Privacy Policy

Porthas Inc. ("Porthas," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Porthas Protect services.

1. Information We Collect

1.1 Personal Information You Provide

When you create an account or use our services, we may collect:

• Account Information: Name, email address, phone number, billing address, and payment information
• Identity Protection Data: Information you provide for identity monitoring, including name, addresses, Social Security Number (last 4 digits or full for credit monitoring), date of birth, and email addresses
• Family Member Information: Names and email addresses of family members added to your plan
• Privacy Removal Data: Personal information necessary to submit data broker removal requests on your behalf
• Support Communications: Messages and attachments you send to our support team

1.2 Information We Collect Automatically

• Device Information: Device type, operating system, browser type, IP address
• Usage Data: Features used, pages visited, actions taken within the service
• VPN Connection Data: Connection timestamps, server locations, bandwidth usage (we do NOT log your browsing activity or traffic)
• Backup Metadata: File names, sizes, and backup timestamps (we do NOT access your backed-up file contents)

1.3 Information from Third Parties

• Data Broker Scans: We search data broker websites to identify your exposed personal information
• Dark Web Monitoring: We monitor for compromised credentials associated with your email addresses
• Credit Monitoring Partners: If you enable credit monitoring, we receive alerts from our credit bureau partners

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our services
• Process your subscription and payments
• Submit data broker removal requests on your behalf
• Monitor for identity theft and alert you to potential threats
• Provide VPN services and manage your connection
• Perform backups and enable file restoration
• Send service notifications and security alerts
• Respond to your support inquiries
• Comply with legal obligations

3. How We Protect Your Information

We implement robust security measures to protect your data:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Zero-Knowledge Backup: Your backup encryption keys are derived from your password; we cannot access your backed-up files
• No-Log VPN: We do not log your VPN browsing activity, DNS queries, or traffic content
• PII Encryption: Sensitive personal information is encrypted with dedicated keys separate from general data
• Access Controls: Employee access to customer data is strictly limited and audited
• SOC 2 Type II: Our systems are independently audited for security compliance

4. Information Sharing

We do NOT sell your personal information. We may share information with:

• Service Providers: Third-party vendors who help us deliver services (payment processors, cloud hosting providers, identity monitoring partners)
• Data Brokers: We submit your information to data brokers solely to request removal of your records
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize us to share information

5. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Receive your data in a portable format
• Opt-Out: Opt out of marketing communications
• Restrict Processing: Limit how we use your data

To exercise these rights, contact us at privacy@porthas.com or through your account settings.

6. Data Retention

We retain your data as follows:

• Active Accounts: Data is retained while your subscription is active
• After Cancellation: Account data is deleted within 30 days; backup data within 90 days
• Legal Requirements: Some data may be retained longer to comply with legal obligations
• Audit Logs: Security logs are retained for 1 year

7. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

8. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your rights

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including standard contractual clauses, to protect your data during international transfers.

10. Cookies and Tracking

We use cookies and similar technologies for:

• Authentication and session management
• Remembering your preferences
• Analytics and service improvement

You can control cookies through your browser settings. Disabling cookies may affect service functionality.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the service. Your continued use after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions or to exercise your rights:

• Email: privacy@porthas.com
• Phone: +1 (844) 969-6683
• Mail: Porthas Inc., 39b Alpha Park, Cleveland, OH 44143