Privacy Policy

1 November 2026

The Folio AI software, application, and digital platform (hereinafter referred to as "Folio") is provided by Quantus Labs Ltd ("we", "us", or "our"). We recognise the importance of protecting your privacy and the security of your business information.

This Privacy Policy explains how we collect, use, store, and protect information when you use Folio and its related services.

Quantus Labs Ltd acts as the data controller within the meaning of applicable data protection laws. For orders placed in stores built on Folio, section 5A explains who is responsible.

Business and Account Information

When you create an account, we collect business-related information such as your business name, registration details, and business address. We also collect user account information, including your name, email address, phone number, and authentication details (which may include information received from social or third-party login providers).

Product and Catalogue Information

As Folio enables you to showcase your products, we collect product images, videos, descriptions, specifications, pricing information, product categories, and related metadata. Historical catalogue data may be retained, and changes made over time may be tracked.

AI-Generated Content

Our platform uses artificial intelligence to enhance product listings. In this context, we may process and store:

• AI-processed product images (including background-cleaned or modified versions),
• AI-generated product descriptions, specifications, marketing materials, and social media content.

For service improvement purposes, anonymised and aggregated training data may be derived from usage patterns.

Technical and Usage Data

To ensure secure and efficient operation of the Services, we may collect technical and usage information such as device identifiers, operating system, browser type, IP address, approximate location data, performance and error logs, and information about how you interact with Folio. Cookies and similar technologies may be used as part of this process.

Social Media Integration Data

If you connect your social media accounts to Folio, we may process relevant account details, sharing history, engagement metrics, and authentication tokens in order to enable content sharing, analytics, and interaction tracking.

We use the information we collect for the following purposes:

• Providing and performing the Services
• Creating, managing, and sharing product catalogues and showcases
• Processing and enhancing product visuals
• Generating and improving AI-powered content
• Ensuring platform security and preventing misuse
• Product development, troubleshooting, and performance analysis
• Managing customer support requests
• Sending marketing or informational communications where you have provided consent
• Measuring and optimising our advertising, including with Meta Platforms Ireland Ltd (Facebook and Instagram), where you have consented

Your personal data is processed in accordance with applicable data protection laws on the following legal bases:

• Performance of a contract
• Compliance with legal obligations
• Our legitimate interests (including service security, product improvement, and fraud prevention)
• Your consent, where required

We share your information only to the extent necessary to provide and improve the Services.

This may include:

• Making your product catalogues and company profile visible to your customers or other third parties, subject to the privacy settings you choose.
• Working with trusted third-party service providers for cloud infrastructure, AI processing, analytics, and payment services.
• Sharing limited data with social media platforms when you choose to use social media integrations.
• Sharing device and usage data (including your IP address and browser user-agent, together with hashed identifiers such as a hashed email address) with Meta Platforms Ireland Ltd to measure and optimise our advertising on Facebook and Instagram, where you have accepted advertising cookies.
• Disclosing information where required to comply with legal obligations, protect our rights, or prevent misuse of the Services.

We implement appropriate technical and organisational measures to protect your data. All data transmitted through the application is protected using encryption (TLS) and securely stored on Microsoft Azure cloud infrastructure.

• Data related to active accounts is retained for as long as the account remains active.
• Data associated with closed accounts is deleted within 30 days, except as described in section 5A.
• Backup data is retained solely for technical and security purposes and for no longer than 90 days.
• Anonymised analytical data may be retained indefinitely.

This section applies if you buy from a store built on Folio, and to sellers who receive orders through Folio.

Who is responsible

The seller whose store you buy from is the data controller for your order details. Quantus Labs Ltd provides the software and processes those details on the seller's behalf. Quantus Labs Ltd is the data controller for its own user accounts and security logs, and for the records it keeps after a seller's account is closed.

What is collected

• Your name, email address, phone number, delivery address, message and the items you order.
• In stores that take payments through iyzico: your Turkish ID or passport number, which is stored encrypted.
• If you ask for a company invoice, in any store: the company name and tax number.
• The payment's status, amount, currency and provider reference.

You enter your card details on the provider's own page. Folio does not receive or store them. Your details are collected electronically through the store's checkout.

Why, and on what legal basis

These details are used to take and deliver your order, to let the provider process your payment, and to let the seller invoice you. iyzico requires an identity number to take a payment. The legal bases are the performance of the contract with you and the seller's legal obligations.

Who receives it

• The seller. Every member of the seller's organisation can read the order and its invoice details.
• iyzico, when the store uses it: your name, identity number, email address, phone number, IP address, address and order items.
• Stripe, when the store uses it: your email address, the store's name and the amount, plus what you enter on Stripe's page.
• Resend, which delivers order emails, and Microsoft Azure, which hosts the service.
• Folio staff with platform administrator access, who can open an order's invoice details, including the identity number, for support and security.

Where it is processed

Order data is stored on Microsoft Azure in its North Europe region (Ireland). If you are outside that region, including in Turkey, this means your data is transferred abroad. iyzico, Stripe and Resend handle what they receive under their own terms and may process it in other countries.

How long it is kept

An order belongs to both the buyer and the seller, so it stays when either side leaves. Order records, including your details, are kept as the seller's order, invoice and tax archive, with no fixed period. The 30-day period in section 5 does not apply to them, and this also holds when the seller's account is closed. A deletion request does not remove these records where they must be kept. The identity number and company invoice details collected for a payment that fails are removed.

Your rights

Under Article 11 of Turkish Law No. 6698 (KVKK) and other applicable data protection law, you may ask whether your data is processed, request information about it, learn its purpose and whether it is used for that purpose, learn who receives it in Turkey or abroad, ask for it to be corrected or deleted and for recipients to be told, object to a result that is against you and arises solely from automated processing, and claim compensation for damage caused by unlawful processing.

To make a request, contact the seller or write to info@quantuslabs.ai, especially if the store has closed.

You have the right to:

• Access, update, or correct your personal data
• Request deletion or export of your data
• Close your account
• Opt out of marketing communications

You retain control over AI-generated content. You may edit or delete AI-generated images, videos, or text content at any time.

Folio is not intended for individuals under the age of 18, and we do not knowingly collect personal data from individuals under 18.

As our Services are provided globally, your data may be transferred to and processed in countries outside your country of residence. Appropriate technical and legal safeguards are implemented to protect such transfers.

We may update this Privacy Policy from time to time. Material changes will be communicated via in-app notifications, email, or announcements on our website. Continued use of the Services after such changes constitutes acceptance of the updated policy.

If you have any questions or concerns regarding this Privacy Policy, please contact us:

Quantus Labs Ltd

Email: info@quantuslabs.ai

Web: www.folioai.com