Privacy Policy

We collect the following categories of information when you use PortfolioForge AI:

• Account information — email address, display name, and password (stored as a secure hash by Supabase).
• Portfolio content — name, role, biography, skills, projects, and other content you enter into the creation wizard.
• Usage analytics — page views, unique visitor counts (stored as hashed IP addresses), and referrer domains when your published portfolio is visited.
• Technical data — browser type, device type, and IP address (hashed before storage). We never store raw IP addresses.

• To provide, operate, and improve the Service.
• To display your published portfolio to visitors.
• To send transactional emails (account verification, password reset).
• To show you analytics about your portfolio's visitors.
• To generate AI content suggestions when you request them.

We do not sell your personal data to third parties.

When you use the AI generation features, relevant parts of your portfolio content (name, role, bio) are sent to OpenAI's API to generate text suggestions. Please review OpenAI's Privacy Policy for information about how they handle this data.

Your data is stored in Supabase infrastructure hosted on AWS. We use row-level security to ensure users can only access their own data. All data is transmitted over HTTPS. We implement reasonable technical safeguards, but no system is completely secure.

We use session cookies necessary for authentication. We do not use third-party advertising cookies or tracking pixels. Our analytics are first-party and stored in our own database — we do not use Google Analytics or similar services.

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data from your account settings page.
• Delete your account and all associated data at any time from Settings → Danger zone → Delete account.
• Export your portfolio data — your content is always available in your dashboard.

We retain your data for as long as your account is active. When you delete your account, all personal data is permanently removed within 30 days, except where required by law to retain it longer.

Anonymized, aggregated analytics data (total view counts with no personal identifiers) may be retained indefinitely.

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us to have it removed.

We may update this Privacy Policy periodically. We will notify you of significant changes via email or a prominent notice in the app. Your continued use of the Service after the effective date constitutes acceptance.

Privacy questions or requests: privacy@portfolioforge.app