Privacy Policy

1. Introduction

This Privacy Policy describes how Paxley LLC ("we," "our," or "us") collects, uses, and protects your personal information when you use the portfolio and customer portal services operated by Justin Harbour at justinharbour.com.

2. Information We Collect

Authentication Information

When you create an account or log in through Firebase Authentication, we collect:

• Email address
• Display name (if provided)
• Profile picture (if provided through OAuth providers)
• Authentication provider information (Google, GitHub, etc.)

Usage Data

We automatically collect certain information when you use our services:

• IP address
• Browser type and version
• Device information
• Pages visited and time spent
• Referring website

Portal Data

When using our portal services, we may collect:

• Messages and communications
• File uploads and submissions
• Project-related information
• Session activity and preferences

3. How We Use Your Information

We use your personal information for the following purposes:

• Providing and maintaining our portal services
• Authenticating your identity and managing your account
• Communicating with you about your projects and requests
• Delivering consulting services through Paxley LLC
• Improving our services and user experience
• Ensuring security and preventing fraud
• Complying with legal obligations

4. Cookies and Tracking

We use cookies and similar technologies for:

• Authentication: Firebase Auth session tokens to keep you logged in
• Preferences: Remembering your settings and preferences
• Security: CSRF protection and session security
• Analytics: Understanding how our portal is used (anonymized)

You can control cookies through your browser settings, but disabling certain cookies may affect the functionality of our portal.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in the following circumstances:

• With your explicit consent
• To comply with legal obligations or court orders
• To protect our rights, property, or safety
• With trusted service providers who assist in operating our services (under strict confidentiality agreements)

6. Data Security

We implement appropriate security measures to protect your personal information:

• Encryption in transit and at rest
• Secure authentication through Firebase
• Regular security assessments
• Access controls and monitoring
• Secure hosting infrastructure

7. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy:

• Account information: Until you delete your account
• Session data: As per Firebase Auth configuration
• Portal communications: For the duration of our business relationship
• Analytics data: Anonymized and aggregated for up to 2 years

8. Your Rights

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a structured format
• Objection: Object to processing of your personal data
• Withdrawal: Withdraw consent at any time

To exercise these rights, please contact us at the information provided below.

9. Third-Party Services

Our portal uses the following third-party services:

• Firebase (Google): Authentication services
• Cloudflare: Application hosting and deployment

These services have their own privacy policies that govern their collection and use of your information.

10. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us: