PFP Endeavors client portal

Privacy

Last updated October 7, 2026

This page covers the client portal at portal.pfpendeavors.com. It says what the portal holds, which outside services see it, and how to have it removed. It is written in plain words on purpose.

Who runs this

The portal is run by PFP Endeavors, LLC (“PFP”, “we”). Businesses that use it are our clients. Questions about this page go to support@pfpendeavors.com.

Two kinds of people, two kinds of data

Portal users are the owners and staff of a client business who sign in.

A client's own customers are the people a client business deals with: somebody who called, texted, filled in a form, got an estimate or an invoice. They do not sign in. Their details are in the portal because the client business put them there or because they contacted that business. For that data the client business decides what is kept and why, and PFP holds it on the client's behalf.

What the portal holds

About portal users:

  • Name, email address or username, and a password stored only as a one-way hash.
  • Which business the account belongs to and its role (owner or staff).
  • A record of each sign-in: the time and the browser's user-agent string.
  • An activity log of actions taken in the portal, such as saving an estimate or changing a lead's status.
  • Questions typed into the help chat, kept in that activity log so we can see where people get stuck.

About a client's customers, depending on which tools that client uses:

  • Leads and client records: name, phone number, email address, the message they sent, notes and status.
  • Calls and text messages to the client's business number: phone numbers, times and the text of messages.
  • Invoices and payment status synced from the client's Stripe account. The portal does not see or store card numbers.
  • Review requests sent, and whether someone opted out.
  • Emails a client sends from the portal, who they went to and which answer button was pressed.
  • Job and estimate details, and for some businesses records such as horses in care, boarding charges, parts and shop jobs.

Spreadsheets and price files uploaded for an estimate are read and turned into rows. The file itself is not kept.

Cookies and browser storage

The portal sets the cookies needed to keep you signed in, and a short-lived cookie while a Google account is being connected. It remembers your light or dark theme and sidebar choice in your browser's local storage. There are no advertising cookies, no analytics trackers and no third-party scripts.

AI in the portal

Two features use an AI model, provided by Anthropic:

  • The help chat. It is an AI assistant, not a person. What you type, the name of your business and the screen you are on are sent to Anthropic to write the answer.
  • The spreadsheet and price-list reader. The contents of a file you upload for an estimate are sent to Anthropic to be read into rows. The arithmetic and pricing are done by the portal's own calculator, not by the AI.

We do not use portal data to train AI models. AI answers can be wrong; check anything that matters before relying on it.

Outside services that receive data

These are all of them. We do not sell personal information.

  • Supabase: the database and sign-in system. Everything listed above is stored there.
  • Vercel: hosts the portal. Like any web host it processes requests, including IP addresses, to serve pages.
  • Anthropic: the AI model behind the help chat and the spreadsheet reader, as described above.
  • Resend: sends email, including invitations, emails a client sends from the portal and review requests. It receives the recipient's address and the message.
  • Twilio: carries calls and text messages. It receives phone numbers and message text.
  • Stripe: invoices and payment status for clients who connect it.
  • Google: for clients who connect it, their Google Business Profile (reviews), and a calendar feed that Google Calendar reads. The calendar feed carries no phone numbers or amounts.

Review requests and opting out

A client business can ask a past customer for a review, once, by text or email. Every such message says who sent it and how to stop: reply STOP to a text, or use the unsubscribe link in the email. Once you opt out you will not get another review request through the portal from any business that uses it.

How long it is kept

Data is kept while the client business is a client. When a client leaves, their account is switched off and their data is removed on request. Removal is carried out by a person, not automatically. Deleting a lead inside the portal hides it and marks it deleted; it is erased when the business's data is removed.

Asking for your data or for deletion

Email support@pfpendeavors.com to ask what we hold about you, to correct it, or to have it deleted. If you are a customer of one of our clients, tell us which business, and we will work with them, because they decide what happens to their customer records. We reply to every request.

Children

The portal is a business tool for adults. It is not meant for children under 13 and we do not knowingly collect their information.

Security

Each client business can only see its own records; that separation is enforced in the database, not just on the screen. Connections are encrypted. No system is perfectly secure, and if something goes wrong that affects your data we will tell the affected client businesses.

Changes

When this page changes, the date at the top changes with it. The marketing website at pfpendeavors.com has its own privacy page; this one covers the portal.