Privacy Policy

This Privacy Policy explains how Portfolio Studio (“Portfolio Studio,” “we,” “us,” or “our”) collects, uses, shares, and protects your personal information when you use our website and service (the “Service”), and the rights you have over your information. Portfolio Studio is a tool that lets you build, publish, and export a personal portfolio site. It is operated by an individual developer based in India, who is the data controller for the purposes of applicable data-protection law. By using the Service you agree to this policy. Questions or requests: akverma11aug2002@gmail.com.

1. Information we collect

Information you provide. When you create an account we collect your email address. When you build a portfolio we collect the content you enter — such as your name, headline, biography, location, contact details, links, work experience, education, projects, skills, and any images you upload. If you contact us, we keep your message and contact details.

Information from third parties. If you choose “Sign in with Google,” Google shares your email address and basic profile information (such as your name) with us so we can create and authenticate your account. We do not receive your Google password.

Information collected automatically. Like most online services, our infrastructure providers automatically log basic technical data needed to operate and secure the Service — such as IP address, browser and device type, and timestamps of requests. We do not use third-party advertising networks or cross-site tracking.

2. How we use your information

• To provide and operate the Service — save your drafts, publish your portfolio, render your public page, and let you export a copy.
• To authenticate you and keep your account and the Service secure, and to prevent abuse and fraud.
• To respond to your messages and provide support.
• To comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not use it for advertising.

3. Legal bases (EEA / UK users)

If you are in the European Economic Area or the United Kingdom, we process your personal data on these legal bases: performance of a contract (to provide the Service you request); legitimate interests (to secure, maintain, and improve the Service, balanced against your rights); consent (for example, when you choose to publish a portfolio publicly); and legal obligation (where the law requires it). You may withdraw consent at any time.

4. Public portfolios and uploaded images

New portfolios are private by default. When you choose to publish a portfolio, the content of that portfolio — including any contact details and images you add — becomes publicly accessible to anyone with the link and may be indexed by search engines. Only include information in a published portfolio that you are comfortable making public. You can make a portfolio private again, or delete it, at any time from your dashboard.

Images you upload are stored in a publicly accessible storage location so they load quickly for visitors. This means an uploaded image file may be reachable by anyone who has its direct URL — even before you publish a portfolio, or after you make one private — until you delete the image or the portfolio. Please don’t upload images you need to keep confidential.

5. How we share information

We share personal information only as described here:

• Service providers (sub-processors) that process data on our behalf to run the Service: Supabase (database, authentication, and image storage), Resend (delivery of sign-in emails), Vercel (hosting and content delivery), and Google (optional “Sign in with Google”).
• Legal and safety — if required by law, legal process, or to protect the rights, safety, and security of users, the public, or Portfolio Studio.
• Business transfers — in connection with a merger, acquisition, or sale of assets, your information may be transferred, subject to this policy.

We do not sell or rent your personal information to third parties.

6. International data transfers

Our providers may store and process data outside your country, including in the United States. Where required, we rely on the data-transfer safeguards our providers make available — such as the European Commission’s Standard Contractual Clauses and the UK’s International Data Transfer Addendum, or other lawful transfer mechanisms — as described in their data processing terms.

7. Data retention

We keep your personal information for as long as your account is active or as needed to provide the Service. You can delete individual portfolios at any time from your dashboard. When you ask us to delete your account, we will delete your account and associated personal data within a reasonable period, except where we are required to retain it to comply with the law, resolve disputes, or enforce our agreements.

8. Security

We take reasonable measures to protect your information, including encryption in transit (HTTPS) and database access controls (row-level security, so each user can read and write only their own database records). Note that files served publicly, such as uploaded images, are reachable by direct URL as described in section 4. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach affects your personal data, we will notify you and any relevant authorities as required by applicable law.

9. Your privacy rights

Depending on where you live, you may have the right to access the personal data we hold about you, to correct it, to delete it, to receive a portable copy, and to object to or restrict certain processing. To exercise any of these, email akverma11aug2002@gmail.com; we will respond within the timeframe required by applicable law. Much of your data is also directly accessible and editable in the editor and dashboard.

EEA / UK. You have the rights above under the GDPR / UK GDPR and may lodge a complaint with your local data protection supervisory authority.

California. Under the CCPA/CPRA you have the right to know, delete, and correct your personal information and to opt out of its “sale” or “sharing.” We do not sell or share your personal information for cross-context behavioral advertising, and we will not discriminate against you for exercising your rights. We do not collect “sensitive personal information” beyond the account credentials needed to sign you in. You may use an authorized agent to submit a request, and we may take steps to verify your identity before acting on it.

10. Cookies and tracking

We use essential cookies only — to keep you signed in and to operate the Service. We do not use advertising or cross-site tracking cookies, so no cookie-consent banner is required. Because we do not sell or share your personal information, there is no targeted-advertising opt-out to apply, and we do not currently process browser “Do Not Track” or Global Privacy Control signals. If that changes, we will update this policy.

11. Children’s privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. The “last updated” date above reflects the current version; material changes will be reflected on this page.

13. Contact us

Portfolio Studio is operated by an individual developer based in India, who acts as the data controller. For any privacy question or request — including to exercise your rights — contact us at akverma11aug2002@gmail.com.