Privacy Policy

Perfolio provides a career-evidence workspace that helps individuals capture work, organize it against a rubric, create drafts, and decide what to share. In this policy, “Perfolio,” “we,” “us,” and “our” mean the operator of perfolio.io. If you use Perfolio through an employer or an organization, an applicable order form or enterprise agreement may identify the relevant contracting entity and control where it conflicts with this policy.

For privacy questions or to make a data-rights request, email [email protected] with “Privacy Request” in the subject line. Do not include passwords, access tokens, or unnecessary sensitive information in that email.

• Account and profile data. Your name, email address, authentication identifiers, profile details, plan status, and preferences. If your organization configures work SSO, its identity provider and Supabase may provide the authentication information needed to sign you in.
• Career-record content. Entries, rubrics, evidence, drafts, notes, sponsor information, feedback, attachments, generated packets, and information you choose to provide.
• Connected-workspace data. If you connect a service, we receive the data authorized by its permission screen and the feature you use. This can include work artifacts, messages, calendar details, document metadata, meeting notes, or source links. The available connector and scope are shown before connection and can change only with the permissions you grant.
• Transaction, support, and communications data. Billing status and transaction identifiers from Stripe, plus messages and information you send to us for sales, support, or security requests.
• Technical and usage data. Session and security logs, IP address, browser/device information, pages and actions, timestamps, feature usage, and error diagnostics. We use this information to run, secure, troubleshoot, and improve the service.

Do not submit another person's confidential, sensitive, or personal information unless you have authority to do so and it is appropriate for the feature you are using. Perfolio is not designed to process health records, payment-card data, government identifiers, or similarly regulated data.

We use personal data to:

• provide, authenticate, personalize, maintain, and support your account and the features you request;
• retrieve data from connected services you choose to connect, create private reviewable suggestions, and preserve the record you accept or create;
• process payments, prevent fraud and abuse, enforce our terms, protect the service, and respond to legal obligations;
• communicate with you about the service, security, support, billing, or material policy changes; and
• understand service reliability and improve features using aggregated or de-identified information where practical.

For people in the EEA, UK, or other locations with similar laws, our legal bases are performance of a contract, consent where required (including optional connections), legitimate interests in operating and securing Perfolio, and compliance with legal obligations. You may withdraw consent for an optional connection by disconnecting it, although this does not affect earlier lawful processing.

When you invoke an AI feature, or enable a connected-workspace routine that creates a reviewable suggestion, Perfolio may decrypt and send the inputs reasonably needed for that request to Google Gemini. Depending on the feature, those inputs can include relevant work content, rubrics, evidence, source excerpts, and instructions. AI output can be inaccurate, incomplete, or inappropriate for your circumstances.

Perfolio may store a private, reviewable AI or connector-derived suggestion so that you can inspect it. A suggestion does not become part of your accepted career record or affect a record-based score merely because it was generated. Where a feature proposes a record change, you decide whether to accept, edit, or reject it. You remain responsible for reviewing outputs before relying on or sharing them.

Perfolio does not train its own models on your content. We use the paid tier of the Google Gemini API. Under Google's paid-service terms, Google does not use prompts, associated instructions, cached content, uploaded files, or responses to improve Google products. Google may log prompts and responses for a limited period to detect prohibited use and meet applicable legal obligations. Certain AI features use Google Search grounding; Google states that it retains the prompt, contextual information, and generated output for 30 days to provide grounded results and search suggestions, and may use that information to debug and test the systems supporting grounding. Google's processing is subject to its applicable paid-service terms and data-processing terms. You can review Google's Gemini API paid-tier documentation and data-retention guidance.

Connections are optional. Perfolio requests the permissions described on the relevant consent screen and does not use a connector to write to, delete from, or administer a source service unless a feature and permission screen expressly say otherwise. Disconnecting a connector stops future access using its credentials; it does not automatically delete content already saved in your Perfolio account. You can delete saved content or your account through the service.

