Privacy policy

Last updated [date]

Draft for legal review. This wording hasn't been checked by a lawyer yet.

Who we are

Porlo is run by [Porlo legal entity], [registered address] (“Porlo”, “we”). Porlo makes walkthrough videos of web apps and keeps them current. This policy explains what personal data we handle, why, and what you can do about it. Questions and requests go to [email protected].

Who this policy covers

• Visitors to porlo.co, this website.
• Customers and their teammates who have a Porlo account.
• Viewers who watch a Porlo video on porlo.video or in an embed on another site.
• People who contact us, by email or through our forms.

When Porlo records a customer's app, the recording can include personal data from that app, such as the names of the customer's staff or users. For that data we act on the customer's instructions, as their processor. The customer decides what is recorded, and our data processing agreement with them covers it. If you appear in a customer's video, please contact that customer first; we'll help them with your request.

What we collect and why

Visitors to porlo.co

We count visits with Cloudflare Web Analytics, which sets no cookies and stores nothing on your device. It tells us which pages are read, which site sent you, your country and your type of browser and device. We see totals, not individual visitors. Our lawful basis is our legitimate interest in understanding how the site is used.

Customers and teammates

• Your account: your email address, your team and your settings. We need these to provide the service you signed up for (performance of a contract).
• Sign-ins to your app: when you connect an app, you sign in yourself in a secure browser window. We keep the session that results, encrypted, on our servers in London, until you disconnect it or it goes unused for 90 days. Every recording, check or re-recording counts as use. We never see or store your password.
• Your videos: each video and its earlier versions, the steps it was recorded from (including any text Porlo typed for the video), captions, written steps, and notes Porlo writes about your app to record it well. We keep these until you delete them or your account.
• Checks: to notice when your app changes, Porlo keeps a small, low-resolution greyscale picture and an outline of the labels on each screen a video uses, plus a screenshot of the latest failed check.
• Hiding people's details: when you connect an app, you choose whether Porlo hides people's names, emails and profile pictures in videos from that account. Nothing you type while signing in is ever recorded or stored.
• What Porlo did: a record of the actions Porlo took in your account and how each recording went. We use it to run the service, fix problems and keep it secure (contract, and our legitimate interest in a reliable, secure service).
• Team activity: who on your team did what, for example who invited a teammate. It's shown to your team.

Viewers of Porlo videos

When you watch a video, we record that it was viewed: the time, whether it was watched on porlo.video or in an embed, and the website it was embedded on (the site's address only, not the full page). This lets the video's owner see how many people watch it. Our lawful basis is legitimate interest. [To match the launch build: how unique viewers are counted, and whether Mux's player analytics are on. The GDPR audit recommends counting without a cookie.]

People who contact us

If you email us or fill in a form, we keep your name, email, company and message so we can reply and follow up. Our lawful basis is legitimate interest, or taking steps at your request before a contract.

AI

To import a help center, write notes about your app and re-record videos that have stopped working, Porlo sends the structure of your app's pages, and sometimes screenshots, to Anthropic, which provides the AI. When you ask for a video from your own AI assistant, such as Claude, that conversation is covered by your assistant's own terms and privacy policy.

Cookies

• porlo.co sets no cookies.
• The Porlo app (app.porlo.co) uses cookies that are strictly necessary to keep you signed in and to accept a team invite.
• porlo.video [to match the launch build; see “Viewers of Porlo videos” above].

Who we share data with

We don't sell personal data or use it for advertising. We use these companies to run Porlo, under contracts that require them to protect it:

We may also share data if the law requires it, or with a buyer if Porlo is sold, under the same protections.

Transfers outside the UK and EU

Some of these companies are in the United States. Where data leaves the UK or the European Economic Area, we rely on the EU's standard contractual clauses with the UK addendum, or the EU–US Data Privacy Framework and its UK extension, as each company's terms provide.

How long we keep it

• App sign-in sessions: until you disconnect them, or after 90 days without use.
• Videos, their versions and steps: until you delete them or your account.
• Your account details: until you delete your account.
• View records: [13 months].
• Records of what Porlo did: [12 months].
• Team activity: [24 months].
• Messages from people who contact us: [24 months] after our last exchange.

When a trial ends or a plan is cancelled, videos stop being checked and their links keep working for 7 days.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, limit how we use it, or send it to you in a portable format. You can object to uses based on our legitimate interests. You can delete your account and everything in it yourself, from your account page. For anything else, email [email protected]; we'll reply within one month.

You can also complain to a data protection regulator: in the UK, the Information Commissioner's Office (ico.org.uk); in the EU, the authority where you live.

Security

App sign-ins are encrypted, and removed after 90 days without use or whenever you disconnect them. Porlo never handles your app passwords. While recording, Porlo refuses destructive actions and sends no emails or notifications. See Security and trust for more.

Children

Porlo is a business service and isn't meant for anyone under 16.

Changes to this policy

If we make an important change, we'll update the date above and tell account holders by email.

Contact

[Porlo legal entity], [registered address]. Email [email protected].