Privacy

What we collect

• Early-access signups. When you join the waitlist we store your email address and which part of the site you signed up from. We use it to send your invite and occasional product updates — nothing else.
• Accounts. Signing in uses Google. We receive your name, email, and avatar from Google — never a password. Portfolio data you save to an account (the domains you add or import) is stored against it.
• Service requests and reservations. Joining the Portfolio Health Check early-user list stores your name, email, approximate portfolio-size band, current format, selected outcome, optional bounded notes, and contact consent. A founding-plan reservation stores only email, size band, and consent. We use these details to contact you when the service opens, to respond to the request, and to operate the offer.
• Sponsored domain applications. Applying to sponsor a domain stores the domain name, your name, email, whether you are the owner or an authorized broker, an optional destination link and placement copy, and your consent. We use it to verify ownership or authorization, review the placement, invoice an approved placement, and operate it. If approved, the domain, copy, and link are published with the “Sponsored” label for the placement period; your name and email are never published. Sponsorship records are kept separate from portfolio, valuation, and ranking data, and are never used to target anyone.
• Analytics. We use Google Analytics to understand how the product is used, and only after you accept the consent banner — measurement is off by default. No advertising, no cross-site tracking.

What stays on your device

You can use the dashboard without an account. Domains you import or add while signed out live in your browser's local storage. Your portfolio reaches our servers only if you create an account and choose to migrate it. You can delete your account and everything saved to it at any time from the account menu; the copy in your browser stays.

Two actions send domain names only, and only when you click them. Nothing else from your portfolio is sent: no costs, no values, no notes, and nothing that identifies you.

• Check registry looks each name up in the public domain registry (RDAP, via rdap.org) to confirm its dates.
• Estimate valuesasks a third-party valuation model, run on Replicate, for a rough estimate. We keep each name's estimate for up to 30 days so the same name isn't estimated twice; that cache records names and figures, never who asked.

Portfolio Health Check files

The early-user form does not upload your portfolio. If you purchase a Health Check once it opens, we ask for an export through an agreed private handoff and use it only to prepare your report and review call. We do not publish it or use it for advertising, and working files are deleted within 30 days after the review.

What we don't do

• We don't sell or share your data with third parties.
• We never see or store registrar passwords.
• We do not collect payment-card details. If an optional founding deposit is enabled, card entry happens on the hosted payment provider under its own privacy notice.
• When read-only registrar sync launches, it will use API keys that cannot move, transfer, or delete domains.

Where data lives

The site is hosted on Vercel; account, waitlist, service-request, and reservation data is stored in a Neon Postgres database. Both are covered by their providers' security programs.

Your choices

Email privacy@domainsfolio.io to see what we hold about you, to remove a service request or reservation, to be removed from the waitlist, or to delete your account and everything attached to it. We action deletion requests, not debate them.