Privacy Policy

1. What we collect

• Your account: your name, email address and password. We keep only a one-way hash of your password (Argon2id), never the password itself.
• Your company's workspace: what you and your teammates put in 1Fold — products, tickets, comments, docs and their versions, decisions, milestones, files you upload, and who did what (an activity and audit history).
• WhatsApp, if you link it: your phone number, and the messages you send your company's bot. We keep a record of what the bot sent you (your daily brief, alerts, replies) so your company can see whether it arrived.
• Invitations: the email addresses your admins invite.
• Technical data: your IP address and the times you use 1Fold, to keep accounts secure (for example, to slow down repeated sign-in attempts), and the cookies described below.

2. How we use it

• To run 1Fold for your company: show your work, keep it in sync, notify the people it concerns.
• To send emails: sign-up confirmations and password resets come from 1Fold; everything else your company sends — invites and daily briefs — goes through your company's own email account, if it has set one up.
• To send WhatsApp messages through your company's own number: your own daily brief, an alert when someone urgently mentions you, and replies when you ask. Each person only ever gets their own information, in their own chat.
• To back up your company's data and keep 1Fold secure and working.

We don't sell personal data, use it for advertising, or build profiles of you.

3. Google Drive (Google user data)

A company's admins can choose to connect the company's own Google Drive, so a backup of that company is saved there every day. When they do, 1Fold asks Google only for:

• See, edit, create and delete only the specific Google Drive files that 1Fold creates (the drive.file permission). 1Fold can't see or open any other file in that Drive.
• The connected account's email address, to show which Google account the backups go to.

1Fold uses this access only to create a “1Fold backups” folder, save the company's daily backup file in it, list those backups for the company's admins, and remove the oldest ones (it keeps the newest 30). The access is stored encrypted, is never shown to anyone, and is used for nothing else. Data from Google is not sold, not used for advertising, not used to train any AI model, and not shared with anyone except as needed to provide this backup.

1Fold's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

An admin can disconnect at any time in 1Fold (Integrations → Google Drive → Disconnect), or remove 1Fold's access in their Google account at myaccount.google.com/permissions. The backups already saved stay in that Drive — they belong to the company.

4. Who we share it with

Only the services that make 1Fold work, and only what each needs:

• Our hosting provider, whose servers run 1Fold and store its data.
• Resend, which delivers emails — through 1Fold's account for sign-in emails, and through your company's own account for its emails.
• WhatsApp (Meta), which carries the messages between you and your company's bot.
• Google, only if your company connects Google Drive for its backups (above).
• Claude (Anthropic), only if you yourself connect Claude to 1Fold with your own token — then Claude reads and changes what you ask it to, with exactly your permissions.

Within your company, what you see and do in 1Fold is visible to the teammates it's shared with, according to their roles. We may also disclose information if the law requires it.

5. Cookies

1Fold uses only the cookies it needs to keep you signed in and send you to your workspace. Your browser also remembers a few of your choices, like the theme and notification sounds. There are no advertising or tracking cookies.

6. How we protect it

• Every connection is encrypted (HTTPS).
• Each company's data is kept apart by the database itself, so one company can never read another's.
• Secrets like email keys and Google access are encrypted at rest; passwords are hashed.
• The whole service is backed up every hour, encrypted.

No system is perfectly secure, but we work to protect your data and will tell affected companies promptly if something goes wrong.

7. How long we keep it

We keep your company's data for as long as the company uses 1Fold. When something is deleted for good, it's removed from 1Fold at once and drops out of our backups as they roll over — within about 30 days. Backups saved to a company's own Google Drive are kept there, under the company's control.

8. Your choices and rights

You can see and change your account details in 1Fold. You can ask us for a copy of your personal data, to correct it, or to delete it, by writing to tensorfold@gmail.com. Because a workspace belongs to its company, some requests go through your company's admins — they can export the company's data (its daily backups) and remove people and content.

9. Children

1Fold is for work and isn't meant for anyone under 16.

10. Changes, and contact

If we change this policy, we'll update the date above, and tell companies about important changes before they take effect. Questions? Write to tensorfold@gmail.com. See also our Terms of Service.