Privacy Policy
1. Who is responsible for your data
Portafino, Inc., a Delaware, USA corporation ("Portafino", "we"), is the data controller for personal data collected through portafino.co and the Portafino platform. This policy applies under the EU and UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the CPRA, the Delaware Personal Data Privacy Act, the Israeli Protection of Privacy Law, and other applicable data protection laws.
2. Scope
Part A covers visitors to this website. Part B summarizes how we handle data of registered platform users (portal, API and Checkout); the full detail is in the Platform Terms of Service and Data Privacy Statement.
3. Part A – Website visitors: What we collect on the website
| Data | When | Why | Basis |
|---|---|---|---|
| Name, work email, company, country, topic, your message | You request a demo or contact us | Reply and arrange a meeting | Steps at your request before a contract; legitimate interest in answering business enquiries |
| IP address, browser, device, pages requested, time | Every visit (server logs) | Run, secure and fix the site | Legitimate interest in security and operation |
We don't use this website to collect identity documents, payment details or biometric data. We don't sell personal data, and we don't use website data for targeted advertising. The website sets no cookies and uses no analytics; see the Cookie Policy.
4. Who we share it with
Only service providers acting for us under data processing agreements, plus authorities where the law requires it:
| Provider | Role | Data |
|---|---|---|
| Google Cloud Platform | Website hosting and server logs | Technical data |
| Google Workspace (email) | Receiving form submissions | Form data |
| Legal and regulatory authorities | Only under a valid legal order or mandatory reporting duty | As required |
5. International transfers
We are a US company and use providers in the US and EU. Where personal data from the EU, UK or Israel is transferred to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum) or another lawful transfer mechanism.
6. How long we keep it
| Data | Kept |
|---|---|
| Demo enquiries | 24 months after our last contact |
| Server logs | 30 days |
7. Part B – Platform users: Platform data, in brief
To open a platform account and use protected payments, we and our licensed payment partners process identity and verification data (KYC/KYB, AML and sanctions screening), technical and blockchain data, and dispute data. Identity data is stored partly by Portafino and partly by the relevant regulated payment partner. Sign-in uses device passkeys (Apple / Google, FIDO2/WebAuthn): biometric data stays on your device, and Portafino does not store biometric data, facial geometry or biometric hashes. Platform sub-processors include regulated payment partners, blockchain analytics providers and cloud hosting providers.
8. Public blockchain records
Transactions recorded on a public blockchain cannot be changed or erased by Portafino. Your rights to correction and deletion apply to data we hold off-chain.
9. Part C – Your rights: Your rights
Depending on where you live, you can ask to access, correct, delete or receive a copy of your personal data, object to or restrict processing, and withdraw consent at any time. California residents can also ask what personal information we collect and disclose, and can't be discriminated against for using these rights. We honor Global Privacy Control signals as an opt-out. We answer within the time the applicable law sets (usually 30 days under GDPR, 45 under the CCPA).
10. How to make a request
Email contact@portafino.co. We may need to verify your identity before acting on the request. You can also complain to your local data protection authority (for example, in the EU, your national supervisory authority; in the UK, the ICO; in Israel, the Privacy Protection Authority).
11. Security
We use encryption in transit, access controls and least-privilege access for our team. No system is completely secure; if a breach affects your data, we will notify you and the authorities as the law requires.
12. Children
The website and platform are not directed at anyone under 18, and we don't knowingly collect their data.
13. Changes
We'll post any update here with a new "Last updated" date, and tell platform users by email about material changes.
14. Contact
Portafino, Inc. · contact@portafino.co