Privacy Policy

1. Who we are and what this policy covers

FOLIOCADE is a product and service of All Motor Collection LLC, doing business as ALL MOTOR (“ALL MOTOR,” “we,” “us”), based in New Jersey, USA. This policy explains how we handle personal information when you use foliocade.com and its features (the “Service”). It works together with our Terms of Service.

2. Information we collect

Information you give us

• Account and sign-in: your email address and password (stored only as a secure hash by our authentication provider), or, if you use Google sign-in, the basic profile information Google shares (such as your email and name).
• Profile and contact details: display name, headline, location, contact links and profile photo you choose to add.
• Résumé: the PDF or DOCX file you upload and the text extracted from it. Text extraction happens in your browser; the extracted text is kept with your private draft so you can review and correct it.
• Career information: employers, schools, degrees, roles, dates, descriptions, projects, accomplishments, skills, metrics and any corrections you make.
• Organization details: websites you enter or approve, and the public logos, images, descriptions, industry and brand colors you select, together with their source addresses.
• Media you upload: logos, images and photos.
• Profile settings: your username (and previously used usernames), visibility choice, selected world and, if used, a profile access password (stored only as a salted hash).
• Policy acceptance: the Terms and Privacy Policy versions you accepted, how (at sign-up or in the app) and when.
• Messages: information you send when you contact us.

Information created when you use the Service

• Security and operations records: technical logs kept by our hosting and infrastructure providers (such as IP address, browser type, request times and errors), counters used to limit AI use, lookups and password attempts, and records of email delivery.
• Administrative audit log: when an administrator changes an account’s status or publication, we record the action, the administrator, the affected account, the reason and the time.
• Cookies and local storage: see “Cookies and similar technologies” below.

We do not currently use third-party advertising, ad tracking pixels or third-party analytics tools in the Service.

3. How we use information

• to create and secure your account and send account emails (sign-up confirmation, password reset, email-change and similar messages);
• to structure your résumé into editable career information, including with AI assistance (see below), and to check the result against your own résumé text;
• to look up your employers and schools in public sources, if you use that feature;
• to store your drafts, generate your career world in the visual style you choose, and show it to visitors only as your visibility settings allow;
• to authorize visitors to password-protected profiles;
• to prevent abuse, enforce rate limits, investigate security issues, moderate content and enforce our Terms;
• to respond to support requests and legal obligations; and
• to maintain and improve the reliability of the Service.

We do not sell your personal information, and we do not use your private résumé or unpublished career world for advertising.

4. AI-assisted résumé structuring

When you upload a résumé while signed in, the text extracted in your browser is sent to our server and then to an AI model through our hosting platform provider’s AI gateway, which routes the request to a third-party model provider. The request asks the model to copy facts only from your résumé into a fixed structure. We send the request with a setting asking the provider not to store the response, but the providers’ own terms govern their processing and retention, and we cannot promise how every provider handles data beyond those terms.

AI results can be incorrect. Organization names the model returns that do not appear in your résumé are flagged, and you must review everything before generating your world. If AI is unavailable or a usage limit is reached, a simpler reader that runs in your browser is used instead and the Service tells you so. Please do not include sensitive information (such as ID numbers or health information) in résumés you upload.

5. Public organization lookup

Online organization discovery uses Google’s Gemini API with Google Search when configured and authorized by the administrator. Until setup and necessary permissions are complete, online discovery is unavailable and you can still enter websites manually. The search sends only the organization name you provide and generic official-website search terms, not your résumé text, contact details, job responsibilities or accomplishments. Do not put private information into the organization search-name field. Google’s own terms govern processing; its grounding terms provide for storing prompts, context and outputs for 30 days for debugging and testing. Where permitted, our server keeps a private, account-scoped search cache for up to 24 hours and request counters to prevent excessive usage. Discovered matches are suggestions, not verified employment or school attendance.

When you confirm an organization’s website or enter one yourself, our server requests that website’s public pages and robots.txt file to read public metadata (such as name, description, icons, logos and images), respecting robots.txt rules and blocking private or unsafe network addresses. Domain names may be resolved through a public DNS service (Cloudflare). The websites you look up may see requests from our servers but not your identity.

Before you save a draft from the standalone Company Import page, a private draft record is linked to your browser with a secure cookie, without requiring an account.

