Skip to content
Portal

Legal

Privacy policy

Last updated: 4 October 2026

The short version

Your files never go through our servers to be stored. They travel directly between your devices, encrypted, or through an encrypted relay that can't read them. We keep the minimum needed to run Portal, we don't sell data, and we don't use your files to train AI. Technical details are on the security page.

What we collect

  • Account (only if you sign in): your email address and name from your sign-in provider (e.g. Google).
  • Plan and payments: your plan and subscription status. Card details are handled by Lemon Squeezy and never reach us.
  • Devices you save (signed in): device names and types, so you can recognise and remove them.
  • Connection statistics: anonymous events such as "a code was shown", "devices connected", "a transfer finished or failed", the connection type and timing. No file names or contents.
  • What you send us: feedback and problem reports, including any details you choose to add.

What we don't collect

  • The contents of your files, and the names of files you transfer.
  • Your search index: it lives on your phone. If you turn on AI search, only the text of your search is sent to the AI provider.
  • Print-shop orders: they live only in the shop's open browser tab and are deleted when the order is done or after 3 hours. The shop never gets the customer's phone number.

Who processes data for us

  • Supabase — accounts, database and connection signalling.
  • Vercel — hosting of the website.
  • Lemon Squeezy — payments, taxes and invoices (merchant of record).
  • A relay (TURN) provider — forwards encrypted traffic when devices can't connect directly.

Cookies and storage

We use only what Portal needs to work: a sign-in session cookie, your language choice, and your browser's local storage for settings such as remembered devices. No advertising or tracking cookies.

How long we keep it, and your rights

Account data is kept while you have an account. Connection statistics are kept in aggregate to improve reliability. You can ask us for a copy of your data, to correct it, or to delete your account and its data at any time: write to adaylraseni@gmail.com.

Changes

If we change this policy we'll update the date at the top. Questions: adaylraseni@gmail.com.