Legal
Privacy Policy
Last updated: January 13, 2026
1. Introduction
Portal Copy Co. ("we," "us," or "our") operates Portal28 Academy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
2. Information We Collect
Personal Information
When you create an account or make a purchase, we may collect:
- Email address
- Name
- Billing information (processed securely through Stripe)
- Profile information (avatar, bio, display name)
Usage Information
We automatically collect certain information when you use our Service:
- Device information (browser type, operating system)
- IP address and approximate location
- Pages visited and time spent on pages
- Course progress and completion data
- Community interactions (posts, comments, messages)
Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Maintain your session and keep you logged in
- Remember your preferences
- Analyze usage patterns and improve our Service
- Track marketing attribution (UTM parameters, Facebook Click ID)
- Deliver targeted advertising through Meta Pixel and other platforms
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our Service
- Process transactions and send purchase confirmations
- Send course updates, announcements, and educational content
- Respond to your comments, questions, and support requests
- Analyze usage patterns and optimize the user experience
- Send marketing communications (you may opt out at any time)
- Prevent fraud and ensure security
- Comply with legal obligations
4. How We Share Your Information
We may share your information with:
- Service Providers: We use third-party services including Stripe (payments), Supabase (database and authentication), Resend (email), Mux (video hosting), Cloudflare R2 (file storage), and Meta (advertising).
- Marketing Platforms: We share hashed email addresses and event data with Meta Conversions API for advertising attribution and optimization.
- Legal Requirements: We may disclose your information if required by law or in response to valid legal requests.
We do not sell your personal information to third parties.
5. Data Security
We implement appropriate technical and organizational measures to protect your information, including:
- Encryption of data in transit (HTTPS/TLS)
- Secure authentication (magic links, password hashing)
- Row-level security policies on our database
- Regular security audits and updates
However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. If you request account deletion, we will delete or anonymize your personal information, except where we are required to retain it for legal compliance.
7. Your Rights
Depending on your location, you may have certain rights regarding your personal information:
- Access: Request a copy of your personal information
- Correction: Update or correct your information
- Deletion: Request deletion of your account and data
- Opt-Out: Unsubscribe from marketing emails
- Data Portability: Request your data in a portable format
To exercise these rights, contact us at privacy@portal28.academy.
8. Third-Party Links
Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.
9. Children's Privacy
Our Service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your own. By using our Service, you consent to the transfer of your information to the United States and other countries where our service providers operate.
11. Marketing and Advertising
Email Marketing
We use Resend to send transactional and marketing emails. You may opt out of marketing emails by clicking the "Unsubscribe" link in any email or by updating your preferences in your account settings.
Meta Pixel and Conversions API
We use Meta Pixel and Conversions API to track user behavior and optimize our advertising campaigns on Facebook and Instagram. This includes tracking page views, course views, and purchases. Email addresses are hashed before being sent to Meta. You can opt out of targeted advertising through your Facebook ad preferences.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of the Service after such changes constitutes acceptance of the updated Privacy Policy.
13. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Email: privacy@portal28.academy