Privacy Policy
Last updated: July 1, 2026
This Privacy Policy explains how Saiman Khatiwada ("we", "us", or "our") collects, uses, shares, and protects information about you when you use the Portfolio platform and related services (the "Service"). We are committed to protecting your privacy and handling your personal data responsibly.
1. Introduction and Scope
This Privacy Policy applies to personal data we process in connection with the Service. It does not apply to third-party websites or services that we do not operate. By using the Service, you acknowledge the practices described in this Policy.
2. Information We Collect
Information you provide
When you create an Account or use the Service, we collect information such as your name, email address, and password (which is stored only in hashed form). We also collect any content you create or upload while using the Service.
Information collected automatically
When you use the Service, we automatically collect certain technical and usage data, such as your IP address, device and browser type, pages viewed, and the dates and times of your interactions. This helps us operate, secure, and improve the Service.
Cookies and similar technologies
We use essential cookies and similar technologies to authenticate you, maintain your session, and remember your preferences. See the Cookies section below for details.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and operate the Service.
- Authenticate you and keep your Account secure.
- Communicate with you, including sending service-related notices.
- Detect, prevent, and address fraud, abuse, and security issues.
- Analyze and improve the Service and develop new features.
- Comply with legal obligations and enforce our Terms.
4. Legal Bases for Processing
If you are located in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases: performance of our contract with you (to provide the Service); our legitimate interests (such as securing and improving the Service), provided they are not overridden by your rights; your consent, where required; and compliance with legal obligations.
7. Data Retention
We retain personal data for as long as your Account is active or as needed to provide the Service. We may retain certain information for longer where required to comply with legal obligations, resolve disputes, or enforce our agreements. When data is no longer needed, we delete or anonymize it.
8. Data Security
We implement reasonable technical and organizational measures designed to protect personal data, including encryption of data in transit and storage of passwords in hashed form. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Your Rights
Depending on your location, you may have rights regarding your personal data, including the right to access, correct, delete, or export your data, and to object to or restrict certain processing. You may also withdraw consent where processing is based on consent. To exercise these rights, contact us using the details below.
EEA and UK residents (GDPR)
If you are in the EEA or UK, you have the rights described above and the right to lodge a complaint with your local data protection supervisory authority.
California residents (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information we collect, to request deletion, and to not be discriminated against for exercising your rights. We do not sell or share your personal information as those terms are defined under California law.
10. International Data Transfers
We may process and store your information in countries other than the one in which you reside, including where we or our service providers operate. Where required, we take appropriate safeguards to protect your information when it is transferred internationally.
11. Children's Privacy
The Service is not directed to children under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.
12. Third-Party Links and Services
The Service may link to or integrate with third-party websites and services. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third party you interact with.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will provide notice, such as by posting the updated Policy with a new effective date. We encourage you to review this Policy periodically.
14. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact the data controller, Saiman Khatiwada (Nepal), at contact@saimankhatiwada.com.np.
© 2026 Portfolio CMS. All rights reserved.