Privacy Policy

Last updated July 20, 2026

This Privacy Policy describes how Portfo ("Portfo," "we," "us," or "our"), based in Toronto, Ontario, Canada, collects, uses, discloses, and safeguards personal information in connection with portfo.dev and related services (collectively, the "Service"). By accessing or using the Service, you acknowledge that you have read and understood this Policy. Capitalized terms not defined here have the meaning given to them in our Terms of Service.

1. Information We Collect

1.1 Waitlist Information

If you join our waitlist, we collect the email address you provide, together with limited technical information associated with the request (such as general device and network information), for the purpose of notifying you when access becomes available and preventing fraud and abuse. This processing is based on your consent.

1.2 Account Information

When you register for an account, we collect your name, email address, email verification status, and, where applicable, referral information. Your password is processed and stored using industry-standard hashing and is not accessible to Portfo personnel in plaintext. We process this information to create, administer, and secure your account and to perform our obligations under the Terms of Service.

1.3 Content You Upload

Images, video, and 3D model files that you upload to your profile or portfolio are transmitted to and stored on our behalf by our infrastructure provider, Supabase, Inc., using access-controlled cloud storage. We process this information to host and display your content as part of operating the Service.

1.4 Content Stored Locally

Certain content you create — including portfolio page layout, text, and structure, and your likes, saves, and follows — is stored locally in your browser's storage rather than on our servers. This local content is not synchronized across devices or browsers and will be lost if you clear your browser data. Should this architecture change, we will update this Policy prior to the change taking effect.

1.5 Technical and Security Information

We process limited technical information relating to sign-in and account requests (such as request metadata and rate-limiting counters) to detect, prevent, and mitigate fraudulent, unauthorized, or abusive activity. This information is retained only as long as necessary for that purpose and is not used to build a behavioral profile of you.

2. Cookies and Similar Technologies

We use cookies and similar tracking technologies to operate, secure, and improve the Service. We categorize cookies as follows:

• Strictly necessary cookies (e.g. portfo_session, portfo_onboarded, portfo_cookie_consent) are required for the Service to function, including authentication, security, and remembering your cookie preferences. These cannot be disabled.
• Analytics cookies help us understand aggregate usage patterns so we can improve the Service. These remain disabled until you affirmatively opt in, and you may withdraw consent at any time.

Portfo does not currently deploy marketing or advertising cookies. You may review or change your cookie preferences at any time via "Cookie settings" in the site footer.

3. How We Share Your Information

We do not sell personal information, and we do not use advertising trackers. We disclose personal information only as follows:

• Service providers. We engage a limited number of third-party providers (including Supabase, Inc. for infrastructure and storage) to host, secure, and operate the Service. These providers are contractually restricted to processing information on our behalf and for our purposes only.
• Discover visibility. Content and profile information you choose to make visible through Discover, or through employer/recruiter discoverability, is disclosed to other users or third parties in accordance with Section 4 below.
• Legal and safety. We may disclose information where required by law, regulation, legal process, or governmental request, or where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Portfo, our users, or the public.
• Business transfers. If Portfo is involved in a merger, acquisition, financing, or sale of assets, personal information may be disclosed or transferred as part of that transaction, subject to standard confidentiality obligations.

4. Your Visibility on Discover

Your Privacy & Visibility settings control whether your posts appear in Discover's browsing and search surfaces. You may adjust these settings, or opt out entirely, at any time from your dashboard.

Portfo also offers a feature that allows employers and hiring partners to discover profiles that have opted in to be found. This feature is strictly opt-in: your profile is not discoverable through it unless you affirmatively enable it in your Privacy & Visibility settings, and you may disable it at any time.

5. International Data Transfers

Your information may be processed and stored on servers located outside of your province, state, or country of residence, including in jurisdictions whose data protection laws may differ from those of your home jurisdiction. Where we transfer personal information internationally, we rely on the safeguards made available by our service providers to protect your information consistent with this Policy.

6. Data Retention

We retain account information for as long as your account remains active and as reasonably necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Waitlist entries are retained until converted to an account or removed at your request. Security-related technical information is retained only for a short, limited period necessary for its purpose.

7. Data Security

We implement administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights and Choices

Depending on your jurisdiction, you may have some or all of the following rights with respect to your personal information:

• Access the personal information we hold about you.
• Rectification of inaccurate or incomplete information.
• Deletion of your account at any time from your settings. This removes your account and sign-in credentials from our systems, deletes your uploaded content from our storage provider, and clears locally stored content from that browser. If you joined the waitlist under a different email address, contact us and we will remove that entry as well.
• Portability — a copy of your account information in a structured, commonly used format.
• Restriction or objection to certain processing of your information.
• Withdrawal of consent at any time, including with respect to cookies, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at info@portfo.dev. We will respond within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

9. Children's Privacy

The Service is not directed to individuals under the age of 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

10. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will post the revised Policy on this page and update the "Last updated" date above before the changes take effect. Your continued use of the Service after changes become effective constitutes acceptance of the revised Policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at info@portfo.dev.