Privacy Policy

What we store

• Account info from sign-up (email, display name).
• Media you upload and product links you capture.
• Clicks on your tracked /r/ links — a timestamp, referrer, coarse device class, and country per click, so you can see which of your links people actually used. We do not store the visitor's IP address.
• Legacy social-platform access tokens (Instagram, Pinterest) for accounts connected in an earlier version of Shopfolio, stored encrypted at rest. Shopfolio no longer connects to or publishes on any social platform, and these tokens are no longer used; see below for how to delete them.

How we use it

Solely to provide the app's features: storing your content, filling in product details from the pages you capture, serving the pages you publish, and counting clicks on your tracked links. We do not sell your data or share it with third parties for their own purposes. Shopfolio does not create affiliate links and takes no commission — tracked links measure clicks, nothing more.

Legacy platform data (Instagram & Pinterest)

Shopfolio no longer connects to social platforms. There is no way to link an Instagram or Pinterest account, and Shopfolio never posts anywhere on your behalf. For accounts connected in an earlier version, the data we still hold is:

• Your account identifiers (e.g. Instagram business-account id, Facebook user id, Pinterest user id) and the connected account's name/username.
• An access token, stored encrypted at rest and no longer used for anything.

Removing Shopfolio from Instagram/Facebook, or deleting your Shopfolio account, deletes that data.

Cookies & local storage

Shopfolio uses only strictly-necessary and functional storage — no advertising or third-party tracking cookies, and no cross-site trackers:

• A session/auth cookie set by our authentication provider (Supabase) to keep you signed in.
• Local storage for UI preferences only (your light/dark theme and sidebar state). It never leaves your browser and holds no personal data.

Because these are essential to the app working, no consent banner is required; clearing your browser storage simply signs you out and resets those preferences.

Data deletion

You control your data and can remove it at any time:

• Delete your account in Settings → Danger zone → permanently removes your profile, media, links, shops, click history, and any legacy platform connection.
• Remove the app from Instagram/Facebook → Meta notifies us and we delete the data obtained through that login automatically.

See our Data Deletion instructions for details and to check the status of a deletion request, or email [email protected].

Contact

Questions? Email [email protected]. See also our Terms of Service.