Privacy policy

Information you provide

Business accounts provide an email address and password for registration and sign-in. Business owners and administrators may add business names, descriptions, locations, contact details, opening hours, products, services, photos and popup adverts.

We use this information to manage accounts, display listings, review business portfolios and provide the platform’s features.

Public listings and private drafts

Published business details and photos can be viewed by visitors and shared outside Plesfolio. Publish only contact information and images that you are comfortable making public and have permission to share.

Draft portfolios and unpublished popup adverts are restricted to their owner and authorised administrators. Business portfolio publication uses administrator review; popup adverts use the selected event-date visibility rules. Your sign-in credentials are not displayed on a public profile.

Sign-in cookies and service providers

Plesfolio uses sign-in cookies to maintain and refresh your account session. Blocking these cookies may prevent account features from working.

Supabase provides account authentication, database and photo storage. Netlify provides website hosting. These services process information needed to operate the application and may process technical request information for delivery, security and troubleshooting.

When security verification is enabled, sign-in, registration and password-reset forms use Cloudflare Turnstile to help detect automated requests. Cloudflare processes browser and connection information for this verification, and Supabase receives the verification token with the authentication request.

Contact enquiries

The contact form collects your name, reply email, category, message and optional page link so authorized administrators can handle your request. Messages are private and are not published. Do not submit passwords, sign-in codes or sensitive documents.

Cloudflare Turnstile processes browser and connection information to check submissions. We verify its token on our server. Temporary hashed email and token records enforce hourly submission limits. Administrators can remove resolved messages after 90 days; this is a manual cleanup, not an automatic deletion schedule. New and in-progress messages remain available for follow-up.

Optional visitor analytics

If analytics is enabled, we ask permission before loading Google Analytics. It helps measure public page views, business profile and promotion views, and clicks on business contact buttons. We use public business and content identifiers to prepare traffic reports; a contact click does not confirm an enquiry or sale.

We do not send account identifiers, contact destinations, form contents, URL query strings or fragments in our analytics events. Account, administrator and authentication pages are excluded, as are browsers with a Plesfolio sign-in cookie. We disable advertising signals and personalization in this integration. Google processes analytics data and may use first-party cookies to distinguish visits.

You can decline or withdraw permission through Analytics preferences when available. We store your preference in this browser for up to 180 days. Withdrawing permission stops our analytics events and removes this integration’s standard analytics cookies where accessible. Browser Do Not Track and Global Privacy Control preferences also disable this integration.

Maps and external links

Business profiles may display Google Maps. Loading an embedded map sends a request to Google, which may receive technical information such as your IP address. Contact and sharing links can open services such as WhatsApp, Facebook, YouTube or a business website; their privacy practices apply when you use them.

Managing your information

Business owners can edit their portfolio and manage supported photos and popup adverts through their account. An advert disappearing from public view does not delete its saved record or photos. Deleting a popup advert removes the advert and starts cleanup of its associated uploads.

For questions about account information or removal beyond the available account controls, see Contact & help. You can send a private request through the contact form.

Changes to this page

We will update this page when the application’s data handling changes. The date above identifies the latest update.