Organization administrators can administer seats, domains, enabled capabilities, and support. They cannot read an employee's private entries, evidence, drafts, or individual scores through organization-admin surfaces. Where enterprise reporting is enabled, it may show aggregate or cohort-level metrics subject to product thresholds and controls. Content is visible to another person only when you deliberately publish, submit, or share it, or where an applicable enterprise agreement expressly provides otherwise.

We use service providers to operate Perfolio. Depending on the features you use, these include Supabase for database, storage, and authentication; Google Gemini for AI processing; Google Cloud KMS for encryption-key operations; Cloudflare for network delivery and analytics; Stripe for billing; Resend for transactional email; and Sentry for error monitoring. Connected-workspace providers process data when you authorize a connection. We share data with providers only as needed to operate, secure, support, or improve the requested service, subject to their terms and contractual controls.

We may also disclose information when required by law, to protect the rights, safety, and security of Perfolio or others, in connection with a corporate transaction, or with your direction. We do not sell personal information or use it for cross-context behavioral advertising.

Our providers may process information in countries other than yours. Where transfer law applies, we use appropriate transfer mechanisms or safeguards required for the relevant transfer. Provider locations and terms can change; contact us for the current provider list relevant to your plan.

We use administrative, technical, and organizational safeguards designed to protect information. Configured sensitive fields are protected with application-layer AES-256-GCM encryption, separate per-user data-encryption keys, and Google Cloud KMS-protected key wrapping. Row-Level Security limits access to user-owned records. Connector credentials are encrypted and kept in server-only storage. We also use access controls, rate limiting, security headers, monitoring, and incident-response practices.

Google maintains security, privacy, and compliance programs for its own services and infrastructure. Those programs may support our use of Google services, but Google's certifications, attestations, and compliance commitments apply to Google's services and infrastructure; they do not independently certify Perfolio or establish Perfolio's compliance with a particular law, regulation, or standard.

No system is perfectly secure. Encryption is not end-to-end or zero-knowledge: Perfolio can decrypt data on the server when needed to provide a feature you request, including sending relevant inputs to a disclosed provider. Some operational metadata, such as identifiers, timestamps, statuses, provider/source keys, and account tags, remains unencrypted where needed to run the service.

We retain account and career-record content while your account remains active, unless you delete it or we no longer need it for the purposes described here. We retain connector credentials until you disconnect the connector or delete the account, subject to limited security and legal retention. Billing records are retained by Stripe and as required for tax, accounting, dispute, and legal purposes. Security, support, and diagnostic records are retained only as long as reasonably necessary for security, troubleshooting, and legal obligations.

You can export available account data and request deletion through settings. Account deletion removes live account records and destroys the associated live encryption key. Backups and provider systems may retain data for their ordinary recovery, operational, legal, or retention cycles; we do not restore deleted account data from backups except where necessary for a documented recovery process. We will handle deletion requests subject to legal, security, billing, and dispute-retention requirements.

Depending on where you live, you may have rights to access, correct, delete, export, restrict, object to, or withdraw consent for certain processing of your personal data. You may also have rights concerning certain profiling or automated decisions. Perfolio's AI features assist with drafting and organization; they do not make employment, promotion, compensation, or other similarly significant decisions for you.

To make a request, contact [email protected] with “Privacy Request” in the subject line. We may need to verify your identity before acting. Authorized agents should identify themselves and provide the authority required by applicable law. If you are dissatisfied with our response, you may have the right to complain to your local data-protection authority.

Perfolio uses essential cookies or similar technologies to keep you signed in, protect sessions, remember preferences, and secure the service. Cloudflare may collect limited analytics and network information. We do not use advertising cookies or sell personal information for targeted advertising. Where consent is required for a non-essential technology, we will seek it before using that technology.

Perfolio is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child provided data to us, contact us so we can investigate and delete it where appropriate.

We may update this policy as the service or law changes. For material changes, we will update the date above and provide additional notice when required by law. Your continued use after an effective update is subject to the updated policy to the extent permitted by law.