Portal AI Privacy Policy

Last Updated: January 29, 2025

At Portal AI, we prioritize data security and transparent privacy practices. This Privacy Policy describes how we use Business Personal Data, that is collected when you use our Service or otherwise communicate with us. Capitalized terms not defined herein are defined in the Portal AI Terms of Service.

This Privacy Policy does not describe how we collect, share, use or otherwise process Customer Personal Data, which is processed on behalf of our customers and subject to the Data Processing Addendum.

Personal Data We Collect

Personal Data You Provide

Your Account Information. When you register, you provide us Personal Data such as your name, email address, phone number, whether you would like to receive marketing messages, an avatar, account description, your consent to integrate with a platform of your choosing, email verification one-time passcode, encrypted password string (but not the password itself), and information about your business that may contain Personal Data.

Your Third-Party Service Information. When you choose to use a third-party service through our Service you provide us with information to share with the third-party service. For example, if you link and use an advertising platform through our Service, you provide us with advertising choices such as your budget.

Your Communications. When you communicate with us, whether by phone, email, social media, or other media such as surveys, you provide us with your contact information and content of your communication.

Automatically Collected Personal Data

Usage Information. We collect Personal Data about your usage of our Service. This includes collecting Personal Data about your activity (including how you use our Service) and the time, frequency, and duration of your activities. This also includes Personal Data about the features you use, internally-generated identifiers, and timestamps related to your use.

Log and Troubleshooting Personal Data. We collect Personal Data about how our Service is performing when you use them, like service-related diagnostic and performance information. This Personal Data includes log files, timestamps, diagnostic or crash data, website performance logs and error messages or reports.

Connection and Device Information. We collect connection-specific and device information when you install, access, or use our Service such as your IP address and device identifiers. 

Your Communications. When you communicate with us, we automatically collect metadata such as timestamps, encryption standards, keys, and signatures. 

How and Why We Process Personal Data

We use Personal Data: a) To provide, customize, operate, and support our Service; b) To improve our Service, develop new features, and conduct research; c) To communicate with you, including to send you information or marketing about our Service and events or otherwise provide information we think might be relevant to you; d) To prevent fraud, criminal activity, or misuses of our Service, and to protect the security of our systems and Service; e) To anonymize Personal Data or aggregate Personal Data; and f) To comply with legal obligations and to protect the rights, privacy, safety, or property of our users, us, our affiliates, or any third party.

We use Personal Data only when we have a valid legal basis to do so. Depending on the circumstance, we may rely on the fact that the processing is necessary to fulfill a contract with you, to protect your vital interests or those of other persons, or to comply with law. We may also process Personal Data where we believe it is in our or others’ legitimate interests, taking into consideration your interests, rights, and expectations.

We do not use algorithms or profiling to make any decision that would significantly affect you without the opportunity for human review. 

Personal Data We Share

We work with service providers to help us provide our Service. When we share Personal Data with service providers in this capacity, we require them to use Personal Data on our behalf in accordance with our instructions and terms. For example: a) To securely store Personal Data, we share Personal Data with cloud data storage providers; b) To provide, develop, and support our Service we share Personal Data with software-as-a-service providers; and c) To receive, store, and reply to your communications, we use email and phone providers.

We do not sell Personal Data including as “sale” is defined in Nevada and California. We also do not “share” Personal Data as that term is defined in California.

When you use third-party services that you choose to link through our Service, we share Personal Data including account information with the providers of those services. For example, if you use an advertising platform, we may share information about your advertising choices with them. Please note that when you use third-party services, their own terms and privacy policies will govern your use of those services and products.

How To Exercise Your Rights

Under applicable data protection law, you may have the right to access, rectify, port, and erase your information, the right to lodge a complaint with your local data protection authority, as well as the right to restrict and object to certain processing of your information. You also have the right to object to our processing of your information for direct marketing or where we are pursuing our legitimate interests or those of a third-party.

To exercise your rights, please contact legal@portal.ai. In addition, you may access, rectify, and erase some Personal Data through Account Settings.

There may be situations where we cannot grant your request — for example, if you ask us to delete your transaction data, and we are legally obligated to keep a record of that transaction to comply with law. We may also decline to grant a request where doing so would undermine our legitimate use of data for anti-fraud and security purposes, such as when you request deletion of an account that is being investigated for security concerns. Other reasons your privacy request may be denied are if it jeopardizes the privacy of others, is frivolous or vexatious, or would be extremely impractical or unreasonable.

How We Retain Your Data

We store Personal Data for as long as necessary for the purposes identified in this Privacy Policy. The storage periods are determined on a case-by-case basis that depends on the type of Personal Data and the reason for collecting and processing it, but in no case longer than we need the Personal Data for the purposes described in this policy or for legal reasons such as to comply with applicable law, resolve complaints, or as needed for litigation or regulatory matters. If you delete your account, we may store Personal Data for up to 30 days to provide you with an opportunity to recover your account.

Transferring Personal Data Outside of the EEA, UK, or Switzerland

If you share Business Personal Data with us that originated in the EEA, the United Kingdom, or Switzerland, we process this Business Personal Data in accordance with Module One (Controller to Controller) of the EU SCCs. You must complete Module One and return it to us at legal@portal.ai, if applicable. Supplemental terms for data transfers subject to Swiss privacy law are provided in Annex IV to Module One, while the UK addendum is provided in Annex V.

Updates To Our Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or comply with legal requirements. We will notify you of any changes by posting the new Privacy Policy on our website at least 30 days before the effective date of the changes. We encourage you to review the Privacy Policy periodically to stay informed about updates. By using our Service after the revised Privacy Policy is posted, you agree to the new provisions. If you do not agree to the new provisions, please stop using our Service before the effective date of the changes.

Contact Us

Please contact legal@portal.ai with any questions about this Privacy Policy.