Privacy, Consent, and Security as a Contributor

What contributors need to know about how their responses are handled, who can see them, and how their data is protected.

🎯 Who is this for?

This article is for anyone who has been invited to contribute to a Folktale campaign. It explains your rights around consent, how your responses are stored and shared, and how Folktale protects your data.


Participating in a Folktale campaign is completely voluntary. Before you submit a response, you will be asked to confirm your consent. This means you are actively agreeing to share your responses for the purposes described in the campaign invitation.

You can withdraw your consent at any time, including after you have already submitted a response.


To withdraw consent with a Folktale account:

  • Sign in to your Folktale account.
  • Go to your account settings and follow the withdrawal steps.
  • Once confirmed, your responses will be removed from the workspace.

To withdraw consent as a guest:

  • Contact the campaign organiser directly to request the removal of your responses.

💡 Need help? Contact support@folktale.io if you need assistance withdrawing your consent.


Visibility

Folktale uses a closed workspace model. Your responses are not publicly visible by default. Whether they can be seen beyond the campaign organiser depends on how the campaign was configured.


Campaigns can be set up as public or private. If you are unsure how your responses will be shared, ask the campaign organiser before you participate.


Within a workspace, access is managed by roles. Not everyone in the organisation can see your responses. Access is assigned based on job function and managed by the organisation running the campaign.

💡 Tip: If visibility matters to you, ask the campaign organiser to confirm the campaign's privacy settings before you submit.


Data Residency

Folktale supports data residency in multiple locations: the US, EU, and Asia Pacific. Where your data is stored depends on how the campaign was set up by the organiser.

If data location is important to you — for example, for legal or personal reasons — confirm the residency location with the campaign organiser before participating.

Regardless of where your data is stored, all data is encrypted in transit and at rest.


Security

Folktale is independently audited for security and holds SOC 2 Type I certification. Security controls include:

  • Unauthorised access prevention
  • Intrusion detection
  • Vulnerability scanning
  • Incident response

If a security incident occurs that affects your data, Folktale will notify affected parties in line with its policies and applicable law.

💡 Need help? For any security or privacy concerns, contact support@folktale.io.


  • How to Submit a Response to a Campaign
  • How to Sign Up or Sign In
  • Folktale Roles and Permissions