Privacy Notice

Who We Are

The controller of your personal data is Distributor Portals (distributorportals.com). For privacy questions or requests, contact us at privacy@distributorportals.com.

What Data We Collect and Why

We collect only what we need to operate the portal, keep it secure, and respond to your inquiries. Each category and its legal basis is listed below.

• Account email, role, password hash, MFA secret

  Legal basis: Contract

• IP address and user agent (login audit log)

  Legal basis: Legitimate interest (security)

• Signup name, email, phone, company

  Legal basis: Legitimate interest (sales inquiry)

• Support ticket content and attachments

  Legal basis: Contract

• Marketing lead name, email, phone, tracking events

  Legal basis: Consent

• AI search queries (stored as SHA-256 hash, not raw text)

  Legal basis: Legitimate interest (abuse prevention)

• Order notification emails

  Legal basis: Contract

• Microsoft profile data (Entra ID SSO users)

  Legal basis: Contract

How Long We Keep It

• Auth/security logs: 12 months, then anonymized.
• AI search audit: 90 days.
• Marketing events: until consent is withdrawn or 2 years, whichever comes first.
• Account data: duration of the contract, plus 30 days after a deletion request.

Who We Share It With

We share data with processors who help us host, secure, and operate the platform. See the full vendor list on our Subprocessors page.

Your Rights (EEA/UK users)

You have the right to access, correct, export, and erase your personal data. You can use self-service tools on your account Settings > Security page, or email privacy@distributorportals.com for a manual request.

International Transfers

Data may be processed in the United States by vendors listed at /legal/subprocessors. Transfers from the EEA/UK to those vendors are covered by Standard Contractual Clauses.

Changes to This Notice

We will update the "Last updated" date at the top of this page when this notice changes.