Privacy Policy

FolderPal is a Google Drive productivity tool operated by Jacky Lee registered under ABN [ABN], trading as Drolatic Labs ("FolderPal", "we", "us", or "our").

This Privacy Policy explains how we collect, use, store, and protect personal information when you use FolderPal, including our website, web application, Google Drive integration, and related services.

This Privacy Policy is governed by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where we handle personal information of individuals located in other jurisdictions, we also comply with applicable local privacy laws.

If you have any questions, contact us at [email protected].

1. What FolderPal does

FolderPal helps users create repeatable Google Drive folder and file structures from reusable templates.

To provide this service, FolderPal connects to your Google Drive account with your permission. FolderPal can list folders, subfolders, and files, read basic metadata about those items, and create or copy folders and files when you ask it to.

FolderPal does not access, read, analyse, edit, or modify the contents of your files.

2. Information we collect

We collect information you provide to us, information generated when you use FolderPal, and information received from connected services such as Google.

This may include:

• your name, email address, profile image, and Google account details;
• account, workspace, and login information;
• Google Drive folder names, file names, folder IDs, file IDs, parent folder relationships, Shared Drive information, and related metadata;
• FolderPal templates, folder/file structures, placeholder fields, placeholder values, and generation settings;
• generation history, including job status, timestamps, destination folders, created item links, success/failure logs, and error information;
• billing and subscription information processed through Stripe;
• support messages and communications with us;
• website and product analytics information, such as pages visited, actions taken, device information, browser type, approximate location, and referral information;
• technical logs used for security, debugging, abuse prevention, and service reliability.

We do not collect payment card details directly. Payments are processed by Stripe.

3. Google Drive and Google API data

FolderPal uses Google OAuth to let you connect your Google account and authorise FolderPal to work with your Google Drive.

FolderPal requests Google Drive access so that it can:

• show folders, subfolders, and files selected by you;
• import folder and file structures into FolderPal templates;
• create new Google Drive folders;
• create native Google files, such as Google Docs, Sheets, or Slides, when included in a template;
• copy files when included in a template;
• place generated folders and files in destinations selected by you;
• support My Drive and Shared Drives;
• show generation history and links to created folders or files;
• troubleshoot, secure, and maintain the service.

FolderPal may store the Google Drive metadata needed to provide these features, including folder names, file names, item IDs, folder hierarchy, destination IDs, template structures, placeholder values, and generation logs.

FolderPal stores Google OAuth tokens in encrypted form. These tokens are used to perform actions that you request through FolderPal, such as importing a structure or generating folders and files.

FolderPal does not:

• read or analyse the contents of your Google Docs, Sheets, Slides, PDFs, images, videos, or other files;
• modify the contents of your files;
• sell Google user data;
• use Google Drive data for advertising;
• use Google Drive data to train AI models;
• transfer Google Drive data to third parties except as needed to provide, secure, or support FolderPal;
• send file contents, folder names, file names, Google Drive IDs, or placeholder values to Google Analytics, Microsoft Clarity, or PostHog.

FolderPal personnel do not access Google Drive metadata, such as folder names, file names, Drive IDs, template structures, or placeholder values, except where necessary to provide user-authorised support, investigate security or abuse issues, comply with legal obligations, maintain service reliability, or use aggregated or de-identified information for internal operations.

FolderPal's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Analytics and product usage tracking

We use Google Analytics, Microsoft Clarity, and PostHog to understand how people use our website and product, improve user experience, monitor feature usage, and identify issues.

We also use Microsoft Clarity for session replay and heatmaps to understand usage and diagnose issues. Clarity is configured with input masking, and we take steps to avoid capturing file contents, folder names, file names, Google Drive IDs, or placeholder values.

We do not use analytics tools to track file contents, folder names, file names, Google Drive IDs, or placeholder values. Where possible, sensitive data is avoided, masked, obfuscated, or excluded from analytics events.

Analytics tools may collect information such as page views, button clicks, browser type, device type, approximate location, session information, and product usage events.

Where required by law, we will ask for consent before using non-essential analytics cookies or similar technologies. You may also be able to control cookies through your browser settings, although disabling some cookies may affect how FolderPal works.

5. How we use information

We use personal information to:

• provide and operate FolderPal;
• authenticate users and manage accounts;
• connect to Google Drive with your permission;
• create, copy, and organise folders and files when you request it;
• save and manage templates;
• process generation jobs;
• provide generation history and status information;
• manage subscriptions, billing, and payments;
• send service, account, billing, and security messages;
• send product updates or newsletters where you have opted in;
• provide support and respond to requests;
• monitor, debug, secure, and improve the service;
• prevent fraud, abuse, unauthorised access, and misuse;
• comply with legal obligations.

6. Legal bases for processing

Where privacy laws require us to identify a legal basis for processing personal information, we rely on one or more of the following:

• contract performance, where we process information to provide FolderPal and related services;
• legitimate interests, where we process information to secure, maintain, improve, and support FolderPal, provided those interests are not overridden by your rights;
• consent, where you have given consent, such as for optional marketing communications or certain analytics cookies where required;
• legal obligations, where we need to process information to comply with applicable laws.

