Legal
Privacy Policy
Last updated December 14, 2025
Your Name - Creative Professionall(“we,” “us,” or “our”) provides a portfolio experience builder that enables creative professionals and agencies to launch tailored portfolio instances on custom domains. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when individuals visit our marketing site, access the admin dashboard, deploy portfolio instances, or interact with any associated services (collectively, the “Services”).
By using the Services, you consent to the practices described in this Privacy Policy. If you do not agree, please do not access or use the Services.
1. Information We Collect
1.1 Information you provide
- Account and profile data: name, email address, password, role, and organization details when registering or managing an admin account.
- Portfolio content: project descriptions, images, video files, testimonials, and any other content uploaded or input to configure your portfolio instance.
- Communications: contact form submissions, support requests, and other correspondence. We store the content of messages plus associated metadata (IP address, browser details, consent timestamp, and approximate location) to investigate misconduct, defend against abuse, and comply with lawful requests. This metadata is captured only after you explicitly consent on the form.
1.2 Information collected automatically
- Log and diagnostic data: IP address, high-level geolocation (country, region, city), device identifiers, browser type, operating system, language preferences, referral URLs, and timestamps captured when you or your visitors interact with the Services. We do not store precise GPS coordinates. IP and diagnostic metadata related to security events are retained for fraud prevention and legal compliance.
- Usage analytics: page views, performance metrics, and feature engagement gathered through cookies, local storage, and web-vitals telemetry. Optional analytics cookies are only set with consent.
- Session data: authentication tokens, session identifiers, and device fingerprints maintained to secure admin accounts and provide multi-session management.
- Enhanced forensic data (with explicit consent): comprehensive device fingerprinting including browser characteristics, hardware specifications, network information, local IP addresses, canvas fingerprints, WebGL signatures, audio fingerprints, font detection, plugin information, and behavioral biometrics (mouse movements, keystroke patterns, interaction timing) for fraud prevention and security monitoring.
1.3 Information we collect from third parties
We may receive information about you from hosting providers, security vendors, payment processors, or social platforms where you choose to authenticate. We combine this information with data we collect directly to maintain accurate records.
1.4 Forensic Data Collection
For fraud prevention, abuse detection, and law enforcement cooperation, we may collect comprehensive forensic data with your explicit consent:
- Device Fingerprinting: Browser characteristics, hardware specifications, screen properties, timezone information, and installed fonts to create a unique device signature.
- Canvas & WebGL Fingerprinting: Rendering signatures and graphics capabilities that help identify unique device configurations.
- Audio Fingerprinting: Audio processing characteristics that create unique device signatures.
- Network Information: Connection type, speed, and local IP addresses (including those behind VPNs/proxies via WebRTC).
- Behavioral Biometrics: Mouse movement patterns, keystroke timing, scroll behavior, and interaction patterns for advanced fraud detection.
- Bot Detection: Analysis of browser inconsistencies, automation indicators, and suspicious behavior patterns.
This forensic data is used exclusively for security purposes and may be shared with law enforcement upon valid legal request. You can withdraw consent at any time, and we will stop collecting additional forensic data while retaining existing data for legitimate security purposes as outlined in our retention policy.
2. How We Use Information
- Provide, personalize, and maintain the Services, including generated portfolio instances.
- Authenticate users, prevent unauthorized access, and investigate suspicious activity or abuse.
- Process contact requests, deliver support, and send transactional or administrative communications.
- Monitor performance, debug issues, and improve infrastructure reliability and user experience.
- Comply with legal obligations, enforce agreements, and protect the rights, property, or safety of Your Name - Creative Professionall, our users, or third parties.
- Evaluate usage trends to inform product development, marketing strategies, and security posture.
3. How We Share Information
We do not sell personal information. We share data only with:
- Infrastructure partners: hosting providers such as Railway, AWS-compatible object storage, email gateways, and CDN networks required to deliver the Services.
- Professional advisors: auditors, legal counsel, or insurers who assist with compliance or risk management under confidentiality obligations.
- Law enforcement or regulators: when required by applicable law, subpoena, court order, or to protect vital interests and prevent harm.
- Successors: in the event of a merger, acquisition, or asset sale, provided the recipient agrees to respect this Privacy Policy or provides notice of material changes.
4. Cookies and Similar Technologies
We use essential cookies to authenticate sessions, remember preferences, and ensure site security. With your consent, we deploy optional analytics cookies to measure traffic, diagnose issues, and improve the user experience. You can adjust your cookie preferences at any time through the onsite cookie banner or by updating browser settings. See our Cookie Policy for details.
5. Data Retention
We retain personal information only for as long as needed to deliver the Services, comply with applicable law, and protect the platform. Unless a longer period is required to resolve disputes or investigate abuse, contact-form submissions and associated audit logs are retained for up to five (5) years. Authentication logs and session metadata follow the same schedule. We periodically review stored information and delete or anonymize data that is no longer required.
6. Your Rights & Choices
Depending on your location, you may have rights to access, correct, update, delete, or restrict use of your personal information, as well as rights to data portability and to object to certain processing. You may also withdraw consent for optional data collection without affecting core functionality.
To exercise any rights, contact us using the information below or submit a request through the Do Not Sell / Data Rights portal. We may request additional verification details before fulfilling your request. You can also manage cookie preferences directly on the site and opt in or out of analytics cookies at any time.
7. International Data Transfers
We operate globally, and your information may be processed in countries different from where you reside. We implement appropriate safeguards—such as standard contractual clauses—to protect personal data transferred across borders.
8. Children's Privacy
The Services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such data, please contact us so we can delete it.
9. Changes to this Policy
We may update this Privacy Policy to reflect operational, legal, or regulatory changes. When we make material updates, we will revise the “Last Updated” date and provide additional notice if required. Continued use of the Services after changes take effect signifies acceptance of the revised policy.
10. Contact Us
If you have questions, requests, or complaints about privacy practices, please contact us at:
Your Name - Creative Professionall123 Example Avenue, Suite 100, Sample City, USA
Email: [email protected]