Privacy Policy

At BuildTheFolio, we believe your professional data is yours alone. Our privacy framework is built on absolute transparency and data minimization.

1. The "No-Sale" Guarantee

We do not, and will never, sell your professional data, personal information, or user metrics to third-party data brokers or advertising networks. Your portfolio is a premium product, not an advertising surface.

2. Data We Collect

We collect only what is strictly necessary to operate your portfolio and secure your account:

• Account Data: Your name and email address.
• Portfolio Assets: The professional history, images, files, and text you voluntarily upload to build your digital presence.
• Contact Messages:When someone uses a portfolio's contact form, we store their name, email address, company, role and message so the portfolio owner can read and reply to them. Replies sent from BuildTheFolio are kept with the message. Both are deleted when the owner deletes the message or their account.
• Visitor Analytics: When someone views a published portfolio or article, we record the page, the date and time, the website they came from, their device type (mobile, tablet or desktop), their approximate location (country, region and city), how long they actively read and how far down the page they scrolled. We do not use cookies for this and we never store IP addresses: visitors are counted with an identifier that changes every day and cannot be traced back to a person. These statistics are shown only to the portfolio owner.

3. Data Retention & Your Right to Deletion

Your data is retained only as long as your account is active. You maintain the right to complete digital erasure, and you can download a copy of all your content at any time from your Account settings. When you delete your account, your portfolio goes offline immediately and a 30-day grace period begins, during which you can restore your account by signing in. When the grace period ends, all personally identifiable information and hosted assets are permanently purged from our primary servers, and from our rolling backups within a further 30 days. Your portfolio handle is held for 90 days after deletion so that no one else can use it to impersonate you, and is then released. We securely retain immutable consent logs indefinitely, strictly for legal and compliance purposes. Visitor analytics are kept in detail for 13 months; after that, only daily totals are kept.