Privacy Policy

1. Introduction

Portalize ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using Portalize, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly, including:

• Account Information: Name, email address, password
• Portal Information: Portal name, slug, branding preferences
• Client Information: Client names, email addresses
• Payment Information: Billing details (processed by Stripe)
• Notion Integration: Notion workspace tokens, database IDs

2.2 Information Collected Automatically

When you use our Service, we automatically collect:

• Usage Data: Pages viewed, features used, time spent
• Device Information: Browser type, operating system, IP address
• Cookies: Session cookies for authentication and preferences
• Log Data: Server logs, error reports, performance metrics

2.3 Information from Third Parties

We receive information from:

• Notion: Workspace data you authorize us to access
• Stripe: Payment status and transaction details

3. How We Use Your Information

We use your information to:

• Provide, operate, and maintain the Service
• Process your transactions and manage subscriptions
• Send you email notifications about portal updates
• Respond to your comments, questions, and support requests
• Send you technical notices and security alerts
• Monitor and analyze usage patterns to improve the Service
• Detect, prevent, and address technical issues and fraud
• Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We may share your information with:

4.1 Service Providers

• Supabase: Database and authentication services
• Stripe: Payment processing
• Resend: Email delivery
• Vercel: Hosting infrastructure

4.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Court orders or legal processes
• Government or regulatory requests
• Protecting our rights, property, or safety
• Investigating fraud or security issues

4.3 Business Transfers

If we are involved in a merger, acquisition, or asset sale, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.

5. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Secure authentication and authorization
• Regular security audits and monitoring
• Access controls and role-based permissions

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to:

• Provide the Service and fulfill your requests
• Comply with legal and accounting requirements
• Resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it by law.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

7.1 Access and Portability

You can access and export your data through your account dashboard.

7.2 Correction

You can update your information through your account settings.

7.3 Deletion

You can request deletion of your account and data by contacting us.

7.4 Email Communications

You can opt out of marketing emails by clicking "unsubscribe" in any email. You cannot opt out of transactional emails related to your account or Service.

7.5 Cookies

Most browsers allow you to refuse cookies. However, this may limit your ability to use the Service.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. By using the Service, you consent to these transfers.

9. Children's Privacy

Our Service is not intended for children under 13 (or 16 in the EU). We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us.

10. Third-Party Links

Our Service may contain links to third-party websites (like Notion). We are not responsible for the privacy practices of these sites. We encourage you to read their privacy policies.

11. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell your information)
• Right to deletion of personal information
• Right to non-discrimination for exercising your rights

12. GDPR Rights (European Users)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The "Last Updated" date will reflect the most recent version.

14. Contact Us

For questions about this Privacy Policy or to exercise your rights, contact us: