Foilwork
Privacy Policy

How we handle your information.

Effective: May 5, 2026 Last updated: May 5, 2026

Foilwork is a service operated by E-Development LLC, a Nevada limited liability company ("Foilwork," "we," "us," or "our"). This Policy explains what we collect, how we use it, who we share it with, and the rights you have. We've written it to be readable. Where the law requires precise terms, we use them; everywhere else, plain English.

01 — Eligibility

Who Foilwork is for

Foilwork is currently offered by invitation only and is intended exclusively for licensed independent hair stylists who:

We do not knowingly collect information from individuals outside this scope. If you believe you have an account in error, contact us using the details at the end of this Policy and we will close it and delete associated data within thirty (30) days.

02 — What we collect

Information we collect

Information you provide

When you create an account or use Foilwork, we collect:

Google account information (Calendar)

To detect open appointment slots and same-day cancellations, you connect a Google account containing your appointment calendar — typically a calendar your booking platform exports to Google Calendar. You authorize us via Google's OAuth 2.0 flow with one read-only scope:

We use this access only to read event start times, end times, and titles for the purpose of identifying open availability and detecting newly canceled appointments. We do not write, modify, or delete calendar events. We do not access any other Google data — no Gmail, Drive, Contacts, Photos, or anything else.

You can revoke our access at any time at myaccount.google.com/permissions. Doing so will disable Foilwork's core functionality.

Instagram account information

To learn your brand voice and to publish posts you have approved, you connect your Instagram Business or Creator account. The OAuth handshake and the publishing API calls are managed on our behalf by Upload-Post (uploadpost.com), a third-party processor. Through this connection we access:

We do not access direct messages, follower lists, follower personal information, or insights for any account other than your own. You can revoke access at any time from Instagram's Settings → Apps and Websites.

Generated content

We store the AI-generated post drafts we create for you, your edits, your approval and rejection decisions, and the final published versions. Drafts you reject are retained for ninety (90) days for dispute resolution and quality monitoring, then deleted.

Payment information

We use Stripe, Inc. to process subscription payments. You provide your payment details directly to Stripe; we never see, store, or transmit your full card number, CVV, or bank account number. We retain only the metadata Stripe sends us — a customer identifier, the last four digits of your payment method, billing ZIP, and your subscription history.

Device & usage information

When you use Foilwork, we automatically receive:

We do not use third-party web analytics, advertising trackers, or non-essential cookies on the Foilwork website. The only cookies we set are strictly necessary cookies for authentication and session management.

03 — How we use it

How we use your information

We use the information we collect only to:

  1. Operate the Service — authenticate you, sync your calendar, generate post drafts, deliver approval notifications, publish approved posts, process payments.
  2. Personalize your drafts — analyze the voice patterns of your own Instagram content so generated captions read like you wrote them. This processing is strictly per-stylist: your content is never used to inform or improve drafts generated for any other customer.
  3. Communicate with you — service announcements, billing notifications, and (with your consent) product updates.
  4. Maintain security — detect and respond to fraud, abuse, and unauthorized access.
  5. Comply with law — respond to lawful legal process and enforce our Terms of Service.

We do not sell or share your personal information for cross-context behavioral advertising. We do not use your data, or data we receive from Google or Instagram on your behalf, to train any general-purpose, foundation, or non-personalized AI/ML model.

04 — Google API services

Google API Services Disclosure (Limited Use)

Foilwork's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

With respect to data we receive from Google APIs:

05 — Instagram

Meta Platform Disclosure (Instagram)

Our use of information from Instagram complies with Meta's Platform Terms and Developer Policies. Instagram data we access is used solely to (a) learn your voice for caption generation and (b) publish posts you have personally approved. We do not transfer Instagram data to advertisers, data brokers, or any third party for that party's independent use. You may revoke our access at any time, and you may request deletion of your Instagram-derived data by contacting us.

