Privacy notice

Who is responsible for your data?

Porti, operating porti.ai, is responsible for the personal data described in this notice. You can contact us about privacy or exercise your data-protection rights at hello@porti.ai.

Data we collect and why

We collect only the information needed to operate the website and respond to you.

Expert applications. When you sign in with Google and apply, we receive your Google account email, Google account identifier and, where available, your display name. We also collect the name, primary domain and resume that you submit. We use this information to authenticate you, manage your application and assess whether there is a relevant opportunity to discuss.

Company inquiries. When you contact us, we collect your name, work email, company name if provided, and message. We use this information to understand your request and respond to it.

Confirmation emails. After an application or inquiry is received, we use your email address to send a transactional confirmation. These messages are not marketing emails.

Technical information. Our hosting and security systems may process limited technical information, such as IP address, browser information and server logs, to deliver the site, keep it secure and investigate faults or abuse.

Website usage. To see which pages and features are used, we record page views and interactions such as clicks, together with limited technical information like browser, approximate location derived from IP address, and the page you arrived from. This is measured without cookies or device storage and is not used to build a profile of you across visits.

Interviews: video, voice and transcript

If we invite you to an interview, the conversation is recorded. Three things are captured: video from your camera, audio of both voices, and a written transcript of what was said.

Why we record it. A reviewer at Porti watches and reads the interview to assess your expertise. We record so that judgement rests on the conversation itself rather than on notes someone took during it.

Your consent is the basis. Nothing is captured until you tick the consent box on the screen before the interview. We store the date you agreed and the version of this notice you were shown. You can withdraw at any time — see below.

Who sees it. The Porti team reviewing your application. We do not sell it, we do not use it to train models, and it is not shared with the companies we work with unless you ask us to.

You are talking to an AI, and a person decides

The interviewer in a Porti interview is an AI. It asks the questions and follows up on your answers. It does not score you and it does not decide anything.

Every interview is reviewed by a person at Porti before any decision is made. No decision about you is made automatically, and we do not profile you to reach one.

We tell you this because the EU AI Act treats recruitment as high-risk and requires it. We would rather you knew regardless.

How long we keep an interview, and how to delete it

Interview video and transcripts are deleted automatically on a fixed schedule once they are no longer needed to assess your application. A scheduled job enforces this — it does not depend on anyone remembering.

Deleting it sooner. Open your invitation link and choose Delete my interview. The video, the audio and the transcript all go, and you do not have to give a reason. If you can no longer sign in, email hello@porti.ai from the address you applied with and we will do it for you.

Withdrawing consent. Deleting the interview withdraws your consent to it. Your application itself stays unless you ask us to remove that too.

Legal bases

Where the GDPR applies, we process your information to take steps at your request before a potential working relationship, to respond to your inquiry, and for our legitimate interests in operating a secure, reliable expert network. We may also process information where necessary to comply with a legal obligation or to establish, exercise or defend legal claims. For interview recordings specifically, our legal basis is your consent, which you give before the interview starts and can withdraw at any time.

How information is shared

We do not sell personal data. We share information only where it is needed to run Porti, including with Google for sign-in, Resend for transactional email delivery, PostHog for website analytics, and infrastructure, database and file-storage providers that host the service on our behalf. These providers may process data only to provide their services to us and under appropriate contractual safeguards.

We may disclose information where required by law or where it is necessary to protect Porti, our users, or others from fraud, misuse or security threats.

Storage, security and retention

Applications, inquiries and resumes are stored in access-controlled systems. Resumes are not publicly available on the website and can be accessed only by authorised Porti administrators.

Porti stores its data in the European Union. Deleted resumes and our database backups are also removed automatically after a short recovery period.

We keep personal data for as long as it is needed for the purpose for which it was collected, including evaluating an application, responding to an inquiry, maintaining necessary records, and meeting legal obligations. We will delete or anonymise data when it is no longer needed, unless a longer retention period is required or permitted by law.

Cookies and similar technologies

Porti uses essential cookies needed for sign-in and session security. We also use PostHog, a product-analytics tool, to understand how the website is used. It is configured without cookies or any other storage on your device, so no identifier follows you between visits. We do not use advertising cookies. Your browser may let you block or delete cookies, although doing so can prevent Google sign-in from working correctly.

Your rights

Depending on applicable law, you may have the right to request access to your personal data, correction of inaccurate data, deletion, restriction of processing, portability, or to object to certain processing. You may also complain to your local data protection authority.

To make a request, email hello@porti.ai from the address connected to your submission. We may need to verify your identity before responding.

Automated decisions and children

Porti does not make decisions that produce legal or similarly significant effects about you solely through automated processing on this website. Our services are not directed at children, and we do not knowingly collect personal data from people under 18.

Changes to this notice

We may update this notice as Porti develops or our data practices change. The current version will always be available on this page.