Foliowell privacy policy
Last updated 2026-10-04. Foliowell (the Wix app) is made by Great Work LLC, 651 N Broad St Suite 206, Middletown, DE 19709, USA. Contact: hello@greatwork.company.
Who is who
You are the owner of the Wix site where Foliowell is installed. Foliowell makes documents (invoices, packing slips, certificates, confirmations and the like) from your site's own records: store orders, form entries and bookings. Your customers are the people those records are about. Foliowell processes their data on your behalf, only to make the documents you set up.
What we store
- Your site's app instance: the Wix app instance id, site id, published site address and name, and your plan status (from Wix).
- Your setup: your business details for documents (name, legal name, address, email, phone, website, tax ID and its label, footer note), time zone, main language, how long to keep documents, your logo if you upload one, your Word templates (with their earlier versions while a document still uses them), numberings and automations.
- Document records: for each document made, which template version, the Wix record id, the number given, the language, when it was made, where it was sent (for example "order timeline: sent") and when its link stops working. No names, addresses or contents.
- Numbers given out: numbering + Wix record id + number, so a record keeps its number. Kept while Foliowell is installed.
- The automation queue: for a record still to be processed, the automation, the Wix record id, the number of tries and the last error message.
- The activity log: 30 days of lines like "Invoice INV-0042 for Order 10023" with record numbers and ids only.
- Bulk files: a merged PDF or ZIP from a bulk run, on our server, deleted 24 hours after the run.
- Usage: how many documents were made each month (for the plan limit).
- Sessions: a random token for each dashboard session, deleted after 12 hours.
What we never store
The records themselves and the finished documents. Names, email addresses, phone numbers, addresses, order contents, form answers and booking details are read from Wix each time a document is made or opened, put into your template in memory, sent to whoever opened it and dropped. A drawn signature or uploaded image is downloaded from Wix's media servers only when your template prints it, for that one document. We build no lists, never contact your customers except the email you switch on for an automation, and never use their data for anything but your documents. We set no cookies and add nothing to your live site.
Document links
Each document has a private link with a signature that can't be guessed. Anyone with the link can open the document until it expires, so share it only with the people it's for. Links stop working after the number of days you choose in Settings (30 unless you change it, at most 365), and the document record is deleted then. Opening a link after the order, entry or booking was deleted in Wix shows nothing.
Where data goes
Our server in the United States (DigitalOcean, New York). Wix, through its API, to read your records and site details, and to add the link to an order's timeline or a contact's notes when you choose that. When email is switched on and you choose it for an automation, Resend (our email provider, United States) sends the customer the link and the file. No analytics, no advertising networks, no other processors.
Retention and deletion
Document records are deleted when their link expires (your setting), log lines after 30 days, finished queue entries at once, bulk files after 24 hours. Deleting a template deletes its versions and its document records. When you uninstall Foliowell, sessions and the queue are deleted at once and everything else 30 days later (so a reinstall by mistake loses nothing). You can download everything we hold for your site from Settings (Download data) and ask us to delete it sooner at hello@greatwork.company. Documents you or your customers downloaded are copies outside our service. If a customer asks us about their data, we answer within 30 days and check the request with you first.
Security
HTTPS everywhere. Requests from Wix are verified (signed app instances, signed webhooks). Document links are signed with a server key and expire. Values from your records are always printed as plain text and never run as template code. Pictures are downloaded only from Wix's own media servers, at most 2 MB, PNG or JPEG. The app runs as its own unprivileged user, and its web server doesn't log request addresses or links for Foliowell pages.
Changes
If this policy changes in a way that matters, we'll update the date above and tell site owners through the app.