porlo

Safe to let into your product

You're giving Porlo access to your real app. Here's exactly how it behaves.

Your password stays with you

You sign in yourself, once, in a secure browser window, including single sign-on and two-step codes. Porlo keeps the signed-in session, encrypted, until you disconnect or it goes unused for 90 days. Your app decides how long you stay signed in; Porlo never sees or stores your password. A sign-in that's in use can last as long as your app allows. Disconnect it any time from the Team page.

Keep people's details out of videos

We recommend signing Porlo in to a shared demo account with sample data. Your videos then never show a real person's name or your customers' details.

Or let Porlo hide people's names, emails and profile pictures in videos from an account. You choose when you connect it. Porlo swaps in made-up names and initials in every frame, including re-recordings, and never changes what's saved in your app. You can change this later for each sign-in or each video.

What Porlo won't do

  • Notify anyone. It never sends emails, invites or notifications while recording, and unticks options like “notify followers” before saving.
  • Delete your data. It refuses actions like delete, remove, sign out, purchase and upgrade.
  • Reach your internal network. Its browser won't open private or internal addresses.

It cleans up after itself

Recording a task means doing it for real, once. Afterwards Porlo removes what it created, only what it can show it created, and tells you what it removed. You can turn this off.

Who can see your videos

Anyone with a video's link can watch it. Each video can be listed in search engines or kept unlisted. You set a default for your team and can change it for any video.

Your data

  • What we store: your encrypted app sign-ins, your videos and their versions, the steps each video was recorded from, small low-resolution pictures of the screens those steps use (to notice when your app changes), and a record of what Porlo did in your account. Nothing you type while signing in is ever recorded or stored.
  • Where: recording runs in London (Fly.io). Accounts are held in the US (Supabase). Videos are hosted by Mux, and AI is provided by Anthropic.
  • Deleting: delete your account and your sign-ins, videos and activity go with it.

Full details are in our privacy policy and [data processing agreement].

Report a security issue

Email [email protected]. We'll reply within two working days.

Your product will change next week. Your videos can keep up.

Start with a free trial. No card needed.