Privacy Policy

Portal is a chat assistant you pay for with shared credits. That means we hold two sensitive things: what you write to the assistant, and a record of money. This policy says what we collect, who else can see it, and how to get rid of it. It covers the Portal app and everything you do in it.

Information we collect

Account information

• Your email address.
• Your name and profile picture, if you sign in with Google.
• A display name, if you set one.
• Which balance you last used and which model you prefer, so the app opens where you left it.

Your content

• The messages you send and the replies you get, with the model that produced each one.
• Files you upload: documents, images, text and spreadsheets.
• Feedback you send, the page you sent it from, and an email address if you choose to leave one for a reply.
• Images the assistant draws for you.
• Scheduled prompts, their timetable, and the timezone you were in when you set them.
• Drafts the assistant writes for you, and each earlier version of them, so you can go back to one.
• Anything you ask it to remember about you. Nothing goes in without you asking, either by saying “remember that…” in a chat or by adding it in settings, and you can read, reword and delete every entry there.

Memory in shared chats

What Portal remembers about you is yours alone. It is never used in a shared chat and never given to the other people in one, so a fact about you cannot reach the group through an answer.

Payment information

We never see your card. Payment happens on the processor’s own checkout page: Paystack for Naira, Stripe for US dollars, or Polar when that checkout is used. We store only the amount, the currency, the status and their reference. We also keep an append-only ledger of every top-up and every charge: what was spent, on which model, from which balance, and when.

Connected apps

If you connect an app, we store the key it gives us encrypted with AES-256-GCM. Where the app offers a sign-in we use that, so your password goes to them and never to us, and what we hold is a key you can revoke on their side at any time. Keys are never sent back to your browser, and connecting anything is always your explicit choice.

Once connected, the model reaches that app directly through Anthropic’s API rather than through us, so we do not hold a copy of what it reads. A connected app is yours alone and is never shared with a circle.

Technical information

A session cookie so you stay signed in, and ordinary server logs. We infer your country from your connection to show prices in a sensible currency. No advertising or analytics cookies. Feedback submissions use a one-way visitor key to limit repeated submissions; we do not store your connection address with your feedback.

How we use it

• To run the assistant and show you your chats.
• To meter credits accurately and keep the books straight on every balance.
• To keep accounts secure and investigate abuse.
• To fix things that break, and to decide what to build next.
• To meet legal and accounting obligations.

We do not sell your data, we do not show advertising, and we do not use your conversations to train models.

What other people can see

This is the part worth reading twice, because some of it is deliberate and specific to how Portal works.

• Everyone in a circle you are in sees your email address and how many of its credits you have used. A shared balance with no visibility is how friendships get strained, so usage is open to everyone on it. It does not show them your chats or what you asked.
• Everyone in a group chat sees that whole thread, including everything said before they joined.
• Your own one-to-one chats stay yours. Other people on a shared balance never see them.

AI processing

To answer you, your message and any attached files are sent to the provider behind the model you picked: OpenAI or Anthropic. Their terms govern what they do with it, and the model named on each reply tells you which one handled it. Changing model changes who processes your next message.

Google user data

Signing in with Google tells us your name, email address and profile picture, and nothing else. Connecting Google Calendar, Drive or Gmail is separate, optional, and done one app at a time.

Each connection asks only to read, and only for what that app needs:

• Google Calendar — userinfo.email calendar.readonly calendar.events.readonly

None of these allow sending, deleting or changing anything in your Google account.

We do not copy what those apps contain. What we keep is the access token Google issues, encrypted with AES-256-GCM and never returned to your browser. When a model reads your calendar, files or mail it does so at the moment you ask, to answer that message, and the content it reads is not stored by us afterwards.

Portal’s use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to develop, improve or train generalised artificial intelligence or machine-learning models. We do not sell it, and we never use it for advertising. It is passed to the model provider handling your message solely so that message can be answered.

You can disconnect an app inside Portal at any time, which deletes the stored token, and you can revoke our access independently from your Google account permissions.

When we share information

• Service providers who make Portal work: Paystack, Stripe or Polar for payments, our hosting provider, and the object storage holding your files.
• When the law requires it, and where we can, we will tell you first.
• If the business changes hands, your data may transfer with it. This policy, or one at least as protective, would continue to apply.

Security

Traffic is encrypted in transit. Connected-app tokens are encrypted at rest and never returned to the browser. Access to a chat is checked on the server on every read, so knowing a chat’s address is not enough to open it. No system is perfect, and we will tell you if something goes wrong that affects you.

Retention and deletion

• Chats and files stay until you delete them. Deleting a chat deletes its messages.
• Feedback stays until you ask us to remove it through the privacy contact below.
• The credit ledger is kept even after a chat goes, because it is a financial record and has to reconcile.
• A circle outlives its members, so people can be let back in and use credits already paid for.

Your rights

• Delete any chat, at any time, from the list on the left.
• Leave a group chat, or leave a circle.
• Ask for a copy of your data, or ask us to correct it.
• Ask us to delete your account. There is no self-service delete button yet; we do it by hand and confirm when it is done. Credits in a circle stay with the circle, since they are shared money.
• Object to how we process your data, or ask us to restrict it.

Write to privacy@tryportal.co for any of these. Depending on where you live you may also have the right to complain to your data-protection regulator.

International transfers

Portal runs on infrastructure that may sit outside your country, and the model providers process requests in their own regions. Where data leaves the area you are in, we rely on the safeguards those providers offer for international transfers.

Children

Portal is not for children. You need to be at least 16 to hold an account, and we do not knowingly collect information from anyone younger.

Changes to this policy

If we change how any of this works we will update this page and the date at the top. If the change is significant we will tell you in the app rather than hoping you re-read it.

Contact

Portal is operated by [your name, or your registered business name]. For anything about your data, write to privacy@tryportal.co. For anything else, support@tryportal.co.