Privacy Policy

Portofolia ("we," "us") respects your privacy. This Privacy Policy explains what personal data we collect when you use portofolia.online, how we use it, and your choices. It applies to visitors, account holders, and portfolio viewers where we process data on behalf of our customers.

Depending on how you use Portofolia, we may collect:

• Account data: name, email, password hash, plan, billing references
• Portfolio content: text, images, URLs, and settings you publish
• Usage and device data: IP address, browser type, pages viewed, and diagnostic logs
• Payment-related data: transaction IDs and subscription status (card details are handled by Paddle or other payment partners, not stored by us)
• Support communications: messages you send to support@portofolia.online

We use personal data to:

• Provide, secure, and improve the portfolio builder and hosting
• Authenticate users and prevent fraud or abuse
• Process subscriptions and respond to billing inquiries
• Send service emails (account, security, product updates)
• Comply with legal obligations and enforce our terms

We do not sell your personal information. We do not use your portfolio content to train third-party AI models.

If you are in the European Economic Area, UK, or similar jurisdictions, we process data based on: performance of our contract with you; legitimate interests (security, analytics, product improvement); consent where required (e.g., non-essential cookies); and legal obligation.

We share data with service providers who process it on our instructions, including:

• Cloud hosting and storage providers
• Email delivery (e.g., Resend) for transactional messages
• Paddle, when you pay by card or supported methods (merchant of record)
• bKash or manual payment workflows when you choose those options
• Domain and infrastructure vendors as needed for your plan

We may disclose information if required by law, to protect rights and safety, or in connection with a merger or acquisition with appropriate safeguards.

We use cookies and similar technologies for authentication and security. See our Cookie Policy for details and controls.

We keep account and portfolio data while your account is active. After deletion or closure, we remove or anonymize data within a reasonable period, except where backups, billing records, or law require longer retention.

We use industry-standard measures such as encryption in transit, access controls, and monitoring. No method of transmission or storage is 100% secure; please use a strong password and notify us of suspected unauthorized access.

Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to or withdraw consent for certain processing. To exercise these rights, email support@portofolia.online. You may lodge a complaint with your local data protection authority.

We may process data in countries other than yours. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

Portofolia is not directed at children under 16. We do not knowingly collect personal data from children. Contact us if you believe a child has provided data and we will delete it.

We may update this policy and will revise the "Last updated" date on the legal page. Material changes will be communicated when appropriate.

Privacy questions: support@portofolia.online.