Privacy Policy

Last updated: July 8, 2026

Portal AI Inc. ("we", "us", "our") operates Portal, including the Portal One+ mobile application, Telegram bot, agent email service, and website at portal.ai. This policy describes how we collect, use, and protect your information.

Information We Collect

Account information - Email address, Telegram user ID, device identifiers, and authentication tokens.
Conversation data - Messages, voice notes, photos, and files you send to your AI assistant. These are stored on our servers to provide persistent memory across sessions.
Email data - If your agent has an email address, emails sent and received through it are stored as part of your agent's workspace.
Scheduled task data - Reminders, recurring workflows, and other tasks you configure your agent to perform autonomously.
Payment information - Subscription and billing data is processed by Stripe. We store your subscription status, tier, and email address. We do not store credit card numbers or payment credentials - these are held exclusively by Stripe.
Usage data - Session timestamps, message counts, Energy consumption, and service analytics to operate and improve the service.

How We Use Your Information

To provide, maintain, secure, support, and improve the reliability of the Portal service
To deliver AI-generated responses to your messages
To persist your conversation history, memory, and preferences across sessions
To send and receive emails on your behalf through your agent's email address
To execute scheduled tasks and reminders you configure
To process subscription payments and manage your billing
To track Energy usage against your subscription tier allowance
To provide support, debug service issues, investigate abuse or security incidents, comply with law, enforce our terms, and maintain service reliability

Third-Party Services and AI Data Sharing

We use third-party AI model providers to generate AI responses. Your messages and relevant context are sent to these providers for processing. Current providers include:

Anthropic (Claude models) - processes conversation text to generate responses. Anthropic Privacy Policy.
Google (Gemini models) - processes conversation text to generate responses. Google Privacy Policy.
Amazon Web Services (Bedrock) - processes conversation text to generate responses. AWS Privacy Policy.

We may add or change AI providers over time. Providers process your messages and context only to deliver the service to you, under agreements or policies that prohibit using customer data for model training, fine-tuning, or model improvement.

Third-Party Integration Data

If you connect third-party services (such as Google Calendar, Google Sheets, Strava, or others) through your account settings, your agent gains limited access to the specific data you authorized. Examples:

Google Calendar - your agent can read your schedule and create events on your behalf.
Strava - your agent can read your runs, rides, workouts, and training data.

We add new integrations over time. You always choose which services to connect and what data to share - nothing is connected without your explicit action in your account settings.

How integration data is shared with AI models: When you ask your agent about data from a connected service, the relevant data is included in the prompt sent to our AI providers (Anthropic, Google Gemini, or AWS Bedrock) to generate a response. Providers process this data under agreements or policies that prohibit using it to train their models and that limit any retention to short-term operational purposes such as abuse monitoring and service delivery. Where a zero-retention processing route is available, we use it. It is not used for model training by any provider.

Scope and control: You choose which services to connect. Each integration can be disconnected at any time from your account settings, which immediately revokes your agent's access. Authentication tokens are stored securely per user and are not shared across accounts.

Other Third-Party Services

We use Stripe to process payments. Your payment information is governed by Stripe's Privacy Policy.

We use Resend to deliver emails from your agent's email address. Email content passes through Resend's infrastructure for delivery.

We do not sell your data to any third party.

Data Isolation

Each user has an isolated environment - separate workspace, separate memory, separate conversation history. Other Portal users cannot access your conversations, files, emails, or preferences. Authorized Portal personnel and automated systems may access, process, or review your data only when reasonably necessary to operate, support, secure, debug, and maintain the reliability of the service; prevent abuse; comply with law; enforce our terms; protect rights, safety, and security; or perform actions you request or consent to. Approved service providers process your data only as needed to provide contracted services such as hosting, payments, email delivery, AI response generation, security, monitoring, and support tooling, under confidentiality, security, and no-training obligations. Your data is never used to train, fine-tune, or improve AI models.

Data Retention, Export, and Deletion

Your data is retained as long as your account is active. If you cancel your subscription, your data is retained for 30 days to allow reactivation, after which we delete or de-identify account data unless we are required or permitted to retain limited records for security, fraud prevention, dispute resolution, legal compliance, accounting, or abuse investigation.

Export your data. You can download all your data - conversations, memory, files, and anything your agent created - at any time through your account settings page. The export is provided as a standard archive file. You can also email [email protected] and we'll prepare it for you.

Delete your data. You can request deletion of your entire account and all associated data through your account settings page or by emailing [email protected]. Access is revoked immediately. Data is permanently purged from our servers within 30 days unless limited retention is required or permitted for security, fraud prevention, dispute resolution, legal compliance, accounting, or abuse investigation.

Your Rights

Depending on where you live, you may have specific rights over your personal data. As a matter of policy we extend the rights described below to all users, applying them as described in this policy and as required by applicable law.

Access - You can see what data we hold about you via your account settings or by asking us.
Export / Portability - You can download all your data in a machine-readable format at any time.
Deletion / Erasure - You can delete your account and all associated data. We revoke access promptly and complete deletion within 30 days unless limited retention is required or permitted for security, fraud prevention, dispute resolution, legal compliance, accounting, or abuse investigation.
Correction - You can correct your data by talking to your agent (it updates your memory and profile) or by contacting us.
Restriction / Objection - You can ask us to stop processing your data. The simplest way is to delete your account.
Withdraw consent - You can stop using the service at any time. Deleting your account withdraws all consent.

EU/EEA residents (GDPR): Our lawful basis for processing is contract performance (providing the service you subscribed to) and legitimate interest (operating, securing, supporting, and maintaining the reliability of the service for the limited purposes described above). You have the right to lodge a complaint with your local data protection authority.

California residents (CCPA/CPRA): You have the right to know what personal information we collect, to correct or delete it, to request portability, and to opt out of sale or sharing. We do not sell personal information or share it for cross-context behavioral advertising. We disclose personal information to service providers only for the business purposes described in this policy.

Brazilian residents (LGPD) and Canadian residents (PIPEDA): You have equivalent rights to access, correct, delete, and port your data.

We do not sell your personal information to anyone.

We will not discriminate against you for exercising your privacy rights. We use sensitive information you share in conversations only to provide the service you ask for. We do not use it to infer characteristics about you for advertising or any purpose unrelated to the service, and we do not sell or share it. We process voice notes to transcribe them; we do not create voiceprints or use voice data to identify individuals.

Contact [email protected] to exercise any of these rights. We respond to verifiable privacy requests within 45 days, and may extend by an additional 45 days where reasonably necessary and permitted under applicable law (with notice to you).

Security

Communication between the app and our servers is protected with HTTPS/TLS. Data at rest is stored on secured infrastructure with encrypted disks or equivalent infrastructure-level protections where applicable. API keys and credentials are stored separately from user data and are not accessible to AI agents.

Children's Privacy

Portal is not intended for children under 18. We do not knowingly collect information from children.

Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify you at least 30 days before they take effect - via a message in the Telegram bot and/or email. Minor clarifications may be posted without advance notice. The "last updated" date at the top always reflects the current version.

Contact

For privacy questions, data requests, or to exercise any of your rights:
[email protected]

For general support:
[email protected]

You can also manage your data directly at portal.ai/me.