1. Introduction
At Portify, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
2. Information We Collect
Information You Provide
- Account Information: Name, email address, password, company name
- Case Data: Client information, case details, documents you upload
- Payment Information: Billing address, payment method (processed by our payment provider)
- Communications: Messages you send through the Service or to our support team
Information Collected Automatically
- Usage Data: Pages visited, features used, time spent on the Service
- Device Information: IP address, browser type, operating system
- Cookies: We use cookies and similar tracking technologies (see Cookie Policy below)
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Process transactions and send related information
- Send administrative information, updates, and security alerts
- Respond to customer service requests and support needs
- Monitor and analyze usage patterns and trends
- Detect, prevent, and address technical issues and fraud
- Send marketing communications (with your consent)
4. How We Share Your Information
We do not sell your personal information. We may share your information with:
- Service Providers: Third parties who perform services on our behalf (hosting, payment processing, analytics)
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with a merger, sale, or acquisition
- With Your Consent: When you explicitly authorize us to share information
5. Google Calendar and Google API Services (Limited Use)
If you choose to connect a Google account (for example, to sync your calendar or schedule client meetings), Portify accesses a limited set of Google user data through Google APIs, strictly to power that feature. Connecting is always optional and initiated by you, and you can disconnect at any time.
What we access and why
- Calendar events (
calendar.events): We create, update, and cancel the appointment events that Portify itself schedules on your calendar (with the meeting details and, where applicable, a Google Meet link), and we read those same events back to show their status. We only act on the events Portify creates for your Portify appointments. - Free/busy availability (
calendar.freebusy): We read your busy time blocks (start and end times only, never the titles, descriptions, guests, or contents of your other events) so we can offer open time slots and prevent double-booking. - Calendar list (
calendar.calendarlist.readonly): Where you connect a calendar for booking, we read the list of your calendars so you can choose which one to connect. - Basic profile (
userinfo.email,userinfo.profile): Your email and name, to identify and label the connected account.
We request the narrowest scopes needed for these features. We do not request access to read, edit, share, or delete all of your calendars or events.
Limited Use commitment
Portify's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We only use Google user data to provide and improve the scheduling and calendar features described above.
- We do not sell Google user data, and we do not transfer it to third parties except as needed to provide or improve these features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets after notice to you.
- We do not use Google user data for advertising.
- We do not use Google user data to train, develop, or improve generalized or non-personalized artificial intelligence or machine learning models.
- We do not allow humans to read Google user data unless we first obtain your consent to view specific data, it is necessary for security purposes (such as investigating abuse) or to comply with applicable law, or the data has been aggregated and anonymized.
Storage and revoking access
Access and refresh tokens for your Google account are stored encrypted and are used only to perform the actions above on your behalf. You can revoke Portify's access at any time by disconnecting the calendar in your Portify settings, or from your Google Account at myaccount.google.com/permissions. Disconnecting revokes the token and deletes the stored credentials for that connection.
6. Data Security
We implement appropriate technical and organizational security measures to protect your information:
- 256-bit SSL/TLS encryption for data in transit
- AES-256 encryption for data at rest
- Regular security audits and penetration testing
- Access controls and authentication requirements
- Regular backups and disaster recovery procedures
7. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service. You may request deletion of your data at any time, subject to legal and contractual obligations.
8. Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of your personal information
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your information
- Portability: Request transfer of your information to another service
- Objection: Object to processing of your information
- Restriction: Request restriction of processing
To exercise these rights, contact us at [email protected].
9. GDPR Compliance
For users in the European Economic Area (EEA), we comply with GDPR requirements:
- We process data lawfully, fairly, and transparently
- We collect data for specific, explicit, and legitimate purposes
- We minimize data collection and storage
- We ensure data accuracy
- We limit data storage duration
- We maintain data security and confidentiality
10. Cookies Policy
We use cookies and similar technologies for:
- Essential Cookies: Required for the Service to function
- Analytics Cookies: Help us understand how you use the Service
- Preference Cookies: Remember your settings and preferences
You can control cookies through your browser settings, but disabling certain cookies may limit functionality.
11. Third-Party Services
Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.
12. Children's Privacy
Our Service is not intended for individuals under 18 years of age. We do not knowingly collect information from children. If you become aware that a child has provided us with personal information, please contact us.
13. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes via email or through the Service. Continued use after changes constitutes acceptance of the updated policy.
15. Contact Us
If you have questions about this Privacy Policy or our privacy practices, contact us at:
Email: [email protected]
Address: Unit 526 - 857 Belmont Drive SW, Calgary, AB, Canada
