Privacy Notice

myportfl.io, operating as myportfl.io, is the data controller for the personal data described here. That means we decide what is collected and why, and we are accountable for it. Questions or requests go to support@myportfl.io.

• Account data — email address, and name and avatar if you sign in with Google. Used to create and secure your account. Legal basis: performance of our contract with you.
• Profile content — your handle, bio, links, stats, services, prices, availability, and uploaded images, video, audio and product files. Published deliberately by you to a public page. Legal basis: contract.
• Enquiries and messages — what visitors send through your contact form or chat, and what you send back. Used to deliver the message and support you. Legal basis: contract and legitimate interests.
• Order data — the product bought, amount, fee, buyer email and name, and order status. Used to fulfil the order, unlock downloads, calculate what a seller is owed, and meet accounting obligations. Legal basis: contract and legal obligation.
• Payout details — the PayPal address, bank details, or wallet address a seller gives us so we can pay them. Used only for that. Legal basis: contract.
• Usage and technical data — pages viewed, referrer, approximate location, device and browser type, IP address, and error diagnostics. Used to produce your visitor analytics, keep the service secure, prevent fraud and abuse, and fix bugs. Legal basis: legitimate interests.
• Support correspondence — what you email us. Used to answer you and keep a record. Legal basis: legitimate interests.

Payment card details never reach us. They are collected and processed by Paddle inside their own checkout; we only ever see the order metadata described above.

• Merchant of Record — Paddle.com Market Ltd, which sells the product to the buyer, handles payment, subscription management, tax compliance, invoicing, and refunds.
• Infrastructure and service providers — hosting, database and file storage, email delivery, error monitoring, and analytics tooling, acting as our processors under contract.
• Professional advisers — legal and accounting, where needed.
• Authorities — where we are legally required to disclose, or to protect our rights, users, or the security of the service.

We do not sell personal data, and we do not share it for third-party advertising.

Some of our providers process data outside the UK and EEA. Where that happens we rely on an adequacy decision, or on Standard Contractual Clauses with supplementary safeguards, so your data keeps an equivalent level of protection.

• Account and profile data: while your account is active, then deleted or anonymised within 90 days of closure.
• Unclaimed pages started without signing up: taken offline after 7 days and deleted 14 days after they were started.
• Order and payout records: retained for as long as tax and accounting law requires (typically 7 years).
• Analytics and technical logs: kept in aggregated or truncated form; raw request logs are rotated within 90 days.

Depending on where you live you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to another provider. Where we rely on consent you can withdraw it at any time. Email support@myportfl.io and we will respond within one month. If you are in the UK or EEA and you are not satisfied with our answer, you can complain to your local data protection supervisory authority.

We apply appropriate technical and organisational measures: encryption in transit, hashed credentials, row-level access rules in the database so one account cannot read another's data, signed time-limited URLs for private files, least-privilege access for staff, and logging of administrative actions. No system is perfectly secure, but we treat a breach affecting your rights as notifiable and will tell you and the regulator where required.

We use essential cookies and local storage to keep you signed in, remember your light or dark theme, and hold an unsaved draft page. We use analytics storage to count page views for creator stats — measured in aggregate, without cross-site tracking. We do not use marketing or advertising cookies. You can clear or block cookies in your browser; the essential ones are required for sign-in to work.

We will update this notice as the product changes. Material changes are announced in the app or by email, and the date at the top of this page always reflects the current version.