PorterBack to home
Legal

Privacy Policy

Last updated · July 10, 2026

Porter Agents Inc. ("Porter," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our financial automation platform and services (the "Service").

By using Porter, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

1. Information We Collect

1.1 Information You Provide

  • Account information. When you create an account, we collect your name, email address, and company name. User authentication is handled through our identity provider; Porter does not store your password directly.
  • Payment information. If you subscribe to paid features, our payment processor collects billing information. We do not store complete credit card numbers.
  • Mobile phone and SMS consent information. If you enable SMS access, we collect your mobile phone number, SMS opt-in status, and SMS verification and consent records so Porter can verify the number, recognize inbound texts, and send service-related SMS messages.
  • Communications. If you contact us, we collect the information you provide in your communications.

1.2 Financial Data from QuickBooks Online

When you connect Porter to your QuickBooks Online account, we access and store the following data with your explicit authorization:

  • Company information
  • Chart of accounts
  • Transactions (invoices, bills, expenses, journal entries, etc.)
  • Customers and vendors
  • Bank account information and transactions
  • Financial reports and balances
  • Custom fields and tags

1.3 Automatically Collected

  • Usage data. We collect information about how you interact with Porter, including features used, pages viewed, time spent on the Service, and analytics/session telemetry.
  • Device information. We collect information about the device and browser you use, including IP address, browser type, and operating system.
  • Cookies. We use cookies and similar tracking technologies to improve your experience. You can control cookie preferences through your browser settings.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve Porter's financial automation services
  • Process and analyze your financial data to generate insights, reports, and recommendations
  • Sync data between Porter and your QuickBooks Online account
  • Identify and categorize transactions automatically
  • Detect anomalies and provide variance analysis
  • Send service-related notifications and updates
  • Send SMS messages you request or opt in to receive, including account, support, bookkeeping, finance workflow, receipt, document, and service-related messages
  • Respond to your requests and provide customer support
  • Monitor and analyze usage patterns to improve our Service
  • Detect, prevent, and address technical issues and security threats
  • Comply with legal obligations

3. AI Processing & Third-Party Services

3.1 AI-Powered Features

Porter uses artificial intelligence to analyze your financial data and provide insights. When you use AI-powered features:

  • Your financial data may be processed by third-party AI service providers, including OpenAI and Anthropic
  • Data is transmitted securely and used solely to provide the requested analysis and insights
  • AI providers are contractually prohibited from using your data to train their models or for any purpose other than providing services to Porter
  • Temporary OpenAI document-extraction files are deleted after extraction
  • No personally identifiable information is shared beyond what is necessary to process your requests

3.2 QuickBooks Online Integration

Porter integrates with QuickBooks Online through Intuit's official API:

  • We access your QuickBooks data only with your explicit OAuth 2.0 authorization
  • You may revoke Porter's future access to QuickBooks data through QuickBooks' App Management settings or by disconnecting within Porter. Previously ingested accounting history remains subject to Porter's retention and deletion policy.
  • We comply with Intuit's security requirements and developer terms of service
  • Your QuickBooks credentials are never stored by Porter

3.3 Other Third-Party Services

We may use additional third-party services for:

  • Payment processing (Stripe or similar)
  • Analytics, session telemetry, error monitoring, and website performance measurement
  • Email delivery
  • Cloud hosting and infrastructure

4. How We Share Your Information

We do not sell your personal or financial information. We may share your information only in the following circumstances:

SMS consent is not sold or shared for marketing. Porter does not sell, rent, or share mobile phone numbers, SMS opt-in data, or SMS consent with third parties or affiliates for marketing or promotional purposes.

4.1 With Your Consent

We may share your information when you explicitly authorize us to do so.

4.2 Service Providers

We share information with third-party service providers who perform services on our behalf, such as cloud hosting, AI providers, payment processors, analytics/session telemetry providers, error monitoring providers, and customer support tools. These providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.3 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities, including to comply with legal obligations, protect our rights, prevent wrongdoing, or protect the safety of users or the public.

4.4 Business Transfers

If Porter is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

5. Data Security

  • Encryption. Product traffic is encrypted in transit, managed providers provide platform encryption at rest, and sensitive integration credentials are encrypted by the application before persistence.
  • Access controls. Porter enforces company-scoped role-based access controls and authentication requirements for our systems.
  • Token storage. Third-party OAuth and API tokens are encrypted before persistence using an application-managed encryption key stored as a deployment-level environment secret. Disconnect and revocation behavior is provider-specific, and tokens are never exposed to the browser.
  • Secure infrastructure. Porter uses reputable cloud providers with recognized security attestations.
  • Security reviews. Porter performs recurring security reviews, targeted testing, access review, and vulnerability monitoring.

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

Porter retains active workspace data as needed to provide the Service. After workspace termination, primary accounting records and uploaded documents are retained for seven years by default unless the customer contract, legal hold, or applicable law requires a different period. Deletion requests are handled within 30 days, subject to those retention requirements and managed backup expiry.

7. Your Rights & Choices

7.1 Access & Correction

You have the right to access and update your personal information through your Porter account settings.

7.2 Data Portability

You can export your data from Porter at any time through our data export feature.

7.3 Deletion

You can request deletion of your account and associated data by contacting us at the email below. We will respond within 30 days, subject to contractual, legal, accounting-history, and managed-backup retention requirements.

7.4 QuickBooks Access

You may revoke Porter's future access to QuickBooks data through QuickBooks' App Management settings or by disconnecting within Porter. Previously ingested accounting history remains subject to Porter's retention and deletion policy.

7.5 Marketing Communications

You can opt out of marketing emails by clicking the "unsubscribe" link in any marketing email or by updating your communication preferences in your account.

7.6 SMS Communications

If you opt in to receive SMS messages from Porter, message frequency varies based on your requests and account activity. Message and data rates may apply. You can reply STOP to opt out or HELP for help. Opting out of SMS does not affect service emails or in-app notices that are necessary to provide Porter.

7.7 Cookies

You can control cookies through your browser settings. Disabling cookies may affect functionality.

8. Children's Privacy

Porter is not intended for use by individuals under 18. We do not knowingly collect personal information from children under 18. If we become aware that we have, we will take steps to delete it.

9. International Data Transfers

Porter is based in the United States. Your information may be transferred to and processed in the United States or other countries where our service providers operate. By using Porter, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules.

10. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

  • Right to know. Request information about the personal information we collect, use, and disclose.
  • Right to delete. Request deletion of your personal information.
  • Right to opt out. We do not sell personal information.
  • Right to non-discrimination. We will not discriminate against you for exercising your privacy rights.

11. European Privacy Rights

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including the rights to access, rectify, erase, restrict processing, port your data, object, and withdraw consent. Our legal basis for processing includes consent, contract, and legitimate interests.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy here, updating the "Last Updated" date, and emailing you for significant changes. Continued use after changes become effective constitutes acceptance.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Porter Agents Inc.
Email: privacy@buildwithporter.com
Mailing Address: New York, NY 10009, United States

We will respond to your inquiry within 30 days.

This Privacy Policy is effective as of the date stated above and applies to all users of Porter's services. Porter uses AI providers where product features require it. AI providers are contractually prohibited from using customer data to train their models, and temporary OpenAI document-extraction files are deleted after extraction. Porter uses analytics/session telemetry to operate and improve the product. Browser analytics and session-replay claims depend on live vendor masking, capture-scope, retention, and member-access settings.