Privacy Policy

Portaleb (“we,” “our,” or “us”) provides a client portal platform designed for freelancers and agencies to manage projects, share files, and communicate with their clients. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

By accessing or using Portaleb, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not access the platform.

We collect information that you provide directly, as well as data generated through your use of the platform.

Account Information

• — Name, email address, and password when you create an account
• — Workspace name and organization details
• — Profile photo and display preferences

Project Data

• — Project names, descriptions, tasks, and status updates
• — Files, documents, and deliverables you upload
• — Messages and comments within project conversations
• — Client information you add to the platform

Usage Data

• — Browser type, operating system, and device information
• — IP address and approximate location
• — Pages visited, features used, and time spent on the platform

We use the information we collect for the following purposes:

• — Service delivery. To operate, maintain, and provide the features of Portaleb, including project management, file sharing, and client communication
• — Communication. To send you account notifications, security alerts, and product updates
• — Improvements. To analyze usage patterns and improve the platform's functionality, performance, and user experience
• — Security. To detect, prevent, and respond to fraud, abuse, and security incidents
• — Billing. To process payments, manage subscriptions, and send invoices
• — Legal compliance. To comply with applicable laws, regulations, and legal processes

We take the security of your data seriously and implement industry-standard measures to protect it.

• — All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption
• — Uploaded files are stored on secure, access-controlled servers with regular backups
• — Access to production systems is restricted to authorized personnel through role-based access controls
• — Passwords are hashed using industry-standard algorithms and never stored in plain text
• — We conduct regular security reviews and monitor for unauthorized access attempts

While we strive to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security but are committed to promptly addressing any breaches.

We use a limited number of third-party services to operate Portaleb. These providers are bound by their own privacy policies and data processing agreements.

• — LemonSqueezy (payment processing). Handles subscription billing and payment information. We do not store your credit card details on our servers
• — Analytics providers. We use privacy-focused analytics to understand how the platform is used, without tracking individual users across websites
• — Email delivery services. Used to send transactional emails such as account confirmations, password resets, and project notifications
• — Cloud infrastructure. Our servers and databases are hosted on reputable cloud providers with SOC 2 compliance

We do not sell your personal information to third parties. Data is only shared with these providers to the extent necessary to deliver our services.

As a platform used by agencies and freelancers, Portaleb processes data that our users upload about their own clients. We recognize the sensitivity of this data and handle it with additional care.

• — You (the agency or freelancer) are the data controller for any client data you upload to Portaleb. We act as a data processor on your behalf
• — Client data is logically separated between workspaces and is never shared across accounts
• — We do not access, use, or analyze your client data for any purpose other than providing the service to you
• — Upon account deletion or at your request, all client data is permanently removed from our systems within 30 days

You are responsible for ensuring that you have the necessary rights and consent to upload any client data to Portaleb, and for complying with applicable data protection laws in your jurisdiction.

We use cookies and similar technologies to operate and improve Portaleb. Here is what we use and why:

Essential Cookies

Required for authentication, session management, and security. These cannot be disabled without breaking core functionality.

Preference Cookies

Store your settings such as theme preference (light/dark mode), sidebar state, and notification preferences.

Analytics Cookies

Help us understand how you use Portaleb so we can improve the product. These are privacy-focused and do not track you across other websites.

We do not use advertising cookies or trackers. You can manage cookie preferences through your browser settings.

Depending on your location, you may have the following rights regarding your personal data:

• — Access. Request a copy of the personal data we hold about you
• — Correction. Request that we update or correct inaccurate information
• — Deletion. Request that we delete your personal data, subject to legal retention requirements
• — Data export. Request a machine-readable export of your data, including projects, files, and messages
• — Restriction. Request that we limit the processing of your data in certain circumstances
• — Objection. Object to the processing of your personal data for specific purposes

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make changes:

• — We will update the “Last updated” date at the top of this page
• — For significant changes, we will notify you via email or through an in-app notification
• — Continued use of Portaleb after changes are posted constitutes your acceptance of the updated policy

We encourage you to review this page periodically to stay informed about how we protect your data.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• — Email: [email protected]
• — General inquiries: [email protected]

We aim to respond to all privacy-related inquiries within 30 days of receipt.