Last updated: August 21, 2026
This document describes our current practices in plain language. It is not legal advice.
portablemind is operated by Portablemind LLC, 901 Johns Point, Oakland, FL 34787. You can reach us using the details on our contact page.
We collect the following, and nothing beyond what the service needs to work:
We use this information to provide and operate the service, authenticate you, process payments, enforce quotas and usage limits, diagnose problems, keep the platform secure, and respond when you contact us. We do not sell personal information, and nothing you put into the product — your content, your files, your messages — is ever used for advertising.
Our public marketing website does carry advertising and measurement tags, which California law treats as sharing personal information for cross-context behavioural advertising. The section on advertising below sets out exactly what runs there, what does not run in the application, and how to opt out.
Using an AI feature sends the relevant content to the model provider that serves it, so that it can generate a response. Those providers process it on our behalf as subprocessors: Anthropic, OpenAI, Google, Amazon Web Services (Bedrock), and xAI. Which one receives a given request depends on the model selected for your organization.
Your content is not used to train any model — not ours, and not our providers'. It is sent for the sole purpose of serving your request and returning a result.
Where a model runs locally on infrastructure we operate, content is not sent to a third party at all.
Portablemind's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Google Workspace user data that you choose to connect to Portablemind — such as read-only access to your calendar events — is used solely to provide user-facing features you request: for example, letting your assistant read your upcoming events into a conversation you control. We do not use Google user data — raw, aggregated, or derived — to create, train, or improve any machine-learning or artificial-intelligence models, whether foundational, generalized, or otherwise, and our AI model providers are contractually prohibited from training on it (see the section above). Google user data is never sold, is never used for advertising, and is transferred only as necessary to provide these features, for security purposes, or to comply with applicable law. You can disconnect Google at any time, which revokes our access.
Beyond the AI providers above, we rely on a small set of service providers, each acting on our instructions:
We may also disclose information where we are legally required to, or where it is necessary to protect the rights, safety, or property of our users or of Portablemind LLC.
We advertise portablemind on Google, LinkedIn, and Meta, and we measure whether those campaigns work. All of that happens on our public marketing website — portablemind.ai and www.portablemind.ai — and nowhere else. The platforms we use for it:
If we add another advertising platform, we will add it to this list and to the sharing list above.
None of this runs in the application. app.portablemind.ai carries no advertising code of any kind — no pixels, no ad-platform tags, no third-party trackers — and the platforms named above never receive your content, your files, your messages, or anything else you or your team put into portablemind. The separation is deliberate and enforced by our security policy, not left to configuration.
You can block these tags with your browser's privacy settings or any standard content blocker, and nothing about the product stops working if you do. You can also write to us and ask that we stop sharing your information for advertising, and we will act on it.
Our web application keeps your session token in your browser's local storage rather than in a tracking cookie, and sets no advertising cookies at all. Our public marketing website sets analytics and advertising cookies, as described above. You can block them through your browser settings or a content blocker without losing access to the product.
We keep your account information and content for as long as your account is active. When an account or organization is closed, we delete or anonymize its data within a reasonable period, except where we are required to retain records for legal, tax, or accounting purposes. Backups are retained on a rolling basis and age out on their own schedule.
Credentials and integration secrets are encrypted at rest with authenticated encryption and kept apart from ordinary data. Traffic is encrypted in transit with TLS. API keys and reset codes are stored only as one-way digests and shown once. Each organization is isolated with its own signing keys, access is capability-based and least-privilege, and access decisions are recorded in a tamper-evident audit trail.
No system is perfectly secure, and we do not claim otherwise — but these controls are engineered rather than aspirational. Our security brief describes them in detail.
If you are a California resident, the CCPA (as amended by the CPRA) gives you the right to know what personal information we have collected about you, to request its deletion, to request correction of inaccurate information, and to receive a portable copy. We do not sell personal information.
We do share personal information for cross-context behavioural advertising in one narrow respect: the advertising and measurement tags on our public marketing website, described above. You have the right to opt out of that sharing. You can do so by blocking those tags in your browser or with a content blocker, or by contacting us and asking us to stop — either way, we will honour it. Nothing you put into the product is shared for advertising under any circumstances. We will not discriminate against you for exercising any of these rights.
To make a request, contact us using the details on our contact page. We will verify your identity before acting on it.
portablemind is a business product and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.
We will update this page when our practices change, and revise the date at the top. If a change materially affects how we handle your information, we will make a point of telling you rather than relying on you to notice.
Questions about this policy, or about the information we hold on you, can go to hello@portablemind.ai.