Privacy Policy

BareFolio ("we", "us", "our") is the data controller responsible for your personal data. We are based in Barcelona, Spain. You can contact us regarding any privacy matter at barefolio.app@gmail.com.

We collect the following categories of personal data:

• Account data: name, surname, email address, hashed password, user role (creator, seeker, or studio/brand).
• Profile data: portfolio content, biography, external links, and profile images that you choose to publish.
• Usage data: pages visited, features used, interaction timestamps, and in-app events.
• Technical data: IP address, browser type and version, operating system, and device identifiers.
• Cookie data: see our Cookie Policy for full details.

We process your personal data on the following legal grounds:

• Performance of a contract (Art. 6(1)(b) GDPR): to create and maintain your account and provide our services.
• Consent (Art. 6(1)(a) GDPR): for non-essential cookies and marketing communications. You may withdraw consent at any time.
• Legitimate interests (Art. 6(1)(f) GDPR): to maintain platform security, prevent fraud, and improve our service.
• Legal obligation (Art. 6(1)(c) GDPR): where required by applicable law.

• To create and manage your account.
• To provide, operate, and maintain the BareFolio platform.
• To send service-related communications (account notifications, security alerts).
• To improve the platform, develop new features, and analyse usage patterns.
• To detect and prevent fraud, abuse, and other harmful activity.
• To comply with applicable legal obligations.

We retain your personal data for as long as your account remains active or as necessary to provide our services. If you request account deletion, we will delete or anonymise your personal data within 90 days, except where we are required to retain it to comply with legal obligations, resolve disputes, or enforce our agreements.

We do not sell your personal data. We share data only with the following trusted service providers who process it on our behalf:

• Supabase Inc. (USA) — authentication and database hosting. Safeguard: Standard Contractual Clauses.
• Airtable Inc. (USA) — waitlist and early access management. Safeguard: Standard Contractual Clauses.
• Vercel Inc. (USA) — web hosting and content delivery. Safeguard: Standard Contractual Clauses.

We may also disclose your data when required by law or to protect the rights, property, or safety of BareFolio, our users, or others.

Our service providers are based in the United States. Whenever we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission under Art. 46(2)(c) GDPR.

Under the GDPR you have the following rights regarding your personal data:

• Right of access: obtain a copy of the personal data we hold about you.
• Right to rectification: correct inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): request deletion of your data.
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to restriction of processing: ask us to limit how we use your data.
• Right to object: object to processing based on legitimate interests.
• Right to withdraw consent: where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please email barefolio.app@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with Spain's data protection authority: Agencia Española de Protección de Datos (AEPD), www.aepd.es.

We use cookies and similar tracking technologies. For full information on the cookies we use and how to manage them, please see our Cookie Policy.

We may update this Privacy Policy from time to time. When we do, we will update the "last updated" date at the top of this page. For significant changes, we will notify you by email or by displaying a notice on the platform.

For any questions about this Privacy Policy or how we handle your personal data, please contact us at barefolio.app@gmail.com.