Privacy Policy

Who is responsible

Showfolio is responsible for your account data and for the visitor statistics we keep. Each page owner is responsible for what they publish on their page and for anything visitors send them directly, such as a WhatsApp order. You can reach us at support@showfolio.bio.

What we collect from page owners

When you use the dashboard we collect:

• your name, email address and profile photo from your Google account;
• the content of your pages: text, links, settings, themes, and the images and files you upload;
• for each signed-in device, its IP address and browser, kept until that session ends so you can review your devices and sign them out;
• your plan, your Pro reservation if you made one, and how many AI requests you used this month;
• the messages you send us.

What we collect from page visitors

When someone opens a page we count the view and record where it came from (the referring site or a QR code), the device type, browser, operating system and screen size, and the approximate country, region and city from the network. When a visitor taps a link or button we count the click. To count unique visitors without cookies, we combine the IP address and browser with a random key that changes every day and is then deleted, and keep only a one-way code. That code cannot be reversed or linked to the same visitor on another day. We don't store visitors' IP addresses, and we don't track visitors across sites. Visits by bots, link previews and signed-in page owners are not counted.

Cookies and local storage

We use no advertising or tracking cookies, so there is no cookie banner. We use:

• a sign-in cookie on our website, which keeps you signed in to the dashboard for up to 7 days after your last visit;
• an owner cookie on the page domain, set when you open your own page from the dashboard, so your own visits are not counted (kept for a year);
• local storage in the visitor's browser for a menu order in progress, which never leaves that browser until the visitor sends it on WhatsApp;
• local storage for small dashboard preferences, such as a hidden checklist.

Content embedded by page owners

Page owners can embed players, maps and documents from other services, such as YouTube, Spotify, TikTok, Google Maps or Calendly. These load from those services when a visitor scrolls near them, and those services may then collect data or set cookies under their own privacy policies. Links on a page take visitors to other websites, which have their own policies.

AI features

When you use an AI feature, the description you type and the parts of your page it needs are sent to Cloudflare Workers AI to produce a suggestion. We keep only a count of your requests to apply the monthly limit, not what you typed. Cloudflare does not use this content to train models.

Reports

When you report a page we keep the reason, the details you write and, if you give one, your email so we can reply. We also keep a one-way code made from your IP address to limit abuse, never the address itself. A Cloudflare Turnstile check protects the form from bots.

Why we use data

We use personal data only to run, secure and improve Showfolio: to provide your account and pages (our contract with you), to prevent fraud, spam and abuse and to produce anonymous statistics (our legitimate interests), to answer your messages, and to meet legal obligations. Where the law requires your consent, we ask for it first. We never sell personal data or share it for advertising.

Who processes data for us

We use a small number of trusted providers, each only for its part of the service:

• Cloudflare: hosting, databases, file storage, statistics, AI and bot protection;
• Google: signing in with your Google account;
• Zoho: the email we send and receive;
• A payment provider, which we will name here before Pro goes on sale: payments for Pro.

Google account data

We use the name, email address and photo that Google shares only to create your account and show it to you. We don't use it for advertising, we don't sell it, and we don't let anyone read it except as needed to run the service or to comply with the law. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Where data is stored

Our providers run global networks, so your data may be stored or processed outside your country. When data moves across borders we rely on our providers' data protection agreements and the safeguards the law requires, such as standard contractual clauses.

How long we keep data

• Account data and pages: until you delete them or your account.
• Signed-in devices: until the session ends, at most 7 days after its last use.
• The daily key for counting visitors: deleted after its day ends.
• Visitor statistics: one year plus a 35-day grace period, then deleted.
• Reports: as long as needed to handle them and prevent repeated abuse.
• After you delete your account, your pages, media and statistics are removed straight away. Copies in our providers' backups and caches expire within 30 days.

How we protect data

Everything travels over HTTPS. Google sign-in tokens are stored encrypted, sessions are signed, and access to our systems is limited to what is needed to run the service.

Your rights

Depending on where you live, you can ask to see, correct, export or delete your data, to object to or limit how we use it, and to withdraw a consent you gave. You can edit and export your pages in the dashboard and delete your account in the account settings; for anything else, email support@showfolio.bio. We answer within 30 days. You can also complain to your data protection authority, for example the Saudi Data and AI Authority (SDAIA) or your local authority in the EU or UK.

If you visited a page

We can't link statistics to you, so we usually can't find data about a particular visitor. For anything a page owner published or received from you, such as an order, contact that page owner directly.

Children

Showfolio is not meant for anyone under 16. If you believe a child has given us personal data, email support@showfolio.bio and we will delete it.

Changes to this policy

If we change this policy in a way that matters, we will tell you by email or in the dashboard before it takes effect, and update the date at the top.

Contact

For any privacy question or request, email us at support@showfolio.bio.