Privacy Policy

This Privacy Policy describes how Pholio ("we", "us", or "our") collects, uses, and protects your personal information when you use our service. By using Pholio, you agree to the collection and use of information in accordance with this policy.

We collect the following information: • Account Information: Your name, email address, and password (stored securely) • Profile Data: Display name, headline, bio, avatar, social links, and theme preference • Product Data: Product images, descriptions, prices, categories, and tags you upload • Usage Data: How you interact with the Service, including page views and feature usage • Device Information: Browser type, operating system, and device identifiers

We use your information to: • Provide and maintain the Service • Display your public profile and products to visitors • Send account-related emails (verification, password resets) • Improve the Service and develop new features • Communicate with you about updates or support requests • Detect and prevent fraud or abuse

Your data is stored on secure cloud infrastructure. We use industry-standard encryption for data in transit (TLS) and at rest. Profile images are hosted on Cloudinary's content delivery network. We implement access controls and regular security audits to protect your information.

We do not sell your personal information. We may share data with: • Service Providers: Cloud hosting (MongoDB Atlas), image hosting (Cloudinary), email delivery (SMTP provider), and analytics services that help us operate the Service • Legal Requirements: When required by law, court order, or government regulation • Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to you

You have the right to: • Access your personal data • Correct inaccurate data • Delete your account and associated data (available from your dashboard settings) • Export your data in a portable format (JSON download available from your dashboard settings) • Object to processing of your data • Withdraw consent where applicable

We retain your data for as long as your account is active. When you request account deletion, your account enters a 30-day grace period during which you may cancel the deletion. Your public profile is immediately hidden upon deletion request. After the grace period, your personal data is permanently removed within 24 hours. Backup copies may persist for up to 90 days before being purged. Support tickets and feedback submissions are anonymized rather than deleted to preserve service records.

Pholio uses essential cookies for authentication and session management. We do not use advertising cookies or third-party tracking cookies. You can manage cookie preferences through your browser settings.

Pholio is not intended for users under 13 years of age. We do not knowingly collect personal information from children. If we discover that a child has provided us with personal data, we will delete it immediately.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date. Your continued use of the Service after changes constitutes acceptance of the new policy.

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at support@pholio.tech.