What PartnerPortal keeps, and who sees it

What is stored

An account is an organization. The account holds a sign-in email address and a password, kept only as a bcrypt hash; the profile holds what you enter during onboarding — the organization's name, type and location, what it needs and offers from the shared category list, focus areas, the free-text notes and description, a contact email and phone number, and up to four links.

Beyond the profile, the site keeps what you do on it: proposals and their terms, the message threads attached to them, the meetings you add to your own calendar or arrange with a partner inside a conversation, your private shortlist with its notes, invitations you have created, and the notification and email preferences you set.

Email addresses typed into the invitation form are used to send that one message and are not stored. The same is true of the contact form's details, which are kept only so somebody can reply to you.

Who sees what

Anyone, without an account

Your public profile: name, type, location, whether you are open to remote partnerships, description, focus areas, what you need and offer, and your notes. Your links appear there only if you ticked Show these links to everyone. The public directory lists the same profiles. Public profiles are marked noindex and are not in the sitemap, so search engines are asked not to list them.

Signed-in organizations

Everything above, plus your contact email and phone number, your links, and how well your profile matches theirs. They see contact details one profile at a time; listings and search results never carry them.

Anyone with an agreement link

An accepted partnership has a summary page: both organizations' names, types and locations, the terms each side agreed to, the timeline, and the proposer's note. It carries no contact details, no messages, no delivery verdicts and no reason a partnership ended. Either organization can replace or remove the link at any time.

Only the two of you

Message threads, meetings arranged inside them, the terms of a proposal that has not been accepted, whether each side said the other delivered, and the reason given for ending a partnership.

Only you

Your shortlist and its notes, the meetings you add to your own calendar, your analytics, your email preferences, and your sign-in address (partners see your contact address, which may be the same one).

Administrators

People who run the site can see organization names, sign-in addresses and profiles in order to act on flagged names and contact-form messages, and can take a profile out of the directory. When one side of a conversation reports it, an administrator can read that conversation — that one, not others — to judge the report. Every such action, including each reading, is recorded with who took it and why, and an organization whose profile is taken down is emailed the reason.

Email

PartnerPortal sends transactional email only: verification and password-reset links, confirmations when your sign-in address or password changes, and notices about partnership activity — a proposal received, answered or changed, a message in a thread, a partnership completing or ending, a public link changing. There is no newsletter and no marketing list.

The activity notices can be switched off per category in Settings, and each one carries a link to do so. Account messages — verification, resets, security notices — cannot be switched off, because they are how you keep control of the account. Mail is delivered through Resend.

What is counted

• Profile views. Opening a public profile records a view against a salted, one-way hash of the viewer — the account for a signed-in viewer, the connection and browser for anyone else — so that one person counts once a day. The hash cannot be turned back into who looked, and the organization sees a count, never a list. Your own visits to your own profile are not counted.
• Rate limits. Sign-ins, sign-ups, resets and other bounded actions are counted per connection and per account for up to an hour, to slow down guessing and bulk use. Those rows are deleted as they age out.
• No analytics scripts. There is no third-party analytics, advertising or tracking script on any page, and no cookies beyond the signed-in session and the token that protects forms.

Changing and deleting

Everything on your profile can be changed from Edit profile. Your sign-in address and password change from Settings; changing the address only takes effect once a link sent to the new one is opened, and the old address is told. Changing the password signs out every other device.

Deleting your account, also from Settings, removes the account, the profile, your shortlist, your meetings, your profile-view counts and every proposal that was not agreed. An agreed partnership stays on the other organization's record with your name as it was, because it is their record too; messages you sent in those threads stay with the thread, attributed to a closed account.

Where it lives

The application runs on Render and the database on Neon, both in the United States. Connections are over HTTPS. Passwords are never stored or logged in the clear, and the single-use tokens in emailed links are stored only as hashes.