TrustPortfolio Privacy Policy

This privacy policy describes how TrustPortfolio collects, stores, uses, and shares information when someone uses the TrustPortfolio website, dashboard, public portfolio pages, and extension system.

It covers core app data plus the extension-specific data flows described in the linked extension policies below.

• Account and authentication data needed to sign users in through Clerk and associate activity with their TrustPortfolio account.
• Profile, portfolio, page, widget, and settings data that users create inside the product.
• Encrypted extension settings such as provider tokens, installation IDs, or API keys required to sync third-party data.
• Synced portfolio data written by extensions, including widget snapshots, activity records, and project records.
• Operational analytics and performance telemetry collected through Vercel Analytics, Vercel Speed Insights, the DataFast site analytics script, and PostHog product analytics.
• Product analytics events such as page views, feature interactions, and session data — collected via PostHog only after the user accepts analytics in the cookie consent prompt.

• To authenticate users and run the private dashboard.
• To publish the portfolio pages and widgets a user chooses to make public.
• To sync data from connected extensions on demand and on recurring schedules.
• To monitor product reliability, performance, abuse, and general usage patterns.

• With service providers that power TrustPortfolio, including Clerk for authentication, Convex for application data, Vercel for hosting and analytics, DataFast for site analytics, and PostHog for product analytics.
• With the third-party provider behind a connected extension when TrustPortfolio requests data on the user's behalf.
• With the public internet when a user chooses to display synced content on a public portfolio page.

• TrustPortfolio keeps account, portfolio, and synced extension data while it is needed to operate the account and public portfolio experience.
• Encrypted extension credentials stay stored until the user reconnects, removes, or replaces the related extension settings.
• Users can update portfolio content, disconnect extensions, stop syncs, or remove public widgets from the dashboard.
• Users can opt out of PostHog product analytics at any time by declining the cookie consent prompt or by contacting us. Declining does not affect access to any features.