Privacy Policy

1. Who we are

Portly.me is a “link-in-bio” platform that lets you create a public profile page and manage links. References to “we,” “us,” or “our” mean Portly.me. If you maintain a profile, you are a “User.” People who visit your public page are “Visitors.”

2. Information we collect

We collect and process the following categories:

• Account data: name, username, email, password (hashed), profile photo, theme selections, and plan details.
• Usage data: app interactions, settings, timestamps, device/OS/browser information.
• Link analytics: when Visitors click your links we may record link_id, clicked_at, referrer, country (derived from IP), device (parsed from user agent), and similar context.
• Technical data: IP address (for security, abuse-prevention, and geolocation to country), cookies or similar identifiers.
• Payment data: handled by Stripe. We receive limited billing metadata (e.g., status, last4, brand) but not full card numbers.
• Support: messages you send via our contact form.

3. How we use information

• Provide and operate Portly.me and your public profile.
• Process subscriptions, invoices, and receipts.
• Measure link clicks and aggregate analytics for you.
• Improve features, security, and performance.
• Prevent spam, fraud, and abuse.
• Communicate with you about service updates and billing.
• Comply with legal obligations.

4. Legal basis (GDPR)

We rely on the following legal bases where applicable:

• Contract: to create your account and deliver the service.
• Legitimate interests: to secure, operate, and improve the service, and to provide non-intrusive analytics to Users.
• Consent: where required for optional cookies or marketing communications.
• Legal obligation: for tax, accounting, and compliance.

5. Cookies & similar technologies

We use essential cookies for authentication and session integrity. We may use additional cookies or storage for preferences and analytics. You can control cookies in your browser; some features may not work without them.

6. Analytics & link tracking

When a Visitor clicks a link on your profile, our system or an edge function may log the event with timestamp, referrer, device, and country. We aggregate these logs to show you counts, trends, and breakdowns. We do not sell personal data. IPs may be stored briefly for security and uniqueness calculations, then aggregated.

7. Payments (Stripe)

Subscriptions are processed by Stripe. Stripe acts as an independent controller for some processing. We receive only the data needed to manage your subscription (e.g., status, invoices). For details, see Stripe’s own privacy documentation.

8. Sharing & disclosures

We share data with service providers who help us run Portly.me:

• Infrastructure & hosting (e.g., Vercel) to deliver the app and public pages.
• Database & auth (e.g., Supabase) to store content and manage accounts.
• Payments (Stripe) to process subscriptions.
• Security & anti-abuse (e.g., bot-mitigation tools) to protect the service.

We may disclose information if required by law or to protect rights, safety, and integrity of our users and platform.

9. International data transfers

Our providers may process data in countries outside your own. Where applicable, we rely on appropriate safeguards (such as Standard Contractual Clauses) to protect your information.

10. Data retention

We retain account and billing records for as long as your account is active and as required by law. Click logs may be aggregated and retained in summary form. You can request deletion of your account; some records (e.g., invoices) may be retained as legally required.

11. Your rights

Depending on your location (e.g., EU/EEA/UK), you may have the right to access, correct, delete, restrict, or port your data, and to object to certain processing. Where we rely on consent, you can withdraw it at any time.

To exercise rights, contact us using the details below. We will respond as required by applicable law.

12. Security

We implement technical and organizational measures to protect your data, including encryption in transit and access controls. No method is 100% secure; we continuously improve our safeguards.

13. Children’s privacy

Portly.me is not directed to children under 13 (or the age required by local law). We do not knowingly collect personal data from children. If you believe a child has provided data, please contact us and we will take appropriate action.

14. Changes to this policy

We may update this policy to reflect changes to our practices or for legal reasons. We will post the updated version here and revise the “Effective date” above. Significant changes may be communicated via email or in-app notice.

15. Contact us

Questions or requests? Email support@portly.me. You can also reach us via the contact form on our site.