FolioCast

Privacy Policy

Last updated: October 31, 2026

This Privacy Policy explains what personal data FolioCast collects, why, who processes it and what rights you have. FolioCast is owned and operated by Igor Olikh, an individual based in Israel, who is the controller of your personal data ("we", "us"). Contact for privacy questions and requests: support@foliocast.app.

1. Data we collect

  • Telegram details: your Telegram chat ID and username, so we can deliver episodes, and your language choice.
  • IBKR Flex token and Flex Query ID: a read-only token that you create and give us. It can read reports only; it cannot trade or move money.
  • Account data from your broker reports: account value and its change, positions and their moves, dividends, withheld tax, commissions, cash and expiring options. Reports may also contain your account number; we never put it in the episode text.
  • Subscription and payment data: Paddle, our Merchant of Record, collects your name, email, country and payment details. We receive your subscription status and the contact details needed to support you. We never see or store your full card details.
  • Support messages: what you send us when you write to support.
  • Website data: the website does not use cookies. Your language choice is kept in your browser's local storage. Cloudflare processes technical data such as IP addresses to serve and protect the site and provides cookie-free, aggregated visit statistics.

2. How we use it and why

  • To provide the Service you ask for: fetch your reports, write and voice your episode, and deliver it to Telegram (performance of our contract with you).
  • To manage your subscription, billing and support (contract; Paddle processes payments under its own legal obligations).
  • To keep the Service secure, prevent abuse and fix problems (our legitimate interests).
  • To meet legal obligations, for example tax and accounting rules.

We do not use your data for advertising, and we do not make automated decisions that have legal or similarly significant effects on you.

3. Your Flex token

Your read-only IBKR Flex token is stored encrypted and is used only to fetch your reports for your episodes. We never send the token to any of the processors listed below, and it never appears in an episode. You can revoke it in IBKR at any time. When you cancel your subscription, we delete the token.

4. Who processes your data

We use these service providers (processors) to run FolioCast. Each receives only what it needs:

  • xAI — receives your account data from the report (figures such as values, changes, positions, dividends, tax, fees and cash) to write the episode script. Not the token and not the account number.
  • ElevenLabs — receives the episode script, which contains your account figures, to produce the voice audio.
  • Financial Modeling Prep — receives only stock symbols, to find short factual news. No amounts and no personal data.
  • Telegram — delivers the episodes and messages to your chat.
  • Paddle — processes payments as Merchant of Record and handles billing, taxes, refunds and payment support. Paddle is responsible for the payment data it collects under its own privacy notice.
  • Cloudflare — hosts the website and the service that builds and stores the data described here.

We may also disclose data where the law requires it, for example to a court or public authority, or to professional advisers bound by confidentiality.

5. We do not sell your data

We do not sell, rent or trade your personal data, and we do not share it for advertising.

6. International transfers

Our providers may process data outside your country, including in the United States. Where the law requires it, we rely on the providers' contractual safeguards, such as Standard Contractual Clauses, to protect your data.

7. How long we keep data

  • The raw broker report is deleted as soon as your episode is built.
  • Episode scripts and audio on our side are kept for no more than 30 days. Episodes delivered to Telegram stay in your chat until you delete them there.
  • Your Flex token and Telegram details are kept while your subscription is active. Cancelling deletes your token; the rest is deleted within 30 days after your subscription ends, unless you ask us to delete it sooner.
  • Paddle keeps transaction records as tax and accounting law requires.

8. Your rights

Depending on where you live, you can ask us to access, correct or delete your data, to restrict or object to its processing, and to receive a copy in a portable format. You can withdraw any consent you gave at any time. To delete your data or make any other request, write to support@foliocast.app. We reply within 30 days. You also have the right to complain to a data protection authority, for example Israel's Privacy Protection Authority or the authority in your country.

9. Security

We protect your data with encryption in transit and at rest for the Flex token, limited access, and by sending each provider only the data it needs. No system is perfectly secure, but we take reasonable steps to protect your data and will tell you if a breach affects you where the law requires.

10. Children

The Service is not intended for anyone under 18, and we do not knowingly collect data from children.

11. Changes

We may update this Privacy Policy. We will change the "Last updated" date above and, for material changes, notify active subscribers.

12. Contact

Igor Olikh, Israel — support@foliocast.app