6. How information is shared

We share personal information only as needed to run the Service, as you direct, or as required by law:

• Hosting, database, storage and authentication: our third-party application platform and its infrastructure providers store your account, drafts, files and settings and run our servers.
• Sign-in: Google, if you choose Google sign-in.
• Email delivery: the email service used by our platform sends account emails from our notify.foliocade.com domain.
• AI processing: our hosting platform provider’s AI gateway and its third-party model provider, as described above.
• Organization search and public sources: organization names and generic search terms to Google when online discovery is configured, and requests to the organization websites you approve or enter manually.
• Visitors: people allowed by your visibility settings see your published career world.
• Legal and safety: when we believe disclosure is required by law, legal process, or to protect the rights, safety and security of users, the public or ALL MOTOR.
• Business transfers: as part of a merger, acquisition, financing or sale of all or part of our business, subject to this policy’s protections.

7. Visibility, published profiles and media

Your account starts private. Nothing is shown to others until you claim a username, choose a visibility and publish.

• Private: only you, while signed in.
• Unlisted: anyone with the link; we ask search engines not to index the page.
• Password protected: visitors who enter the password receive a one-hour session cookie. Changing the password ends existing visitor sessions.
• Public: anyone, including search engines.

Visitors see a published snapshot, not your draft. The raw text extracted from your résumé is never published. When you publish, the résumé file you uploaded, your profile photo and your uploaded media are made available to the visitors your visibility setting allows (for example, as a résumé download), as described on the publishing screen. Uploaded media is kept in private storage and delivered to visitors through an address that checks your current visibility settings each time, rather than a permanent public file link. Approved logos and images that come from an organization’s website may be loaded by visitors’ browsers directly from that website.

Changing visibility or unpublishing stops future access through FOLIOCADE but cannot recall copies, screenshots, downloads or cached versions already made by visitors, search engines or archives.

8. Administrators and moderation

A small number of authorized ALL MOTOR administrators can see account-level information (such as email address, account status, username, visibility and publication status) to operate and moderate the Service. Administrative tools are not designed to show your private résumé, private drafts, uploaded files or passwords. Administrative actions are recorded in an audit log.

9. Cookies and similar technologies

We use only technologies needed to run the Service:

• Sign-in session: your browser’s local storage keeps your sign-in session so you stay signed in.
• Profile access cookie: a secure, HttpOnly cookie that lasts one hour after a visitor enters a profile password.
• Company-import cookie: a secure, HttpOnly cookie that links unsigned-in company-import drafts to your browser for up to 30 days.
• Preferences: session storage remembers whether you turned Explore sound on.

Google sign-in and our hosting providers may set their own cookies as part of their services. We do not use advertising cookies.

10. Retention and deletion

We keep your account, drafts, résumé files and career information while your account is active or until you delete them. Password-attempt counters and visitor sessions expire automatically. Audit logs, security logs and policy acceptance records may be kept longer where reasonably needed for security, dispute resolution or legal reasons.

To delete your account or specific data, email info@allmotorco.com from the address on your account. We will verify the request and delete or de-identify the information, except where we must keep it for legal, security or fraud-prevention reasons. Deleted information may remain in backups and provider logs for a limited period until overwritten.

11. Your choices and rights

You can view and edit your career information, change visibility, unpublish, or remove uploaded media in the app at any time. Depending on where you live, you may also have rights to request access to, correction of, deletion of, or a copy of your personal information, to object to or restrict certain processing, to withdraw consent, and to appeal our decision. Email info@allmotorco.com. We will not discriminate against you for exercising your rights. You may also have the right to complain to your local data protection authority.

12. Security

We use measures such as encrypted connections (HTTPS), access controls that limit each account to its own data, private file storage, hashed passwords, rate limits, and checks that prevent our website retrieval from reaching private networks. No system is completely secure, and we cannot guarantee absolute security. Please use a strong, unique password.

13. International processing

We are based in the United States. Our providers may process information in the United States and other countries whose data protection laws may differ from yours. By using the Service, you understand that your information may be processed in those locations.

14. Children’s privacy

The Service is for adults aged 18 and older. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact info@allmotorco.com and we will delete it.

15. Third-party sites

Career worlds and lookup results may link to third-party websites. Their privacy practices are governed by their own policies.

16. Changes to this policy

We may update this policy. The version and date at the top show the current version. For material changes we will ask signed-in users to acknowledge the updated policy; your saved content and sign-in are not affected.

17. Contact

All Motor Collection LLC (ALL MOTOR) — FOLIOCADE
Email: info@allmotorco.com