Privacy Policy

• We collect what the product needs to work, and nothing to sell.
• We have never sold or shared personal information for advertising, and we don't plan to.
• Anything you publish on your public page is public by design. That's the point of the page.
• We use one privacy-preserving analytics tool on the website. It sets no cookies and doesn't identify you.
• You can delete your account and its content from inside the app, at any time, without asking us.

Account data. Your email address, and the fact that you verified it. If you sign in with Apple or Google, we receive the identifier they give us and the email address you chose to share; we never see your password with them.

Profile and portfolio content. Your display name, profession, location, bio, avatar, contact details (phone, WhatsApp, email, website, social links) and every photo, title, caption and description you upload. You choose all of this, and most of it is intended to be published.

Subscription status. Whether you have an active Pro subscription, which plan, and when it renews or lapses. This comes to us from RevenueCat via the app stores. We never receive your card number, billing address, or any payment credential. Apple and Google take the payment and don't pass those on.

Technical data. Standard server and app logs: IP address, device and operating system, timestamps, and error diagnostics. We use these to run the service, debug it, and defend against abuse.

Crash reports. If the app crashes or hits an unexpected error, we receive a stack trace, the device model, and the OS and app version, via Sentry. We never attach your account, email or name to these reports — a crash report cannot be traced back to who you are.

Website analytics. We use Vercel Web Analytics on portapfolio.com. It sets no cookies and builds no cross-site profile; visitors are counted using a hash derived from the request, which is rotated and not retained, and the session is discarded after 24 hours. We see aggregate page views, not people. Your IP address is processed by Vercel in the course of serving the page, which is personal data under GDPR, which is why it's named here.

Waitlist. If you gave us your email before launch, we hold that address and where the link came from, and we use it once: to tell you the product is ready.

Messages you send us. Whatever you put in the contact form or an email, so we can reply.

We don't have a product analytics SDK in the app today. If we add one, this section will name it before it ships, and this policy's effective date will change.

Where the GDPR applies, our lawful bases are: performance of a contract for everything needed to run your account and publish your page; legitimate interests for security, abuse prevention, debugging and aggregate analytics, balanced against your rights; consent where we ask for it, such as the waitlist email; and legal obligation where we must keep or disclose something by law.

Under Mexico's LFPDPPP, the necessary purposes are: creating and maintaining your account, publishing the page you asked us to publish, providing the paid features you subscribed to, supporting you, and keeping the service secure. There are no secondary purposes today. If we add any, we will tell you and you'll be able to refuse them without losing the service.

When you publish, the page at your handle is public: it can be visited by anyone with the link and it is indexable by search engines. Everything shown on it, including your name, profession, location, bio, photos, captions and every contact method you added, is public because publishing it is what you asked us to do.

Only add a phone number, WhatsApp number or address to your page if you're willing for anyone to have it. A public page is public to search engines, scrapers and strangers, not only to the client you handed the card to.

We may also list published pages in our sitemap, the file that tells search engines which pages exist so that people can find you. That file is itself public, so where a page is listed there, its address can be read by anyone. Being findable is most of the point of publishing, but you should know it before you publish rather than after.

Your email address for signing in, your subscription status, and your unpublished portfolios are never shown publicly. Switching your page off in the app removes it from the web, usually within an hour and in any case within 24 hours, after which the address returns our standard "not found" page, which reveals nothing about whether the handle exists.

Switching a page off hides the page, not necessarily the images. Photos are served from public addresses so that pages load quickly, and an image address that someone already has may keep working after you unpublish. Deleting the photo, the portfolio or your account is what removes the file itself. If a picture must stop being reachable, delete it rather than unpublishing.

We don't sell personal information, and we don't share it for cross-context behavioural advertising. Under the CCPA/CPRA that means we have no "sale" or "share" to opt out of. We do rely on service providers who process data on our instructions:

• Supabase. Database, file storage and authentication. This is where your account, your portfolios and your photos live.
• Vercel. Website and public page hosting, and the analytics described above.
• Resend. Sends transactional email, such as your sign-in code.
• RevenueCat. Records subscription status against your account identifier.
• Sentry. Receives crash reports so we can find and fix bugs. Stored in the EU. Never linked to your account.
• Apple and Google. They take subscription payments under their own privacy policies, which we don't control.

