DATA PROTECTION & PRIVACY

Privacy Policy

Last Updated: August 14, 2026

1. Information We Collect

We collect information you provide directly when registering (name, email address), creating portfolios (structured section content, uploaded images), and contacting portfolio owners.

2. Database Security & Row Level Security (RLS)

Your profile data, drafts, and account records are protected using Supabase Postgres Row Level Security (RLS) policies. Private account details are viewable and editable exclusively by the authenticated account owner.

3. Payment & Payment Data Processing (Paddle)

All payment transactions, credit card authorizations prior to the 1-day trial, subscription renewals, and 7-day refund processing are securely managed by our Merchant of Record, Paddle.com Market Ltd. PortfolioHub does not store full credit card numbers, CVVs, or bank details on our servers. Payment details entered prior to 1-day trial activation are encrypted and processed by Paddle in accordance with PCI-DSS standards.

4. Cookies & Lightweight Analytics

We use essential session cookies for user authentication. Pageview analytics collected for portfolio owners strictly record timestamps and referrers without tracking individual personal identifiers across third-party networks.

5. Your GDPR & Privacy Rights

You have the right to export, modify, or permanently delete your account and all published portfolio data at any time via your dashboard settings or by contacting khansami1800@gmail.com.