This page covers the marketing site at foldr.com and the Foldr SaaS service. Foldr Appliance deployments are governed by the agreement signed with the customer; the data on those instances belongs entirely to the customer.
Last updated 2026-05-30
Minnow IT Ltd, a company registered in England and Wales, company number 07970411, with its registered office at Bristol and Bath Science Park, Dirac Crescent, Bristol BS16 6TH, United Kingdom. Throughout this page, “we”, “us” and “Foldr” mean Minnow IT Ltd. We are registered with the UK Information Commissioner’s Office under registration number Z3317461.
It covers the marketing website at foldr.com and the Foldr SaaS service at app.foldr.com and any customer subdomains we operate. It does not cover Foldr Appliance deployments running on a customer’s own infrastructure; the customer is the data controller for their own appliance and we have no operational visibility into it.
When your organisation buys Foldr SaaS, we handle the data inside your instance as a processor, on your organisation’s instructions. Your organisation is the controller; to ask how it handles your data, contact your administrator. That processor relationship is governed by the signed Data Processing Addendum (DPA), available on request.
The marketing site does not run third-party analytics or advertising trackers, and we do not currently send marketing email.
We do not read the bytes of your files outside the indexing, preview and conversion pipeline that you have configured. Files are not used to train any model, ours or anybody else’s.
When Grace, Captur or any other AI-backed feature is enabled, the questions and file content needed to answer them are processed through AWS Bedrock, which invokes Anthropic Claude foundation models. Under the AWS Bedrock service terms, prompts and completions are not used to train any model and are not shared with the foundation model provider. The default Bedrock routing may reach AWS regions worldwide; enterprise customers can opt into an EU-only Bedrock profile that keeps invocations inside the EU and EEA. Anthropic is not a Foldr sub-processor; Bedrock (AWS) is. Foldr respects the customer’s configured opt-out for any AI processing. The current sub-processor list is on the Trust Centre.
Foldr SaaS data is processed in the United Kingdom and the European Union by default, on infrastructure operated by us. Application compute and databases run in the United Kingdom; media and preview storage is in the European Union, with a UK migration in progress. Transactional email and OCR run in the United Kingdom. Backups are encrypted and held in the same region as the primary store.
A small number of operational providers sit outside the UK and EEA. Customer support ticketing and operational telemetry are processed in the United States. Where personal data leaves the UK or EEA, we rely on a recognised safeguard: the EU Standard Contractual Clauses and the UK International Data Transfer Agreement, with a transfer risk assessment where one is required. The full sub-processor list, with named entities, regions, and the safeguard relied on, is on the Trust Centre and is sent on request.
Under the UK GDPR, the EU GDPR where it applies, and the Data Protection Act 2018, you have the right to access, correct, export, restrict, object to, and delete personal data we hold about you. For the marketing site, write to [email protected]. For SaaS, contact your administrator first; they can fulfil most requests directly inside the product.
If you’re unhappy with how we handle a request, you can complain to a supervisory authority. In the United Kingdom that is the Information Commissioner’s Office at ico.org.uk. In the European Union it is the data protection authority of the country where you live or work.
Foldr SaaS uses a small set of sub-processors for hosting, email delivery, support, monitoring and (when enabled) AI processing. The current list, with regions and transfer safeguards, is on the Trust Centre, is available on request, and is included in the signed DPA.
We use cookies and browser storage only where they are necessary to deliver the product or to remember a preference you set. We set no analytics or advertising trackers. The full inventory, with name, purpose and lifetime, is in our Cookie Policy.
We’ll update this page in place when policy changes. Material changes are emailed to administrators of active SaaS customers.
Email [email protected] and a human will reply. For postal enquiries: Data Protection Enquiries, Minnow IT Ltd, Bristol and Bath Science Park, Dirac Crescent, Bristol BS16 6TH, United Kingdom.
