Privacy Policy

Last updated: 25 October 2026

This policy explains how [LEGAL ENTITY NAME] (“PortKnot”) handles personal data. Contact: [LEGAL CONTACT EMAIL].

Data we collect

Account data (name, email, password hash, verification state), workspace and billing data, project/campaign/lead data you upload, crawl results, AI prompts and drafts, send/reply metadata, support messages, and security logs. We do not store card details; Lemon Squeezy processes payments.

Purposes and lawful basis

We use data to provide the service, enforce limits and security, process payments, comply with law, and improve reliability. Depending on your location, bases include contract performance, legitimate interests, legal obligation, and consent where required.

Subprocessors

Cloudflare (hosting, D1, R2, Workers AI), Resend (email delivery and events), Lemon Squeezy (billing), Apify (external crawling), and our email/infrastructure providers. Each receives only what is needed for its function.

Retention

We retain account and workspace data while the account is active, then for a limited period for backups, disputes and legal obligations. Deletion requests are handled under the workspace deletion policy.

Security

Passwords are hashed, sessions are stored hashed, provider credentials are encrypted with AES-GCM, and access is workspace-scoped. No system is perfectly secure.

International transfers

Data may be processed in countries where our subprocessors operate, using appropriate safeguards where required.

Your rights

Subject to law, you may request access, correction, deletion, restriction, portability, or object to processing. You may complain to your local supervisory authority.

Cookies

We use essential cookies for authentication and CSRF protection. See the Cookies Policy. We do not currently use advertising or analytics cookies.

Children

The service is not intended for anyone under 18.

Placeholders must be completed and this document reviewed by a qualified lawyer before launch. This is not legal advice.