Privacy Policy

Information we collect

We collect the following kinds of information:

• Account information. Your name and email address when you sign up, and sign-in details managed by Supabase.
• Profile content. Everything you choose to add to your portfolio: bio, roles, experience, education, projects, posts, images, and links. This content is public when you make your portfolio live.
• Subscriber data. If someone subscribes to a Flexfolio newsletter, we store their email and subscription status so we can send that owner's newsletter. We may also store a name if they give one. People who never create a Flexfolio account can still have this data if they subscribe to someone's list.
• Payment information. When you upgrade to Pro, Stripe processes the payment. We do not store your full card details. We keep a customer reference, subscription status, and plan so we can give you paid features.
• Usage and device data. We use PostHog to record how the site is used. That includes page views, clicks and other events, device and browser details, and cookies or local storage that identify your browser. If you have an account, we may link those events to your user id and email. This is not only a simple page-view count.

How we use information

• To provide, maintain, and improve the service.
• To publish the portfolio content you choose to make public.
• To process payments and manage your subscription.
• To send you service messages, such as confirmations, security notices, and billing updates.
• To send newsletters that a portfolio owner chooses to send, using the subscriber list we hold for them.
• To understand how people use Flexfolio, through PostHog analytics.
• To respond to your requests and provide support.
• To detect, prevent, and address fraud, abuse, or technical issues.

Service providers we share with

We use a small number of providers to run Flexfolio. They only get what they need to do their job:

• Stripe, for payment processing and subscription billing. Stripe sees your payment details. We keep a customer reference, subscription status, and plan. We do not store your full card number.
• Supabase, for database, authentication, and file storage. Supabase holds your account, portfolio content, subscriber list, and uploaded files.
• Vercel, for website hosting and delivery. Vercel sees the traffic needed to serve the site.
• Resend, for sending transactional emails and the newsletters a portfolio owner chooses to send. Resend sees the recipient email and the message.
• Cloudflare, for spam protection on public contact and subscribe forms.
• PostHog, for product analytics. PostHog sees page views, clicks and other events, device and browser details, cookies, and local storage. If you are signed in, we also send your user id and email so we can see how accounts use the product. Events go to PostHog's default host in the United States.

We do not sell your personal information.

Overseas disclosure

Some of these providers process data outside Australia. PostHog's default analytics host is in the United States. Other providers may also store or process data in other countries. We do not publish a full country list, because those locations can change. We take reasonable steps to make sure they protect your information. If you want more detail about a provider, email hello@dankovac.com.au.

Artificial intelligence

Flexfolio does not use AI to write, rewrite, or analyse your portfolio, posts, images, or other content. You write everything yourself.

We do not send your account information or portfolio content to AI providers.

We sometimes use AI tools ourselves to build and market Flexfolio. Those tools are not part of the product, and they do not receive your personal information as part of providing the service.

If we add AI features later, we will update this policy and say what they do and what data they see.

Public content

Your portfolio is designed to be public. Anything you publish, including on a flexfolio.co subdomain or a custom domain, can be viewed and indexed by search engines. Do not publish information you want to keep private.

Newsletter subscribers

We store subscriber emails so we can send the portfolio owner's newsletter through Resend.

The portfolio owner is responsible for how they contact that list.

Subscribers can unsubscribe using the link in the email, or by contacting us at hello@dankovac.com.au.

You do not need a Flexfolio account for us to hold this data. Subscribing to someone's newsletter is enough.

Data retention

We keep your information while your account is active.

If you delete your account, we delete or de-identify your personal information within a reasonable period. We may keep billing records we must keep for tax or accounting.

Analytics events in PostHog are kept while they are useful for running the product, then deleted or de-identified.

Subscriber lists stay with the portfolio they belong to until the subscriber unsubscribes, the owner deletes them, or the owner's account is deleted.

Your rights

You can ask us for access to your personal information, to correct it, or to delete it.

Most account holders can view and update their details in settings. To get a copy, correct something you cannot change yourself, or delete your information, email hello@dankovac.com.au.

Newsletter subscribers can unsubscribe from the email, or contact us at the same address.

Cookies

We use two kinds of cookies and similar storage.

Essential cookies keep you signed in and let the service run. You need these to use an account.

Analytics cookies come from PostHog. They remember your browser, record page views and events, and use both cookies and local storage.

We do not use cookies for third-party advertising.

You can refuse analytics cookies in your browser settings, or email hello@dankovac.com.au and we will help. The site will still work. We will just have a less complete picture of how it is used.

Children

Flexfolio is not intended for people under 16. We do not knowingly collect information from children.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the date at the top of this page. Significant changes will be communicated through the service.

Contact and complaints

Questions about this policy or your information: hello@dankovac.com.au.

If you have a privacy complaint, contact us first. We will look into it. If you are not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC).