Privacy policy

Template text. Review with a privacy professional (e.g. for GDPR/UK GDPR obligations) before commercial launch.

What we collect

• Account data: email address, name, password hash (managed by our authentication provider).
• Portfolio content: everything you enter or upload. You control what is public.
• Visitor submissions: contact messages and recommendation requests (name, email, message, optional attachment), delivered privately to the portfolio owner.
• Security data: salted, one-way fingerprints of IP addresses for rate limiting and abuse prevention; audit logs of sensitive account actions.

How we use it

To provide the service, secure accounts, prevent spam and abuse, deliver notifications you configure, and support you when you ask for help.

Staff access

Support staff can open a time-limited, read-only support session on your account only with a recorded reason. You are notified and the access appears in your account activity.

Sharing

We use infrastructure providers (hosting, database and storage, email delivery) acting on our instructions. We do not sell personal data.

Your rights

• Export all your data from your account settings.
• Correct or delete content at any time.
• Request deletion of your account.

Retention

Content is kept while your account exists. Database backups are retained for a limited period by our database provider and then overwritten.

Contact

Privacy questions: support@portfolio-os.online