Privacy Policy

1. Who we are (Data Controller)

The controller of your personal data is Yaroslav Yankovskyi, a sole proprietor (jednoosobowa działalność gospodarcza) registered in Poland, based in Warsaw, Poland, operating the Pfolo service.

For any questions about this policy or your personal data, contact us at hello@pfolo.com.

2. Information we collect

Account information. To create and access your account we process your email address. You can sign in using a one-time code sent to your email (passwordless login) or by signing in with Google.

Information from Google Sign-In. If you choose to sign in with Google, we receive your email address and basic profile information (such as your name) from Google, solely to create and authenticate your account. We do not receive your Google password.

Profile content you provide. Pfolo is a portfolio builder, so you may choose to add information to your profile, including: your first and last name, job position, bio and professional summary, contact email and phone number, country and city, profile photo (avatar), links (such as LinkedIn, GitHub and personal website), skills, languages, work experience, education, and courses. Providing this content is optional and entirely under your control.

Technical information. Like most websites, our hosting and infrastructure providers automatically process limited technical data (such as IP address and browser information) for security, reliability, and to deliver the Service.

3. How we use your data and legal bases

• To provide the Service — creating your account, saving your profile, and publishing your portfolio. Legal basis: performance of a contract (GDPR Art. 6(1)(b)).
• To authenticate you and keep your account secure. Legal basis: performance of a contract and our legitimate interests in security (Art. 6(1)(b) and (f)).
• To publish your public profile when you choose to publish it. Legal basis: performance of a contract, and your action of publishing.
• To communicate with you about your account and important service notices. Legal basis: performance of a contract and legitimate interests.
• To comply with legal obligations where applicable. Legal basis: legal obligation (Art. 6(1)(c)).

4. Public profiles

Pfolo lets you publish a public portfolio page at a public address (for example pfolo.com/your-name). When you publish your profile, the content you have added to it becomes publicly accessible to anyone with the link and may be indexed by search engines. Please only include information you are comfortable sharing publicly. You can unpublish your profile at any time from your dashboard; note that search engines and others may retain cached copies for some time after unpublishing.

5. Cookies

We use a small number of strictly necessary cookies that are essential to operate the Service — primarily secure, HttpOnly authentication cookies that keep you signed in. These are required for the Service to function and are not used for advertising or third-party tracking.

6. Service providers we share data with

We do not sell your personal data. We share data only with trusted providers (processors) that help us run the Service, under appropriate data-processing terms:

• Supabase — database, authentication, and file storage (for your account data, profile content, and avatar images).
• Vercel — website and application hosting.
• Google — only if you choose to sign in with Google, to authenticate you.

Some providers may process data outside the European Economic Area. Where that happens, such transfers are protected by appropriate safeguards (such as the European Commission’s Standard Contractual Clauses).

7. How long we keep your data

We keep your account and profile data for as long as your account is active. If you delete your account, we delete your personal data associated with it, except where we are required to retain certain information to comply with legal obligations. You can delete your account at any time from your account settings.

8. Your rights

Under the GDPR, you have the right to:

• access your personal data and obtain a copy of it;
• rectify inaccurate or incomplete data;
• erase your data (“right to be forgotten”);
• restrict or object to certain processing;
• data portability — receive your data in a structured, machine-readable format;
• withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at hello@pfolo.com. You also have the right to lodge a complaint with the Polish data protection authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), if you believe your data is being handled unlawfully.

9. Data security

We take reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS), secure authentication, and access controls so that you can only access your own data. No method of transmission or storage is completely secure, but we work to protect your information.

10. Children

The Service is not directed to children. You must be at least 16 years old (or the age of digital consent in your country) to use Pfolo.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date above. Significant changes may be communicated to you directly.

12. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us at hello@pfolo.com.