Privacy Policy
Effective date: February 2026 · Last updated: April 2026
1. What Portfi Is
Portfi is a read-only treasury analytics and governance monitoring tool for organizations holding tokenized assets. It connects to public blockchain data using wallet addresses you provide. Portfi never takes custody of funds, never signs transactions, and never requests private keys or wallet credentials of any kind.
2. Data We Collect
Account data: Your email address and the organization name you provide when creating an account.
Wallet addresses: The public blockchain wallet addresses you register. These are publicly visible on-chain; we store them to sync balance and transfer data for your organization.
Usage and audit data: Actions performed within the application — such as creating policies, exporting reports, and resolving governance violations — are recorded in an append-only audit log. This log includes timestamps, the user who performed each action, and what changed. It cannot be deleted.
Analytics data: If you accept analytics cookies, we collect anonymized product usage data (page views, feature interactions, session duration) to understand how Portfi is used and to improve it. We do not collect names, financial balances, or wallet addresses through analytics. You can opt out at any time using the Cookie Settings link in the footer.
3. How We Use Your Data
We use the data we collect solely to provide the Portfi service:
- Authenticating your account and enforcing role-based access controls
- Syncing on-chain balances and transfer events for your registered wallets
- Generating daily treasury snapshots and governance reports
- Maintaining the tamper-evident audit log for your organization
- Improving the product using aggregated, anonymized analytics (with your consent)
We do not use your data for advertising, behavioral profiling, or sale to third parties.
4. Cookies and Analytics
Portfi uses a single analytics provider, PostHog, to collect product usage data. Analytics are only initialized after you explicitly accept cookies via the consent banner. If you decline or have not yet responded, no analytics data is collected.
We do not use advertising cookies, tracking pixels, or cross-site tracking of any kind.
You can change your cookie preference at any time using the Cookie Settings link in the footer of any Portfi page. Resetting your preference will show the consent banner again on next page load.
5. Data Sharing
We do not sell, rent, or share your personal data with third parties for their own purposes. Data may be accessed by the following sub-processors in the course of providing the service:
- Supabase — database and authentication provider (PostgreSQL hosted infrastructure)
- Vercel — application hosting and serverless compute
- PostHog — product analytics (only when analytics consent is granted)
- Public RPC providers — Ethereum, Base, and Polygon JSON-RPC endpoints used to read on-chain data; these receive wallet addresses but no account or identity data
Each provider processes data only as needed to deliver the service and is subject to their own privacy policies.
6. Access Controls
Within your organization, data access is governed by the role you are assigned: Admin, Treasury, or Auditor. Each role has defined read and write permissions. Organization data is never accessible to members of other organizations.
7. Data Retention
Account data, wallet configurations, and audit logs are retained for the lifetime of your organization's account. The audit log is append-only and cannot be deleted — this is by design to preserve its integrity as a tamper-evident governance record. Balance and transfer history is retained indefinitely to support historical reporting. To request account deletion or data export, contact your organization administrator.
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated personal data (subject to the audit log retention requirement above)
- Withdraw analytics consent at any time via Cookie Settings
To exercise these rights, contact us at the address below.
9. Contact
If you have questions about this policy, your data, or want to exercise a data right, email us at privacy@portfi.io or use the contact form.