In short
We collect what we need to run Porro and nothing else. Your data is stored in London. We don’t sell it, we don’t use it for advertising, and our marketing site uses cookieless analytics. The connector never sends content, customer data or secrets from your sites.
01
Who we are
Porro is run by 1994 Limited, registered in England and Wales (company number 13301586), at [ADDRESS]. For the personal data described in section 2 we are the controller. For personal data you put into Porro about other people, such as your clients’ contacts, we are your processor (section 7).
Contact us about privacy at [email protected]. [ICO registration number: ZXXXXXXX]
02
What we collect
Your account
- Name, email address and password (stored only as a hash).
- Two-factor secrets, recovery codes and passkeys, so you can sign in securely.
- Your workspace name and logo, your role and who invited you.
Using Porro
- Sign-in sessions: IP address, browser and when you were last active.
- An audit log of important actions in your workspace (who did it, when, and the IP address).
- Integrations you connect (Slack, GitHub, GitLab, Bitbucket, Forge, Ploi, Laravel Cloud): the account name and an access token, encrypted at rest.
Your sites
- Site URLs, repositories and the hosts they’re on.
- Check results (response times, status codes, certificates, domain records).
- Connector reports: framework, PHP and package versions, and health facts. Never content, entries, customer or user data, environment values or secrets. See What leaves a site for the full list.
Billing
- Your plan and billing history. Card details go straight to Stripe. We only hold a Stripe customer reference.
Our public site and tools
- If you join the digest, set a lock-file alert or send an Enterprise enquiry: your email address, and whatever else you put in the form.
- Cookieless, aggregate visit counts from Plausible. No profile of you is built.
03
Why we use it, and our legal basis
| What we do | Legal basis |
|---|---|
| Run your account and workspace, run checks, send alerts and reports | Contract |
| Keep Porro secure: two-factor sign-in, rate limits, audit log, fraud prevention | Legitimate interests |
| Take payment and keep tax records | Contract and legal obligation |
| Tell you about changes to the service, your trial, your bill or your data | Contract |
| Send the weekly digest or a lock-file alert you signed up for | Consent (unsubscribe in every email) |
| Reply to an enquiry | Legitimate interests |
| Count visits to our marketing site | Legitimate interests |
| Find and fix errors in Porro | Legitimate interests |
We don’t sell personal data, we don’t use it for advertising and we don’t make automated decisions about you that have legal or similar effects.
05
International transfers
Porro’s data is stored in the UK. Some of the services above are based in, or reach, the US or other countries. Where that happens we rely on UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, or the UK International Data Transfer Addendum, so your data has the same protection.
06
How long we keep it
| Data | Kept for |
|---|---|
| Raw check results | 2 days |
| Check history and audit log | Your plan’s history: 30 days, 13 months or 25 months |
| A stopped workspace (cancelled, unpaid or trial ended) | 90 days, then deleted. We email owners and admins 30 and 7 days before |
| A workspace you delete yourself | Deleted straight away |
| Sign-in sessions | 2 hours of inactivity |
| Pending invitations | Until they expire |
| Unconfirmed digest or lock-file alert sign-ups | 7 days |
| Lock-file checker share links | 30 days |
| Billing records | 6 years, as UK tax law requires |
| Backups | Rolled off on our hosting provider’s backup schedule |
07
Data you put in about other people
When you add your clients’ contacts, report recipients or alert addresses, you decide what’s collected and why. We process it only to send the emails and reports you set up, and only on your instructions. As your processor we:
- only process it on your documented instructions;
- make sure our staff are bound by confidentiality;
- keep it secure, as described on our Security page;
- only use the services listed in section 4, and tell you before adding new ones;
- help you answer requests from those people and meet your own obligations;
- tell you without undue delay if there’s a breach affecting it;
- delete it when you delete it, or when your workspace is deleted;
- give you the information you need to show you’re complying, and allow reasonable audits.
Enterprise customers can sign a separate Data Processing Agreement.
08
Security
Two-factor sign-in for every member, tokens encrypted at rest, connector reports signed with Ed25519 and rejected if altered or replayed, and connectors that only ever send. Full detail is on our Security page. Found something? Email [email protected].
09
Your rights
You can ask us to:
- give you a copy of your personal data;
- correct it;
- delete it;
- restrict or object to how we use it;
- send it to you or another service in a portable format;
- stop using it for something you consented to.
Email [email protected]. We’ll reply within a month. If your data is in a workspace someone else controls, such as an agency that sends you reports, we’ll pass your request to them.
If you’re unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner’s Office at ico.org.uk.
11
Children
Porro is a business tool and isn’t meant for anyone under 18.
12
Changes
If we change this policy in a way that matters, we’ll email workspace owners before it applies. The date at the top always shows the latest version.