Scope and contact
This notice applies to the hosted Foliowl service at foliowl.hungyi-tw.net. Last updated November 5, 2026. For account or data requests, use the administrator contact channel described on the Contact and support page.
Data we process
We process your verified user identifier and email to identify your account and separate your data from other users. Invitation applications also store your intended use, application time, access status and administrator review records. Unapproved accounts cannot use the CV workspace.
Your experience library
Profile details, experiences, versions, styles and CV snapshots are stored to support editing, generating and downloading your documents. Provide only information needed for these purposes. Avoid national identification numbers and sensitive information about other people.
Hosting and authentication providers
The service runs on Cloudflare Workers and stores data in Cloudflare D1. Google and Firebase Authentication handle Google sign-in. Foliowl never receives your Google password; it receives the necessary identity, email and verification credentials. Providers may process requests and security logs under their own policies. We do not guarantee that all data is stored or processed only in Taiwan.
Cookies, language preferences and advertising
Authentication uses cookies or related browser storage. A language-preference cookie remembers whether you selected English or Chinese; it is not an advertising identifier. Blocking required browser storage may prevent sign-in. The homepage demo uses fictional data and does not save your selections. The service has not integrated Google AdSense or third-party advertising tracking. If advertising or analytics is added, this notice and any required consent controls will be updated.
Access, retention and deletion
You can view and edit your data in the studio and download a JSON backup. Edit replaces the contents of a particular version; Update creates a new version. Generated CV snapshots are stored separately. Deleting a source record does not delete snapshots or backups. There is no self-service account deletion interface yet; contact the administrator for deletion and other data requests. Provider logs and backups follow their respective retention mechanisms.
Protecting your content
Authentication and server-side ownership checks restrict access. Administrators and service providers may still access necessary data for maintenance and troubleshooting. Keep your email account and verification codes secure, sign out on shared devices, and protect downloaded PDFs and backups.