Privacy Policy

Last updated: June 19, 2026

At InteriorPortfolio, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our portfolio platform at interiorportfolio.com.

1. Information We Collect

1.1 Information You Provide Directly

Account Registration:

  • Full name
  • Email address
  • Business or studio name (optional)
  • Password (stored as a secure hash — we never store plain-text passwords)
  • Payment information (processed securely through Creem / Armitage Labs OÜ)

Profile & Portfolio Information:

  • Profile photo or logo
  • Business description and bio
  • Social media and contact links
  • Portfolio customization preferences (templates, fonts, colors, appearance settings)

Content You Upload:

  • Project photos, videos, and related media files
  • Project metadata (titles, descriptions, locations, dates)
  • Custom branding elements used in your portfolios

Contact Form Submissions (your visitors):

  • When you enable a contact form on your public portfolio, visitors may submit their name, email, and message
  • You act as the data controller for inquiries sent to you; InteriorPortfolio processes this data on your behalf to deliver the message

1.2 Information We Collect Automatically

Technical Data:

  • Browser type and version
  • Operating system and device type
  • IP addresses (used for security, rate-limiting, and abuse prevention)
  • Cookies and similar technologies (see Section 5)
  • Log data (access times, pages viewed, errors)

Usage Data:

  • Storage usage and upload activity on your account
  • Feature usage within the dashboard
  • Basic page views on public portfolios (aggregated where possible)

1.3 Information from Third Parties

Payment Processor (Creem / Armitage Labs OÜ):

  • Transaction confirmations
  • Billing information
  • Subscription status updates
  • Refund notifications

2. How We Use Your Information

2.1 To Provide Our Service

  • Create and manage your account
  • Process and store your portfolio content
  • Publish and serve your public portfolio pages
  • Enable PDF export, custom domains, and team collaboration (on eligible plans)
  • Deliver contact form messages to you
  • Provide customer support

2.2 Communication

  • Send transactional emails (account confirmations, payment receipts, storage warnings)
  • Send account notifications (payment failures, plan changes)
  • Provide product updates and feature announcements (you can opt out of non-essential marketing)
  • Respond to your inquiries and support requests

2.3 Business Operations

  • Process payments and prevent fraud
  • Monitor and improve service performance
  • Enforce our Terms of Service
  • Comply with legal obligations
  • Protect against security threats

2.4 Legal Compliance

  • Respond to legal requests and prevent harm
  • Enforce our agreements and policies
  • Protect our rights and property

3. How We Store and Protect Your Data

3.1 Data Storage

Media Content:

  • Stored on secure cloud infrastructure and delivered through a global CDN (or local disk in development)
  • Encrypted in transit (SSL/TLS)
  • Served through our global CDN infrastructure

Account Data:

  • Stored on secure server infrastructure
  • Database: MySQL with access restricted to authorized personnel
  • Regular automated backups

3.2 Security Measures

  • Industry-standard encryption (TLS for data in transit)
  • Secure authentication with password hashing (bcrypt)
  • DDoS protection through our global CDN and security infrastructure
  • IDOR protection (users can only access their own content)
  • Rate limiting and abuse prevention on public endpoints

3.3 Data Retention

Active Accounts:

  • Content retained as long as your account and subscription (or Free plan) remain active
  • Server logs retained for a limited period for security and debugging

Suspended Accounts (Non-Payment):

  • Days 1–30: All data retained; service restored upon payment
  • Day 31+: Content may be permanently deleted per our Terms of Service

Cancelled Accounts:

  • 7-day grace period for data recovery after voluntary cancellation
  • After 7 days: Permanent deletion

Backups:

  • Backup retention: up to 10 days
  • After deletion, backups are purged on a rolling basis

4. How We Share Your Information

4.1 We DO NOT Sell Your Data

We will never sell, rent, or trade your personal information to third parties for marketing purposes.

4.2 Service Providers

We share data with trusted third parties who help us operate our service:

  • Global CDN and cloud storage providers — media storage and delivery
  • Creem (Armitage Labs OÜ) — payment processing and subscription management
  • Server hosting providers — application infrastructure
  • Email service providers — transactional emails

These providers are contractually obligated to protect your data and use it only for specified purposes.

4.3 Public Information

The following information may be publicly visible when you choose to publish your portfolio:

  • Your public portfolio page content and projects
  • Your business name, logo, and bio (if you add them)
  • Contact details and social links you display
  • Media you mark as visible on public galleries

4.4 Legal Requirements

We may disclose information if required by law, subpoena, or court order, or to:

  • Comply with legal processes
  • Protect our rights and property
  • Prevent fraud or security threats
  • Protect the safety of our users

5. Cookies and Tracking Technologies

We use cookies and similar technologies to operate InteriorPortfolio. At this time we rely primarily on essential cookies required for authentication, security, and core functionality.

5.1 Necessary Cookies (always active)

Required for core functionality. Cannot be disabled without breaking the service.

  • Session cookie — keeps you logged in during your visit
  • CSRF token — protects form submissions from cross-site attacks

5.2 Managing Cookies

You can clear cookies through your browser settings. Disabling necessary cookies may prevent you from logging in or using core features of the platform.

6. Your Privacy Rights

Depending on your location, you may have the following rights:

6.1 Access & Portability

  • Request a copy of your personal data
  • Export your portfolio content from the dashboard where available

6.2 Correction

  • Update or correct inaccurate information
  • Modify your profile and settings

6.3 Deletion

  • Request deletion of your account and data
  • Subject to legal retention requirements

6.4 Objection & Restriction

  • Opt-out of marketing communications
  • Restrict certain data processing activities

6.5 Withdraw Consent

  • Revoke consent for data processing where applicable

To exercise these rights, contact us at [email protected]

7. Children's Privacy

InteriorPortfolio is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it immediately.

8. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in compliance with applicable laws.

9. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

  • Right to know what personal information is collected
  • Right to know if personal information is sold or disclosed
  • Right to opt-out of the sale of personal information (Note: We do not sell personal information)
  • Right to deletion of personal information
  • Right to non-discrimination for exercising privacy rights

To exercise these rights, email us at [email protected] with "California Privacy Rights" in the subject line.

10. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation:

  • Right to access your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to lodge a complaint with a supervisory authority

Legal basis for processing:

  • Contract performance: To provide our services
  • Legitimate interests: Security, service improvements, and fraud prevention
  • Consent: Marketing communications (opt-in)
  • Legal obligations: Compliance with laws

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Material changes will be communicated via:

  • Email notification (30 days advance notice)
  • Updated "Last Updated" date at the top of this policy

Continued use of InteriorPortfolio after changes constitutes acceptance of the updated policy.

12. Data Protection Officer

For privacy-related inquiries, contact our Data Protection Officer:

13. Contact Us

For questions about this Privacy Policy or our privacy practices:

By using InteriorPortfolio, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.

← Back to home Privacy Terms Refunds DMCA