Privacy Policy

Last updated: June 2026

This policy explains what PortalHQ collects, why, and your rights. We follow GDPR principles globally.

1. Who we are

PortalHQ provides a client portal and business management tool for freelancers, operated at my-portal.live. Contact: support@my-portal.live.

2. What we collect

  • Account data: email, name, password hash, business profile (logo, accent color, currency).
  • Your business data: clients, projects, invoices, proposals, files, messages, tasks you create.
  • Payment metadata: subscription status and last-4 digits via Stripe — we never see or store full card numbers.
  • Usage data: anonymous pageviews, device type, country (from IP). Used to improve the product.
  • Support communications: messages you send us.

3. How we use it

To run the service, process payments, send transactional emails, prevent abuse, comply with law, and improve PortalHQ. We do not sell your data and never will.

4. Where it's stored

Application data is stored in Supabase (EU region). Files are stored in private Supabase Storage with signed access. Backups are encrypted and retained for up to 30 days.

5. Sub-processors

  • Stripe — payment processing & subscriptions.
  • Resend — transactional email delivery.
  • Supabase — database, auth, file storage.
  • Cloudflare — CDN & DDoS protection.

6. Cookies

We use essential cookies for authentication and a small amount of first-party analytics. You can opt out via the cookie banner shown on your first visit. No third-party ad cookies.

7. Your rights

You can access, correct, export, or delete your data at any time from Settings or by emailing us. Where GDPR applies, you also have the right to object, restrict processing, lodge a complaint with your supervisory authority, and withdraw consent.

8. Retention

Account data is kept while your account is active. After cancellation, data is retained for 30 days then permanently deleted. Email send logs are kept for up to 90 days for delivery troubleshooting.

9. Security

HTTPS everywhere, encryption at rest, row-level security on every table, signed URLs for files, scoped service-role keys, regular security scans. No system is perfectly secure; report concerns to support@my-portal.live.

10. Children

PortalHQ is not directed to children under 16.

11. Changes

We'll notify you of material changes by email or in-app at least 14 days before they take effect.

12. Contact

Privacy questions: support@my-portal.live.