06 — AI processing

How we use AI to draft your posts

When we generate post drafts, the following data flows occur:

Voice model isolation

The voice profile we build from your Instagram content is private to your account. We do not pool, mix, or anonymize your voice data into any shared model. If we ever offer a feature that would use anonymized voice patterns across customers to improve drafts, we will notify you in advance and obtain your separate, affirmative consent before any such use begins. Your data will not be included unless and until you opt in.

The approval gate

Nothing is published to your Instagram account without your explicit, in-app approval of each individual post. Foilwork does not auto-publish, and we cannot publish on your behalf without that approval action.

07 — Who we share with

How we share your information

We share personal information only with:

Subprocessors

Third-party service providers that process data on our behalf under written contracts that restrict their use of the data:

SubprocessorPurposeData categories
Amazon Web ServicesCloud hosting, storage, encryption (KMS)All data at rest and in transit
Anthropic, PBCCaption text generationVoice profile, calendar context, your edits
Google LLCCloud Vision (image labeling); read-only Calendar APIInstagram images; calendar event metadata
Upload-PostInstagram OAuth and publishingInstagram tokens, post payloads
Stripe, Inc.Payment processingBilling details (provided directly to Stripe)
Expo / 650 IndustriesPush notificationsDevice push tokens, notification payloads
AWS SESTransactional email deliveryYour email address, message contents

Legal & safety

When we believe in good faith that disclosure is required by law, court order, or to protect the safety of our users or others.

Business transfers

If Foilwork or E-Development LLC is involved in a merger, acquisition, or asset sale, your information may be transferred to the successor entity, subject to this Policy or a successor policy that provides equivalent protections.

We do not sell personal information, share it for cross-context behavioral advertising, or disclose it to data brokers.

08 — Retention

How long we keep data

DataRetention period
Account profileFor the life of your account
Calendar event metadataRolling 90-day window, then purged
Instagram media used for voice modelingReplaced as new content publishes; older content purged within 90 days
Drafts you rejected90 days
Drafts you approved & publishedLife of account, as a record of authorized publications
Payment metadata7 years (US tax recordkeeping)
Server logs30 days
Backups30 days

When you delete your account, we delete or anonymize all personal information within thirty (30) days, except (a) information we are legally required to retain (e.g., tax records) and (b) information held in disaster-recovery backups, which is purged on the rotation cycle described above.

09 — Security

How we protect your information

We implement reasonable administrative, technical, and physical safeguards, including:

No method of transmission or storage is perfectly secure. If we become aware of a security incident affecting your personal information, we will notify you and the Office of the Nevada Attorney General as required by NRS 603A.220.

10 — Your rights

Your privacy rights

If you are a Nevada resident (NRS 603A & SB 220)

You have the right to:

If you are outside Nevada

Foilwork is offered only to Nevada residents, but if you've used the Service from a state with a comprehensive privacy law (California's CCPA/CPRA, Colorado, Connecticut, Virginia, Utah, and others), we will honor the equivalent rights granted by your state's law: access, deletion, correction, portability, opt-out of sale or sharing, and opt-out of profiling. We treat all such requests under the highest applicable standard.

How to exercise your rights

Email privacy@foilwork.com or write to E-Development LLC at the address below. We'll verify your identity using information already on your account (typically the email address on file) and respond within forty-five (45) days. We won't charge you for exercising these rights, and we won't retaliate against you for doing so.

11 — Children

Children's privacy

Foilwork is intended only for individuals 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a person under 18, we will delete that information promptly.

12 — Changes

Changes to this Policy

If we materially change this Policy, we will notify you at least thirty (30) days in advance via email and an in-app notification. The "Last updated" date above will reflect the most recent change. Continued use of the Service after a material change takes effect constitutes acceptance of the updated Policy. If a change involves a new use of Google or Instagram user data, we will obtain your renewed consent before applying the new use to data we have already collected.

13 — Contact

Contact us

For privacy questions, requests, or to report a concern:

Foilwork — a product of E-Development LLC
Email: privacy@foilwork.com
Mail: [Reno, NV mailing address — to be inserted]

This Privacy Policy is governed by the laws of the State of Nevada. Any disputes will be resolved exclusively in the state or federal courts located in Washoe County, Nevada.