Privacy Policy
1. Who We Are
Porlogie ("we," "us," "our") provides an automation platform that connects to third-party applications, processes data according to client-configured rules, and generates online spreadsheets. This Privacy Policy explains how we collect, use, and protect personal data.
2. What Data We Collect
From our clients (account holders): name, email, company name, billing/payment information, login credentials, API keys/credentials for third-party apps you choose to connect (stored encrypted).
Through automations, on behalf of our clients (e.g., your customers, patients, employees): data pulled from the third-party apps you connect — this may include names, emails, phone numbers, appointment details, order details, or other data depending on the automation you configure. We process this data solely as your processor, on your instructions, to run the automation you've set up.
3. How We Use Data
To provide and operate the Service (running automations, generating sheets, sending notifications); to bill for the Service; to provide customer support; to improve the Service (aggregated/anonymized usage data only — not individual client data); to send customer-facing emails (e.g., booking confirmations) only where you've configured this and from your own verified company email/domain. We do not sell personal data to third parties.
4. Legal Basis for Processing (where GDPR or similar applies)
For our direct clients: performance of a contract (providing the Service you signed up for). For data processed within automations on behalf of clients: we act as a data processor; the legal basis for that underlying personal data rests with the client (data controller), who is responsible for ensuring they have a lawful basis (e.g., consent, contract) for the data they choose to connect to Porlogie.
5. Sub-Processors
We use the following categories of third-party service providers to operate Porlogie: cloud hosting/infrastructure providers, email delivery services, SMS delivery services, payment processing (e.g., Paddle), cloud spreadsheet services (e.g., Google Sheets API). A current list of named sub-processors is available on request.
6. Data Security
We use encryption at rest (industry-standard, e.g., AES-256) and in transit (TLS 1.2+) for stored credentials and data. Access to client data is restricted on a need-to-know basis within our team.
7. Data Retention
Active client data is retained for as long as your account remains active. Upon cancellation, data is retained for 60 days, after which it is permanently deleted. You may request earlier deletion at any time. Backup copies may persist for a limited additional period before aging out of backup systems.
8. Your Rights
Depending on your jurisdiction, you may have rights to: access the personal data we hold about you; correct inaccurate data; request deletion of your data ("right to erasure"); object to or restrict certain processing; data portability. To exercise these rights, contact us at legal@porlogie.com.
9. International Data Transfers
If data is transferred or stored outside your country/region, we take steps to ensure appropriate safeguards are in place (e.g., standard contractual clauses, where applicable).
10. Children's Data
The Service is not intended for use by individuals under 18, and we do not knowingly collect data from children through our own account registration. Where automations process data relating to minors (e.g., a healthcare client's patient records), the client (data controller) remains responsible for ensuring lawful handling of that data per applicable law.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice.
12. Contact Us
For privacy-related questions or requests, contact legal@porlogie.com.