sign-in from working. Because there is no uniform industry standard for browser "Do Not Track" signals, we do not respond to them as such, but the opt-out rights in Sections 6 and 13 are available to everyone.

8. Email Preferences and Unsubscribe

We separate email into categories you control individually from the preference center in your account Settings — you can turn off any category without losing the others, or pause all non-essential email entirely. Marketing and research emails require your opt-in (confirmed by double opt-in where you subscribe outside the product), and every such email includes an unsubscribe link that works without signing in. Transactional messages — magic links, receipts, billing and account notices — are required to operate your account and cannot be disabled while your account is active.

9. Data Retention

We keep account data for as long as your account exists and for a reasonable period afterward to handle billing questions and legal requirements. Billing and transaction records are retained as required by tax, accounting, and audit rules even after account deletion. Server logs and raw telemetry are kept for shorter operational windows and then deleted or rolled up into aggregates. When you delete your account or ask us to delete your data, we delete or de-identify personal data unless we must retain it for legal, security, or billing-dispute reasons, in which case we retain only what is required, for only as long as required.

10. Security

We use industry-standard safeguards: encryption in transit (TLS), passwordless authentication (no password database to breach), pooled and access-controlled database infrastructure, scoped and revocable API keys, and least-privilege access for our team. No system is perfectly secure, so we cannot guarantee absolute security — if we learn of a breach affecting your personal data, we will notify you and regulators as required by law. Please protect the email inbox tied to your account, since sign-in links are delivered there, and tell us immediately at [email protected] if you suspect unauthorized access.

11. Where We Process Data

LikeFolio is operated from the United States, and your information is processed and stored on our hosting provider's infrastructure there. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those of your jurisdiction.

12. Children

The Service is for adults. You must be 18 or older to use it, and we do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has provided us personal data, contact us at [email protected] and we will delete it.

13. Your Privacy Rights

California (CCPA/CPRA). California residents have the right to know what personal information we collect, use, and disclose; to request deletion; to request correction of inaccurate information; to opt out of the sale or sharing of personal information; to limit the use of sensitive personal information (we do not collect sensitive categories beyond what is described in this policy); and to not be discriminated against for exercising these rights. As described in Section 6, we do not sell personal data; if you wish to opt out of any sharing for advertising measurement, we will honor it.

We honor these rights for all users, regardless of where you live — not just California residents. Residents of other states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, and others) have similar rights of access, deletion, correction, and opt-out under those laws, and may appeal a denied request by replying to our decision; we will explain the outcome of any appeal.

To exercise any right, email [email protected] from the address on your account, or include enough information for us to verify that the request concerns your data — we verify requests to protect your information from being disclosed to someone impersonating you. An authorized agent may submit a request on your behalf with proof of authorization. We respond within the timeframe required by applicable law and do not charge a fee for making a request.

14. Changes to This Policy

We may update this policy as the Service evolves. Material changes will be announced by email or a prominent notice on the Service before they take effect, and the effective date above will be updated. Continued use of the Service after changes take effect means the updated policy applies.

15. Contact Us

Privacy questions or requests: email [email protected] or write to LikeFolio, 11405 Park Road, Anchorage, KY 40223.