Portafel · Legal
Privacy Policy
Last updated: 9 October 2026
Operator and contact
Portafel is operated by its co-founders, Elvin Zeynalli and Shukur Malikli.
General enquiries: [email protected]
Privacy requests: [email protected]
Information we process
When you create an account, we process your name, email address, authentication information and account preferences. If you use personal features, we also process the portfolios, transactions, watchlists, alerts, saved research and notes you provide. Social sign-in shares account information from the provider you choose.
Security and operational records may include IP addresses, browser information, session details, request timestamps and errors. Do not include sensitive personal information in research prompts or notes unless it is needed for your use of the service.
Purposes and legal bases
Account and portfolio information is processed to provide the features you request and administer the service. Security and abuse-prevention processing supports our legitimate interests in protecting the platform and its users. We may process records to meet legal obligations. Optional analytics is enabled only after you accept it; you can withdraw that choice at any time.
Cookies and local storage
Essential cookies support authentication and security. Local browser storage remembers choices such as language, currency and theme and may cache personal workspace data. Sign out on shared devices.
Your analytics choice is remembered for up to 180 days. Optional, self-hosted usage analytics is not loaded before acceptance and respects the browser’s Do Not Track signal. The tracker is not supplied with your email, profile information or account identifier. Essential operation remains available when analytics is declined.
Service providers and external content
Hosting, authentication and email services process information needed to run the platform. When you request AI-assisted research, your prompt and relevant research context may be processed by the configured AI provider. Images, company logos and other external resources may be fetched from third-party hosts, which receive the network information needed to deliver them. Following a source link takes you to a service with its own privacy practices.
Where personal information is transferred internationally, the operator must establish the safeguards required by applicable law. Provider arrangements and transfer details will be confirmed before public launch.
Retention and security
Account and research records are retained to support your active account and the features you use. Security records and backups may require separate retention for operational or legal reasons. The operator will publish the applicable retention schedule before public launch. We use access controls and server-side validation; no online service can promise absolute security.
Your choices and rights
You can update account preferences and export available personal workspace data through your account. Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to certain processing. Direct privacy requests to the operator above. Identity verification may be necessary. You may also complain to your competent data protection authority.
Changes
We will update this notice as the platform and its processing arrangements develop. The date above identifies the current version. Material changes will be communicated where required.