Privacy
Privacy policy
Last updated: September 7, 2026
PortalForge is operated by PortalForgeAi, 5871 Medallion Drive #101, Las Vegas, Nevada 89122. This policy explains what we collect, why, and what you can do about it.
What we collect
- Account data. Your name, email address and password credentials when you create an account. If you sign in with Google, we receive your name, email address and profile image from Google.
- Client and project data. Content you put into your portals — proposals, contracts, invoices, messages, files, tasks and any client details you enter. This is yours. We process it to provide the service and do not sell it or use it to train models.
- Billing data. Payments are handled by Stripe. We do not store full card numbers. We keep your plan, billing status and invoice history.
- Usage data. Log data including IP address, browser type and pages accessed, used for security and to fix problems.
Why we process it
To provide and secure the service, to bill you, to respond to support requests, and to meet legal obligations. For EU and UK users, our lawful bases are: performance of a contract (running your portal and billing), legitimate interests (security, fraud prevention and product reliability), legal obligation (tax and accounting records), and consent where you opt in to any marketing communications.
Who we share it with
Service providers who help us run PortalForge, under contract and only for that purpose: hosting and database infrastructure (Supabase), payment processing (Stripe), email delivery, and analytics. We disclose data to authorities only where legally required.
Your clients’ data
Where you upload information about your own clients, you are the controller of that data and we process it on your instructions. You are responsible for having a lawful basis to collect it and for telling your clients how it is used.
Security
Data is encrypted in transit and at rest. Portals are access-controlled per client, with role-based permissions you set, and row-level isolation between accounts. Payments are handled by a PCI-compliant provider; card details never touch our servers. No system is perfectly secure; we will notify you without undue delay if a breach affects your data.
Retention
We keep account and project data while your account is active and for 30 days after closure, then delete or anonymise it. You can export your data at any time.
Your rights
You can access, correct, export or delete your data, and object to or restrict certain processing. Email hello@portalforge.app and we will respond within 30 days. EU and UK users also have the right to lodge a complaint with their local data protection authority.
Cookies
We use cookies necessary for signing in and keeping you signed in. We do not set analytics or marketing cookies without your consent. Where a consent mechanism applies, it is presented before any non-essential cookie is set.
Changes
We will post updates here and, for material changes, notify account holders by email.
Contact
hello@portalforge.app · PortalForgeAi, 5871 Medallion Drive #101, Las Vegas, Nevada 89122