7. Marketing communications

If you opt in, we may send you product updates, newsletters, or other marketing communications.

You can unsubscribe from marketing emails at any time by using the unsubscribe link in the email or contacting us at [email protected].

We may still send important transactional or service-related messages, such as account, billing, security, or product functionality notices.

8. When we share information

We do not sell your personal information.

We may share information with trusted service providers who help us operate FolderPal, including providers for:

• authentication and database infrastructure;
• cloud hosting and application infrastructure;
• payment processing;
• email delivery;
• analytics;
• error monitoring, logging, security, and support.

Our current service providers include Google, Supabase, Stripe, PostHog, Google Analytics, Microsoft Clarity, and Resend.

We may also disclose information if required to comply with law, enforce our terms, protect rights and safety, investigate abuse, or complete a business transfer such as a merger, acquisition, or sale of assets.

9. Shared Drives and third-party data

FolderPal may allow users to access or generate structures inside Google Shared Drives.

If you use FolderPal with a Shared Drive, team folder, client folder, or organisation-owned Drive, you are responsible for ensuring that you have permission to connect that Drive, access the relevant folders and files, and use FolderPal with that data.

Folder names, file names, placeholder values, and template structures may include personal information or confidential business information. You are responsible for the information you choose to include in FolderPal.

10. Data storage and international transfers

Drolatic Labs is based in Australia. FolderPal uses cloud service providers that may process and store information in Australia, the United States, Europe, and other countries where they or their subprocessors operate.

Where we transfer personal information outside Australia, we take reasonable steps to ensure that the recipient handles the information in accordance with the Australian Privacy Principles and this Privacy Policy, as required under APP 8.

11. Security

We take reasonable technical, organisational, and administrative measures to protect personal information.

These measures may include encryption in transit, encrypted storage of Google OAuth tokens, access controls, authentication protections, logging, monitoring, backups, and limiting access to personal information to people and systems that need it.

No online service can guarantee absolute security. You are responsible for keeping your Google account and FolderPal account credentials secure.

12. Data retention, disconnecting Google Drive, and deletion

We retain personal information for as long as needed to provide FolderPal, comply with legal obligations, resolve disputes, maintain security, prevent abuse, and enforce our agreements.

If an account is completely inactive for 12 consecutive months, we reserve the right to delete the workspace and associated metadata after providing 30 days' email notice to the account holder.

If you disconnect Google Drive, FolderPal will revoke the connected Google OAuth scopes and stop using your Google Drive connection for future actions.

Disconnecting Google Drive does not automatically delete all previously stored FolderPal templates, generation history, or Google Drive metadata already saved in your workspace. This information may remain in FolderPal so that your templates and generation history continue to work, unless you delete it, request workspace deletion, or we delete it under our retention processes.

You may request deletion of your workspace via Workspace Settings or by contacting [email protected]. We aim to process workspace deletion requests within 30 days, unless we need to retain certain information for legal, billing, security, fraud prevention, backup, or legitimate business reasons.

When your workspace is deleted, we will delete or de-identify the personal information and stored Google Drive metadata associated with that workspace, subject to any information we need to retain for legal, billing, security, fraud prevention, backup, or legitimate business reasons.

Deleted information may remain in backups, logs, or archived systems for a limited period before being removed according to our normal retention processes.

You can also revoke FolderPal's access directly from your Google Account permissions page.

13. Your privacy rights

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:

• request access to the personal information we hold about you (APP 12);
• request correction of personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading (APP 13).

If you are located in another jurisdiction, you may have additional rights under applicable local privacy laws, including the right to delete, restrict, object to, or receive a copy of your personal information.

You may also have the right to complain to a privacy regulator. In Australia, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

To make a privacy request, contact us at [email protected]. We may need to verify your identity before responding.

14. Cookies

FolderPal uses cookies and similar technologies to operate the website and application, keep users signed in, remember preferences, understand usage, and improve the service.

Some cookies are necessary for the service to work. Others may be used for analytics or performance measurement.

Where required, we will provide a cookie consent mechanism for non-essential cookies or similar technologies. You can also control cookies through your browser settings, although disabling some cookies may affect how FolderPal works.

15. Children

FolderPal is not intended for children under 16, and we do not knowingly collect personal information from children under 16.

If you believe a child has provided us with personal information, contact us at [email protected] and we will take appropriate steps to delete it.

16. Data breaches

If we become aware of an eligible data breach affecting personal information, we will take reasonable steps to investigate, contain, and remediate the issue.

Where required under the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988, we will notify affected individuals and the OAIC.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we will take reasonable steps to notify users, such as by posting a notice in the product or sending an email.

The updated version will be effective when posted, unless stated otherwise.

18. Contact us

For privacy questions, requests, or complaints, contact:

Drolatic Labs
Product: FolderPal
Email: [email protected]