Privacy policy

Folio is operated by BWATER LIMITED (NZBN 9429053409638), trading as Bridgewater Partners(“Folio”, “we”, “us”), an agency under the New Zealand Privacy Act 2020. This policy explains what personal information we collect, why, who we share it with, and your rights. Privacy queries: info@folionz.com.

• Account & identity: name, email, contact details, hashed password.
• Property & portfolio: addresses, valuations, equity, cashflow, holdings and scenarios you enter.
• Financial: rent, expenses, ledgers, tax figures and owner statements (property-management features).
• Documents: files you upload, including leases, insurance and sale documents (some processed by AI extraction).
• Connected email & files: mailbox and cloud-drive content, only when you authorise a connection (Gmail, Outlook, Drive, OneDrive, Dropbox).
• Bank data, transactions for reconciliation, only when you connect Akahu.
• Enquiries & feedback: coaching enquiries, pre-qualification details, demo bookings, and in-app feedback you submit.
• Usage & analytics, onboarding/activation and usage telemetry.
• AI interactions, messages and context you send to the AI assistant.
• Payment, subscription and payment records; card payments are handled by Stripe and we do not receive or store card numbers.

Directly from you (when you enter data, upload documents, or contact us); automatically (usage and device data as you use the platform); from third parties that provide property data (for example CoreLogic and MBIE bond data); and from connections you authorise (email, drive, bank).

To provide the platform and its tools; generate the estimates, reports and documents you request; connect you with services you ask for; communicate with you; keep the service secure; meet legal obligations; and improve Folio (including the AI features below). We rely on the information privacy principles in the Privacy Act 2020. We do not sell your personal information.

To power AI features (assistant answers, drafting, and document extraction), your inputs and relevant context, which may include portfolio, financial or document data, are sent to Anthropic, which processes them to generate the response and returns it to us. If we enable document search on your workspace, the text being indexed is also sent to Voyage AI to create the search index; that feature is not currently active.

We do not sell this data, and we do not share it for advertising. AI output is general information and may be wrong; it does not make decisions for you.

We share personal information with the sub-processors below, with service providers you ask us to connect you to, and with others where required by law or to protect rights and safety. We do not sell personal information.

Sub-processors we use to run Folio

Only if you connect them

These are optional connections you authorise, and they receive data only once you enable them and only for the feature concerned. You can disconnect any of them at any time: Google (Gmail, Drive), Microsoft (Outlook, OneDrive) and Dropbox for mailbox and document sync; Akahu for bank feeds; and CoreLogic and AddressFinder for property and address lookups.

Some pages load marketing images from Unsplash, which receives your IP address when your browser fetches them. We update this list when our providers change.

Folio is a New Zealand service, but your personal information is stored and processed outside New Zealand. Your data is held at rest in Singapore (Supabase), and the application, payment, email and AI providers listed in clause 6 process it in the United States. Address geocoding and open-home QR codes are handled in the European Union and Germany respectively.

Where we disclose personal information overseas we rely on the protections in our contracts with those providers, which require them to safeguard it to a standard comparable to the Privacy Act 2020, consistent with information privacy principle 12.

We hold data in our isolated infrastructure with access controls and encryption in transit and at rest; credentials for connected services (OAuth tokens) are encrypted. No system is perfectly secure. We keep personal information only as long as needed for the purposes above or as the law requires, then delete or de-identify it. In practice we keep the data in your workspace for as long as your account is open, because it is what the product shows you. We do not run an automatic deletion schedule. You can ask us to delete your account and its data at any time (clause 10), and some records, such as billing and tax records, are kept for the period the law requires even after that.

You may request access to, and correction of, the personal information we hold about you (information privacy principles 6 and 7), and you can export or ask us to delete your data when you close your account. Contact us at info@folionz.com. If you’re not satisfied with our response, you can complain to the Office of the Privacy Commissioner.

We use cookies and similar technologies that are necessary to sign you in, keep your session, and understand product usage. These are first-party only: we do not use third-party advertising or marketing trackers, and we do not sell or share your activity with advertising networks. Because of that we do not show a cookie consent banner. If that changes, we will say so here and ask for your consent first.

We send you service and transactional messages needed to run your account. Any marketing emails are sent consistent with the Unsolicited Electronic Messages Act 2007 and include an unsubscribe option.

Folio is not directed at people under 18, and we do not knowingly collect their personal information.

If a privacy breach occurs that is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as required by the Privacy Act 2020.

We may update this policy; the “Last updated” date and version above will change and material changes will be notified through the platform. Questions or requests: info@folionz.com, (BWATER LIMITED, NZBN 9429053409638).