Powered by eniston
  1. Overview
  2. General
  3. Privacy Overview

Privacy Overview

At Portal, we are committed to protecting your data while ensuring seamless integration with third-party systems. Our approach to privacy and security is built on transparency, industry best practices, and secure data handling.

1. Data Collection & Processing

  • What data does Portal process?
    Portal only processes HubSpot data when triggered by user actions. Specifically, data is processed when an object (Contact, Deal, Company, or Ticket) is viewed in HubSpot where the Portal app is installed or when a user takes action within the Portal widget on HubSpot.

  • Does Portal store any data?

    • Stored Data

      • Basic user information - first name, last name, email.

      • Workflow metadata - mapping between HubSpot data and user input.

      • Signup form details - name, company name, region, industry, company size.

    • Not Stored: HubSpot data itself is not stored—only processed as part of integrations.

  • How is data transmitted?
    All data transfers use secure HTTP (HTTPS) protocols, and requests from HubSpot are signed and verified following HubSpot's authentication guidelines.

2. Data Security & Compliance

  • Security Measures:

    • Authentication: OAuth2 (Google)

    • Authorization: JWT signed with HS256 algorithm

  • Regulatory Compliance:

    • While Portal is not currently certified under GDPR, CCPA, or SOC 2, we adhere to industry best practices for data protection, encryption, and security.

  • Access to Data:

    • Only internal team members have access to stored data.

    • Hosting: Data is hosted on Railway (USA).

    • Analytics: Portal uses Google Analytics, but no personal or business data is collected or shared.

3. Data Sharing & Third-Party Services

  • Does Portal share data with third parties?
    No. However, Portal integrates with third-party services for functionality:

    • HubSpot – Data is fetched via HubSpot cards.

    • Railway – Used for secure hosting.

  • Data Processing Agreements (DPAs):

4. Data Retention & Deletion

  • How long is data retained?

    • Since Portal is in closed beta, data is retained indefinitely until policies are updated.

  • What happens if a customer disconnects HubSpot?

    • Data is not automatically deleted, but users can request deletion at any time.

  • How to request data deletion?

    • Users can email support@portal.link to request deletion of any stored data.

5. Customer Control & Transparency

  • Can users control what data is processed?

    • Yes, users can select which HubSpot objects (Contacts, Deals, Companies, Tickets) to process.

    • Users can define specific properties/fields to be used within their workflow configuration.

  • Can users request logs or reports on data usage?

    • No, data usage logs are not currently available.

  • Privacy inquiries: Users can email support@portal.link for any privacy-related concerns.

6. Legal & Compliance

  • Data Hosting Location: Railway (USA).

  • Incident Response & Support:

    • Privacy-related inquiries will receive a response within 7 business days.

For urgent privacy concerns, users can contact Tal Abziz, CTO, at tal@portal.link.

Portal © 2025