Each of these is bound by contract to process data only for us. We may also disclose data where we're legally required to, or where it's necessary to investigate a credible security or safety concern, and we'll tell you unless we're prohibited from doing so.

If the business is ever sold or merged, your data may transfer with it. You'd be told before that happened, and this policy would continue to apply until you were given a new one.

Our providers operate globally and your data is likely to be stored and processed in the United States. If you're in the EU, the UK or Mexico, that's a transfer outside your country. Where the GDPR applies, these transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision, as agreed with each provider.

Account and content data is kept while your account exists. Close your account and your profile, portfolios and photos are removed from the live service; encrypted backups age out on their normal cycle, within 30 days. Server logs are kept for a short operational period. Waitlist addresses are deleted once you have an account, or on request. Messages you send us are kept as long as needed to deal with what you asked, and then archived or deleted.

When an account is closed we keep one small record of the closure: the account's identifier, the email address it used, the dates it was opened and closed, and which version of the Terms was accepted. It holds no name, phone number, biography, contact details or photos. We keep it because consumer law requires us to be able to show that a subscriber agreed to the terms they were billed under — currently for up to three years after the account ends — and because an inquiry about a closed account arrives with an email address rather than an internal identifier, so a record we cannot match to a person would not answer it. The legal basis is our legitimate interest in establishing and defending legal claims.

This is how to delete your Portapfolio account (listed on Google Play as Portapfolio: Business Card), whether or not you still have the app installed.

• With the app. Open Portapfolio, go to Profile, tap Delete account, and confirm. This takes effect immediately and needs nothing further from you.
• Without the app. Email rogelio.robledo.9313@gmail.com from the address your account uses and ask us to delete it. We can only act on a request sent from that address — it's how we confirm you're the account holder rather than someone asking us to delete a stranger's account. We'll act on this within 30 days.

Deleting your account does not cancel an active subscription bought through the App Store or Google Play. Cancel it separately from your phone's subscription settings, or billing continues after the account is gone.

Deleted immediately: your profile, every portfolio and photo, your contact details, and your ability to sign in. Retained: one small closure record — your account's identifier, the email address, the dates the account was open, and whether you held a subscription — kept for up to three years, as explained in "How long we keep it" above. It holds no name, photo or content.

Wherever you live, you can ask us to give you a copy of your data, correct it, delete it, or stop a particular use of it. Write to rogelio.robledo.9313@gmail.com. We'll respond within 30 days, and we won't charge you or treat you differently for asking.

In the EU and UK, you have the rights of access, rectification, erasure, restriction, portability and objection, and you can withdraw consent at any time where we relied on it. You can also complain to your local supervisory authority.

In California, you have the right to know what we collect and why, to delete it, to correct it, and to limit the use of sensitive personal information. We don't sell or share personal information as those terms are defined, and we don't use or disclose sensitive personal information for any purpose that would trigger the limitation right. You may use an authorised agent.

In Mexico, the responsable for the personal data described in this policy is Rogelio Robledo Ruiz, at Av. Insurgentes Sur 1425, 1006, Mexico City, Mexico 03920. You have ARCO rights: acceso, rectificación, cancelación and oposición, plus the right to revoke consent and to limit the use or disclosure of your data. Send your request to rogelio.robledo.9313@gmail.com with proof of identity and what you're asking for. Exercising these rights is free.

See "Deleting your account" above for the exact steps, and for what we keep afterwards.

Portapfolio is not for anyone under 18. We don't knowingly collect data from children. If you believe a child has created an account, tell us at rogelio.robledo.9313@gmail.com and we'll delete it.

Data is encrypted in transit and at rest with our providers, access to production systems is limited, and database rules enforce that only you can read or change your own unpublished content. No service is perfectly secure, and we won't pretend otherwise. If a breach affects your personal data we'll notify you and the relevant regulator as the law requires.

If we change how we handle your data in a way that matters, we'll update this page and change the effective date, and for significant changes we'll tell you by email or in the app before they take effect.

This policy is published in English and in Spanish, describing the same practices under the same version number and effective date. Translation is never exact, so if a genuine discrepancy between the two ever changes the meaning of a passage, the Spanish text governs for people located in Mexico and the English text governs everywhere else.