Privacy Policy

1. Information We Collect

We collect information you provide directly, such as:

• Account information (name, email, phone)
• Payment information (processed via Stripe)
• Content you upload (products, images, music)
• Communications with support

We also collect automatically:

• Usage data (pages visited, interactions)
• Device information (browser, OS)
• Referral data (how you found us)

2. How We Use Your Information

We use your information to:

• Provide and improve our services
• Process transactions and payouts
• Send relevant communications (order updates, earnings)
• Protect against fraud
• Personalize your experience

3. Information Sharing

We do NOT sell your personal data. We share only:

• With creators: transaction details needed to fulfill orders
• With Stripe: payment processing data
• With analytics providers: anonymized usage data
• When required by law: legal compliance

4. Data Security

We implement industry-standard security measures:

• End-to-end encryption for all data transmission
• Encrypted databases (AES-256)
• Regular security audits
• Two-factor authentication available
• Stripe for PCI-compliant payment processing

5. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and data
• Export your data in a portable format
• Opt-out of marketing communications

To exercise these rights, email us at privacy@porterful.com

6. Cookies & Tracking

We use cookies for:

• Authentication (keeping you logged in)
• Preferences (theme, language)
• Analytics (understanding usage patterns)

You can disable cookies in your browser settings, but some features may not work properly.

7. Data Retention

We retain data as long as your account is active. After account deletion:

• Account data: deleted within 30 days
• Transaction records: retained 7 years (legal requirement)
• Anonymized analytics: retained indefinitely

8. Third-Party Services

We use these third-party services:

• Stripe (payments) — Privacy Policy
• Supabase (database) — Privacy Policy
• Vercel (hosting) — Privacy Policy

9. Children's Privacy

Porterful is not intended for users under 18. We do not knowingly collect data from children. If you believe we have, contact us immediately.

10. International Users

Porterful operates from the United States. By using our service, you consent to data transfer to and processing in the United States. We comply with GDPR and other applicable regulations.

11. Changes to This Policy

We may update this policy. Material changes will be notified via email or Platform banner. Continued use constitutes acceptance.

12. Contact

For privacy questions or requests: