Privacy Policy

Overview

This policy explains how ProjectPortfolio ("we," "us") collects, uses, shares, and protects information across two distinct surfaces: our public marketing site (where you can request a demo or contact us) and the ProjectPortfolio application (where customers store and manage their project data). We act as the data controller for the marketing-site information described below, and as a data processor for the customer data that tenants upload to the application.

Information We Collect From the Marketing Site

When you request a demo, contact us, or otherwise interact with our marketing site, we collect information you provide directly — such as your name, email address, company name, job title, and any message you submit. We also collect limited technical information automatically, including your IP address, browser type, operating system, referring URLs, and how you interact with the site.

Customer Data You Store in the Application

When your organization (a "tenant") uses the ProjectPortfolio application, you upload and maintain business records that we store on your behalf. This stored customer data includes:

• Projects — project records, financials, dates, scope, team assignments, contractor relationships, notes, and uploaded files and images.
• People — personal data (PII) about your employees and contractors, such as names, contact details, job titles, company affiliations, and profile pictures.
• Companies — organization records including addresses, logos, and the people associated with them.

This data belongs to your organization. We process it solely to provide the Service to you, and we do not use it to train models, sell it, or repurpose it for advertising. Access is isolated per tenant: each tenant's data is segregated and scoped so that one tenant cannot access another's records.

How We Use Information

We use the information we collect to:

• Respond to demo requests and inquiries
• Provide, maintain, secure, and improve the Service
• Process payments and send billing-related communications
• Send transactional emails (for example, password-reset messages)
• Monitor, analyze, and protect against fraudulent or unauthorized activity

Sub-Processors We Rely On

We do not sell, trade, or rent personal information. We share data only with the service providers (sub-processors) we use to operate the Service, and only to the extent necessary for them to perform their function on our behalf:

• Stripe — payment processing and subscription billing. Card details are handled by Stripe; we do not store full card numbers.
• Neon — managed PostgreSQL database hosting, where your project, people, and company records are stored.
• Resend — transactional email delivery (for example, password-reset and account emails).
• Vercel — application and marketing-site hosting, plus blob storage for uploaded files and images.

We may also disclose information when we believe in good faith that disclosure is necessary to comply with applicable law, regulation, or legal process.

Data Security

We take reasonable measures to protect personal information from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. We use encryption in transit and at rest, enforce role-based access controls and per-tenant isolation, and limit access to personal information to personnel who need it to operate the Service.

Data Retention, Deletion, and Export

We retain customer data for as long as your organization maintains an active account, and for a limited period afterward as needed to comply with legal, tax, and accounting obligations. You have the right to export or delete your organization's data:

• Export — you can export your project, people, and company records (for example, as CSV) at any time, and you may request a full export of your tenant's data from us.
• Deletion — you may request deletion of your organization's data. On a verified request, an administrator can purge a tenant and its associated records. Deleting a tenant cascades to its projects, people, companies, files, and audit history.

Depending on your location, you may also have the right to access the personal information we hold about you, request correction of inaccurate information, object to or restrict certain processing, and receive a copy of your information in a portable format. To exercise any of these rights, contact us at the email address below.

Cookies and Tracking

On our marketing site we use privacy-respecting analytics that do not use cookies and do not track you across other websites. Our analytics collect only aggregated, anonymous data about page views and interactions. We do not use third-party advertising trackers or retargeting pixels.

Contact Information

If you have questions about this privacy policy, our data practices, or to make an export or deletion request, contact us at support@project-portfol.io.