Privacy Policy

This Privacy Policy explains what data Portifylead.com collects, how it is used, and your rights as a user. We keep this short and plain because we think you deserve to understand it without reading a legal document.

Portifylead.com is operated by Marius Toth, an individual based in Romania. "We" and "us" mean that one person, who is the data controller for the personal data described here. As an EU-based operation, we are subject to the General Data Protection Regulation (GDPR).

1. What Data We Collect

We collect only what is necessary to run the product:

• Account data: your name and email address when you register
• Newsletter: your email address if you sign up for product updates
• LinkedIn profile data: information visible to you on the LinkedIn profile page you are viewing at the moment you trigger a capture — name, job title, company, location, LinkedIn profile URL, and email, phone, or website where the profile exposes them. When you save, this data passes through Portifylead's API to the destination you selected. It is processed in memory only for that request and is not retained, queued, cached, logged, included in diagnostics, or copied to analytics.
• Destination connection: the OAuth authorization your connected system (such as Salesforce, HubSpot, Zoho CRM, Pipedrive, or Google Sheets) issues so records can be written on your behalf, plus the account identifier it reports so you can see which account is connected. We never receive your password.
• Product usage events: that a save was attempted, to which CRM, whether it succeeded, and a category if it failed. These carry no captured profile data, no contact details, and no error text from your CRM.
• Problem reports: the description you write, plus the technical context shown to you before you send it — app version, timestamp, CRM, and error category.
• Subscription status: whether you have an active subscription and which plan — provided by our payment processor

We do not collect your credit or debit card details. Payments are handled entirely by our payment processor and card data never passes through our systems.

2. How We Use Your Data

• To provide and operate the Portifylead.com extension
• To manage your account and subscription
• To understand how the product is used and where it fails, so we can fix it
• To send product updates if you subscribed to the newsletter
• To respond to support requests and problem reports

We do not sell your data. We do not use your data for advertising. We do not share it with third parties except as described below.

3. Third Parties We Work With

We share limited data with the following categories of service providers:

• Payment processor: to handle subscription billing. They receive your email and billing details directly.
• Your connected destination: captured details pass through our API to the account you connected. We process them only as needed to complete that request, including checking for an existing record when supported, and do not retain a copy.
• Email provider: to send account emails and to deliver problem reports to us.
• Cloud hosting: our servers and databases run on Amazon Web Services in the EU (eu-central-1).

This website can use Google Analytics to measure traffic, but only if you accept it in the banner shown on your first visit. If you decline, the Analytics script is never requested and no analytics cookie is set. We do not use advertising networks, and the extension contains no advertising or third-party tracking.

4. AI Sales Briefs and AI Processing

When you explicitly request an AI Sales Brief, the profile details and text messages currently visible in the selected one-to-one LinkedIn conversation pass through Portifylead.com's API to Amazon Bedrock in Stockholm (eu-north-1), using the GPT-OSS 20B open-weight model, so an editable brief of suggestions can be generated. We act as processor for customer-controlled destination content; customers remain responsible for their instructions, lawful basis, notices, and destination use.

Raw messages, evidence excerpts, model prompts and outputs, and destination payloads are handled only for the active request. They are not retained in our databases, logs, analytics, diagnostics, reports, queues, or caches and are not used for general-purpose model training. Model invocation logging and prompt caching are disabled. Approved profile and brief values and the reviewed Description may remain in the extension's local browser storage and in the destination you select.

The extension can display a real LinkedIn-hosted profile photo directly from its temporary URL while Capture is open. The photo URL and bytes are not sent to Portifylead.com, Amazon Bedrock, or a destination, are not stored, and are not uploaded or proxied by us. An AI Sales Brief never sends LinkedIn messages, loads older messages, or monitors conversations in the background.

5. Google Sheets and Google User Data

If you connect Google Sheets as a destination, this section describes exactly what we can and cannot reach in your Google account. It applies in addition to the rest of this policy.

Portifylead.com's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You choose the destination spreadsheet by pasting its link. From then on we address only that spreadsheet.

• What we read: the spreadsheet's name and the names of its tabs, so we can confirm the link and let you pick a tab; the first row of the tab you chose, which holds your column headings, so you can map profile fields onto your own columns; and the single email column, so a repeat save updates an existing row instead of adding a duplicate. We read no other cells.
• What we write: one row per saved profile, containing only the fields you mapped.
• What we store: the spreadsheet's identifier and name, the tab you chose, and a copy of your column headings so the mapping screen can show them. We do not store any other cell contents, and the profile data written to your sheet is not retained — it passes through only while the save is being completed.
• What we cannot do: we do not request access to Google Drive. We cannot list, search, browse, or read any other file in your Google account — only the spreadsheet you nominated.

The permission Google Sheets grants us technically covers spreadsheets in your account. Limiting it to the one file you chose is enforced by our application: every request we make is built against the spreadsheet identifier you gave us, and you change it by pasting a different link. We state this plainly rather than imply the permission itself is narrower than it is.

The authorization Google issues is encrypted before storage, held server-side only, and never given to the browser extension or the web app. We do not sell Google user data, do not use it for advertising, and do not use it to train generalized artificial-intelligence models. A person on our side accesses it only where you ask us for support, or where security or the law requires it. Disconnecting Google Sheets deletes the authorization immediately and asks Google to revoke it.

6. Data Storage and Security

Your account data is stored on Amazon Web Services in the EU. CRM authorizations are encrypted with a dedicated key before being stored, and every use of that key is logged. They are held server-side only — the browser extension never stores a destination credential or receives a short-lived access token.

We apply standard security practices including encrypted connections and access controls. No system is perfectly secure — if you suspect unauthorised access to your account, contact us immediately.

7. Data Retention

We retain your account data for as long as your account is active. If you cancel and request deletion, we will remove your personal data within 30 days.

LinkedIn profile data captured via the extension passes through our API only while a requested save is being completed. We do not retain a copy.

Disconnecting a CRM deletes its stored authorization immediately, and we also ask that CRM to revoke it. Your field mapping is kept so that reconnecting later does not mean setting it up again; deleting your account removes that too.

8. Your Rights Under GDPR

As an EU resident, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability — receive your data in a machine-readable format
• Lodge a complaint with your national data protection authority

To exercise any of these rights, email us at tom@initial1.com. We will respond within 30 days.

9. Cookies

This website sets essential cookies required for the site to function, and records your cookie choice in your browser's local storage so we do not ask again on every visit.

If you accept in the cookie banner, Google Analytics is loaded and sets its own analytics cookie so we can measure traffic. If you decline, or if you have not answered yet, the Analytics script is not requested at all and no analytics cookie is set. We use no advertising cookies and no cross-site tracking cookies in any case.

To change a choice you have already made, clear this site's data in your browser; the banner will ask again on your next visit.

10. Children

Portifylead.com is a professional tool intended for adults. We do not knowingly collect data from anyone under 18 years of age.

11. Changes to This Policy

If we make material changes to this policy, we will notify registered users by email before the changes take effect. The current version is always available at this URL.

12. Contact

For any privacy-related questions or requests, contact us at tom@initial1.com.