Legal

Privacy Policy

Last updated: January 13, 2026

1. Introduction

Portal Copy Co. ("we," "us," or "our") operates Portal28 Academy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

Personal Information

When you create an account or make a purchase, we may collect:

  • Email address
  • Name
  • Billing information (processed securely through Stripe)
  • Profile information (avatar, bio, display name)

Usage Information

We automatically collect certain information when you use our Service:

  • Device information (browser type, operating system)
  • IP address and approximate location
  • Pages visited and time spent on pages
  • Course progress and completion data
  • Community interactions (posts, comments, messages)

Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Maintain your session and keep you logged in
  • Remember your preferences
  • Analyze usage patterns and improve our Service
  • Track marketing attribution (UTM parameters, Facebook Click ID)
  • Deliver targeted advertising through Meta Pixel and other platforms

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our Service
  • Process transactions and send purchase confirmations
  • Send course updates, announcements, and educational content
  • Respond to your comments, questions, and support requests
  • Analyze usage patterns and optimize the user experience
  • Send marketing communications (you may opt out at any time)
  • Prevent fraud and ensure security
  • Comply with legal obligations

4. How We Share Your Information

We may share your information with:

  • Service Providers: We use third-party services including Stripe (payments), Supabase (database and authentication), Resend (email), Mux (video hosting), Cloudflare R2 (file storage), and Meta (advertising).
  • Marketing Platforms: We share hashed email addresses and event data with Meta Conversions API for advertising attribution and optimization.
  • Legal Requirements: We may disclose your information if required by law or in response to valid legal requests.

We do not sell your personal information to third parties.

5. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

  • Encryption of data in transit (HTTPS/TLS)
  • Secure authentication (magic links, password hashing)
  • Row-level security policies on our database
  • Regular security audits and updates

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you request account deletion, we will delete or anonymize your personal information, except where we are required to retain it for legal compliance.

7. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

  • Access: Request a copy of your personal information
  • Correction: Update or correct your information
  • Deletion: Request deletion of your account and data
  • Opt-Out: Unsubscribe from marketing emails
  • Data Portability: Request your data in a portable format

To exercise these rights, contact us at privacy@portal28.academy.

8. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.

9. Children's Privacy

Our Service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. By using our Service, you consent to the transfer of your information to the United States and other countries where our service providers operate.

11. Marketing and Advertising

Email Marketing

We use Resend to send transactional and marketing emails. You may opt out of marketing emails by clicking the "Unsubscribe" link in any email or by updating your preferences in your account settings.

Meta Pixel and Conversions API

We use Meta Pixel and Conversions API to track user behavior and optimize our advertising campaigns on Facebook and Instagram. This includes tracking page views, course views, and purchases. Email addresses are hashed before being sent to Meta. You can opt out of targeted advertising through your Facebook ad preferences.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of the Service after such changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@portal28.academy