Privacy Policy

Promtfolio ("we", "us") operates promtfolio.com and the related service (the "Service"). The data controller is [legal name], [address], Israel. Contact: [privacy@promtfolio.com].

You give us: your email address and authentication details (handled by our auth provider, Supabase); the portfolio URL you submit and the text, images, and other media we read from it ("Your Content"); and your support and AI-chat messages.

Collected automatically: basic usage and device data such as IP address, browser type, pages used, and timestamps, used for security, rate-limiting, and to operate the Service; and strictly necessary cookies for login and security.

From others: payment status from our payment processor. We do not receive or store your full card details.

To provide the Service (generate, host, and edit your site); for accounts and security (login, fraud and abuse prevention, rate limits); for billing; for AI generation; for service communication; for aggregate, non-identifying product improvement; and, only if you opt in, for marketing email. Our legal bases are performance of a contract, our legitimate interests, legal obligations, and consent where required.

To generate and edit your site, we send Your Content (portfolio text and references to its media) to our AI provider, Anthropic (Claude), which processes it to produce the output. We use Anthropic's API and do not sell Your Content.

Payments are handled by Lemon Squeezy as Merchant of Record. The processor collects your payment and billing details directly under its own privacy policy and acts as an independent controller for that data. We receive only what we need to manage your subscription (such as plan, status, and a transaction reference).

We share data only as needed to run the Service, with providers acting on our instructions: Supabase (auth, database, storage); Anthropic (AI generation); Cloudflare (hosting of published sites, asset storage, DNS, security); Lemon Squeezy (payments); and an email provider (transactional email). We may also disclose data if required by law, to protect rights and safety, or in connection with a merger or acquisition (with notice where required).

Our providers may process data outside Israel and the EEA (for example, in the United States). Where required, transfers are covered by appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

We keep account and site data while your account is active and for a reasonable period after closure for backups and legal/accounting needs. Accounting and tax records are kept for 7 years as required under Israeli law. We delete or anonymize data when it is no longer needed.

Depending on where you live, you may have the right to access, correct, delete, or port your data, to object to or restrict certain processing, and to withdraw consent. To exercise these, contact [privacy@promtfolio.com]. You may also lodge a complaint with your local data protection authority (in Israel, the Privacy Protection Authority).

We use measures including encrypted connections, access controls, server-side blocking of internal/abusive requests, and rate limiting. No system is perfectly secure; we cannot guarantee absolute security.

The Service is not directed to children under 18 and we do not knowingly collect their data.

We may update this Policy. If changes are material, we will give reasonable notice. The "last updated" note shows the current version.

[privacy@promtfolio.com] · [legal name / address], Israel.