Privacy policy
Last updated: 29 October 2026
This document is a draft and has not yet been finalised.
This policy explains how Kenfolio ("Kenfolio", "we") handles personal data when you visit kenfolio.com, use the Kenfolio web and phone apps, or contact us.
Two kinds of data
Customer content is what you and your team put into a workspace: pages, comments, files and so on. Your organisation controls it, and we process it only to provide the service on its behalf. If you have a question about content in your workspace, ask your workspace admin.
Account and usage data is what we need to run Kenfolio: your name, email address, password hash, workspace memberships, sign-in records, device push tokens, notification preferences and billing details. We are responsible for this data.
What we collect and why
- To create and secure your account: name, email, password (stored only as a salted hash), and if you use Google sign-in, your Google account ID and email.
- To run the service: IP address, browser or device type and sign-in times, used for security, rate limiting and the audit log.
- To bill you: billing contact, GSTIN and address. Card and UPI details are handled by our payment processor, Razorpay; we never see or store full card numbers.
- To send notifications: your email address and, if you allow it, a push token for your phone.
- To answer sales enquiries: what you send through our contact form.
We don't sell personal data, and we don't use customer content for advertising.
Who we share data with
We use a small number of service providers to run Kenfolio, under contracts that limit how they use data:
- Cloud hosting and storage, for the database and uploaded files.
- An email delivery service, for sign-in codes, invitations and notifications.
- Razorpay, for payments.
- Expo (and through it Apple and Google), to deliver push notifications to phones.
- Anthropic, only when someone in your workspace uses Ask Kenfolio: the question and the page excerpts needed to answer it.
We may disclose data if the law requires it, and we'll tell the affected customer unless we're legally prevented from doing so.
How long we keep data
We keep customer content for as long as the workspace exists. Deleted pages are removed 30 days after they're moved to the trash. When a workspace is closed, we delete its content within 30 days, apart from backups, which expire on their normal cycle. We keep invoices for as long as tax law requires.
Your choices and rights
You can see and change your profile and notification settings in the app at any time. You can ask us for a copy of your personal data, to correct it, or to delete your account by writing to support@kenfolio.com. If you're not satisfied with our response, you may complain to your data protection authority.
Cookies
The Kenfolio app uses a strictly necessary cookie to keep you signed in. This marketing site doesn't use tracking cookies.
Children
Kenfolio is a business tool and isn't meant for children.
Changes
If we make a significant change to this policy, we'll tell workspace owners by email before it takes effect.
Contact
Kenfolio. Email support@kenfolio.com.