Legal
Privacy Policy
We collect as little as we can, we do not use third-party trackers, and we set no cookies until you have given us your email address. This page explains exactly what that means.
Effective
Who we are
Portfolio Lens, Inc. is a Delaware corporation with its principal place of business at 1549 Olivia Pkwy, Henderson, NV 89011, United States. We are the data controller for personal information collected through https://getportfoliolens.com.
For any privacy question or request, contact insight@getportfoliolens.com. This is the address for all data-subject requests and it is monitored by a person.
What we collect
Information you give us
If you join the early-access list, we collect your first name and email address. If you choose to answer the optional profile questions afterwards, we collect those answers — your role, investor type, portfolio band, objective, research frequency, purchase timeframe, and content interests. Every one of those questions is optional and skippable, and we record which ones you answered and when.
We also record the fact of your consent: the exact wording you agreed to, a version identifier for that wording, the time you gave it, and the country the request came from.
Information collected automatically
We record anonymous usage events — pages viewed, links and buttons clicked, form steps started and completed — to understand which content is useful. Each event carries a random session identifier, the page path, a coarse device class (mobile, tablet, or desktop), and a two-letter country code derived by our content-delivery network.
We do not store your IP address in these records, and we do not store your browser's user agent string. Your IP address is processed transiently by our infrastructure to deliver the page and to operate rate-limiting and abuse protection, and is not retained in our analytics or lead records.
Cookies and local storage
Before you submit the form, we set no cookies at all. There is no cookie banner on this site because there is nothing to consent to: we use no advertising cookies, no analytics cookies, and no third-party trackers of any kind.
To group your page views into a single visit, we store a randomly generated session identifier in your browser's sessionStorage. It is per-tab, contains nothing about you, and is discarded by your browser when you close the tab.
After you submit the early-access form — and only then — we set one first-party cookie named pl_lead. It contains a single opaque identifier for your record, so that we can recognise you on a return visit and pre-fill your name. It is marked Secure and SameSite=Lax, it expires after one year, and it is never shared with anyone.
Why we process it, and on what legal basis
| Purpose | Legal basis (UK/EU GDPR) |
|---|---|
| Sending you the verification email that confirms your address | Performance of a contract / steps taken at your request (Art. 6(1)(b)) |
| Sending you marketing email about early access and research | Your consent (Art. 6(1)(a)), withdrawable at any time |
| Understanding which content is useful, using anonymous events | Our legitimate interest in improving the site (Art. 6(1)(f)) |
| Keeping a record of consent, and of unsubscribes and suppressions | Compliance with a legal obligation (Art. 6(1)(c)) |
| Protecting the site from abuse and automated attack | Our legitimate interest in securing the service (Art. 6(1)(f)) |
Double opt-in
We use double opt-in everywhere, for everyone, regardless of where you live. Submitting the form does not subscribe you. We send one verification email, and you are subscribed only when you click the link in it. If you never click it, we keep the unverified record so we do not email you repeatedly, and we send you no marketing.
Unsubscribing
Every marketing email carries a one-click unsubscribe link and the standard List-Unsubscribe headers, so your mail client's own unsubscribe button works. Unsubscribing takes effect immediately and requires no login, no reason, and no confirmation step.
Verification emails are transactional rather than marketing, and are sent in response to your own submission. We never send them to an address that has unsubscribed.
Who we share it with
We do not sell your personal information, and we never have. We do not share it with data brokers, advertising networks, or third-party enrichment services, and we do not enrich your record from any outside source.
We use Amazon Web Services to host this site, store the data, and send email. AWS acts as our processor under contract and does not use your information for its own purposes. Data is stored in the United States.
If we are legally compelled to disclose information — by a court order or a valid legal process — we will do so, and we will tell you unless we are prohibited from doing so.
International transfers
Our infrastructure is in the United States. If you are in the United Kingdom, the European Economic Area, or Switzerland, your information is transferred there under the European Commission's Standard Contractual Clauses, together with the UK Addendum where applicable.
Portfolio Lens, Inc. has not appointed a representative in the European Union under Article 27 GDPR. You can reach us directly at insight@getportfoliolens.com and we will respond within the statutory time limits.
How long we keep it
- Verified leads: until you unsubscribe or ask for deletion, and for up to 24 months after your last interaction with us, after which we delete the record.
- Unverified leads: 12 months from submission, then deleted.
- Consent and unsubscribe records: retained for as long as we are required to demonstrate compliance. These survive deletion of the rest of your record — proving that you unsubscribed is only possible if the record of it is kept.
- Anonymous usage events: 25 months, then deleted automatically.
Your rights
Depending on where you live you may have the right to access the personal information we hold about you, to correct it, to have it deleted, to receive it in a portable format, to object to or restrict our processing of it, and to withdraw consent at any time. Withdrawing consent does not affect processing carried out before you withdrew it.
If you are in California, you additionally have the right to know what we collect and why, to delete it, to correct it, and to opt out of sale or sharing — we do neither — and not to be discriminated against for exercising any of these rights.
To exercise any right, email insight@getportfoliolens.com. We will acknowledge your request and respond within 30 days (or within 45 days for requests under California law, extendable once where permitted). We do not charge for this, and we will not ask you to create an account to make a request.
If you are in the UK or the EEA and you are unhappy with how we have handled your information, you may complain to your national supervisory authority. We would rather you told us first, but you are not required to.
Children
This site is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.
Security
Data is encrypted in transit and at rest. Access is restricted to the small number of people who need it, and application secrets are held in a managed secrets store rather than in code. No system is perfectly secure, and we will not claim otherwise; if a breach occurs that affects you, we will notify you and the relevant regulator within the required time limits.
Changes to this policy
If we change this policy we will update the effective date at the top. Where a change materially affects how we use information you have already given us, we will email you before it takes effect rather than relying on you to re-read this page.