Legal

Privacy Policy

Effective July 21, 2026

This Privacy Policy explains how Portaxo ("Portaxo," "we," "us," or "our") collects, uses, discloses, and protects information when you use our websites, applications, and related services (the "Services").

1. Information we collect

Account and profile information

We collect information you provide when creating or managing an account, such as your name, email address, company, timezone, authentication method, and account preferences. Passwords are stored in hashed form.

Trade and outreach information

The Services may process buyer and supplier searches, company records, contact details, saved leads, email drafts, sequence recipients, signatures, uploaded media, sending schedules, and delivery records that you choose to create or import.

Usage, security, and device information

We collect service activity such as logins, feature usage, clicks, error logs, IP address, browser and device information, and timestamps. We use this information to operate, secure, troubleshoot, and improve the Services.

2. Google user data

Portaxo lets you sign in with Google and optionally connect a Gmail or Google Workspace mailbox to send reviewed outreach from your own account. Depending on the feature you authorize, we may receive your Google account email address, basic profile information, OAuth authorization tokens, and permission to send email on your behalf.

• Portaxo requests the narrow gmail.send scope for connected-mailbox delivery.
• Portaxo does not use that scope to read, search, download, or delete your Gmail messages.
• Emails are sent only after you connect the mailbox and review and launch a sequence.
• OAuth tokens are encrypted at rest and are not displayed to other users.
• You can disconnect a mailbox from Portaxo, and you can revoke access from your Google Account.

Portaxo's use and transfer of information received from Google APIs adheres to theGoogle API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for targeted advertising, or use it to train generalized artificial intelligence or machine learning models.

3. How we use information

• Provide authentication, buyer and supplier discovery, contact management, and outreach workflows.
• Send emails and attachments that you review and initiate through a connected mailbox.
• Maintain account permissions, credits, security controls, and user-specific data isolation.
• Provide support, investigate errors, prevent abuse, and protect users and the Services.
• Generate or refine content when you intentionally use an AI-assisted feature.
• Comply with legal obligations and enforce our Terms of Service.

4. How we disclose information

We disclose information only as needed for the following purposes:

• Service providers. Infrastructure, database, storage, authentication, email, AI, trade-data, and contact-enrichment providers process limited information to perform services for Portaxo.
• User-directed delivery. Email content and attachments are disclosed to the recipients you select when you launch a sequence.
• Legal and safety. We may disclose information when reasonably necessary to comply with law, respond to valid legal process, protect rights and safety, or prevent fraud and abuse.
• Business transfers. Information may be transferred as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate safeguards.

We do not sell personal information.

5. Data retention

We retain information for as long as reasonably necessary to provide the Services, maintain security and audit records, resolve disputes, and comply with legal obligations. Retention periods vary by data type. Short-lived activity records may be automatically deleted, while account, sequence, and transaction records may be retained until the account or record is deleted.

6. Security

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, encryption of connected-mailbox tokens, password hashing, encrypted network transport, and user-level data isolation. No system is completely secure, and we cannot guarantee absolute security.

7. Your choices and requests

You may:

• Update available profile and security settings in your account.
• Disconnect a connected Gmail account and revoke Google authorization.
• Delete user-created contacts, media, drafts, and other records where the Services provide that control.
• Request access, correction, export, or deletion of your personal information by contacting us.

We may need to verify your identity before completing a request. Some information may be retained when required by law or for legitimate security, fraud-prevention, or recordkeeping purposes.

8. International processing

Portaxo and its service providers may process information in the United States and other countries. Where required, we use appropriate safeguards for cross-border transfers.

9. Children's privacy

The Services are designed for businesses and are not directed to children under 18. We do not knowingly collect personal information from children.

10. Changes to this policy

We may update this Privacy Policy as the Services evolve. We will post the updated policy here and revise the effective date. We will provide additional notice when required by law.

11. Contact us

For privacy questions or requests, contacthello@portaxo.com.