AskPortco Privacy Policy
Draft for review. Not legal advice. First draft for Preston's review, and for a lawyer's review before the first paid contract. Bracketed items are placeholders. Retention periods marked "proposed" need confirming. Open decision: whether AskPortco is presented as operated by EE Solutions.
Effective date: [EFFECTIVE DATE]
AskPortco is operated by [LEGAL ENTITY NAME], [MAILING ADDRESS]. Contact: [CONTACT EMAIL]. This policy covers askportco.com, the AskPortco connector, report-page chat, email Q&A, and our outreach emails. AskPortco is a business-to-business service for private equity professionals.
What we collect
| Data | Where it comes from | Why we use it |
|---|---|---|
| Business contact information: name, job title, firm, work email, LinkedIn profile URL | Compiled from publicly available sources, such as private equity firm websites and team pages, and business contact databases | To send relevant business outreach about AskPortco |
| Public information about portfolio companies: website performance, public DNS and security settings, detected technology, web archive history, public job postings | Public websites and public datasets (see "Outreach and public data" below) | To produce scorecards and answer questions. This is company data, not personal data. |
| Website usage: pages viewed, clicks, approximate location, device and browser | Google Analytics 4 and PostHog, on askportco.com and report pages | To understand how the site and reports are used, and to measure our outreach |
| Questions you ask, and our answers: through the connector, report-page chat or email to ask@askportco.com; plus technical logs (time, firm, tool used) | You | To answer you, keep the Service secure and within limits, improve answers, and understand what you're interested in so we can follow up |
| Booking details: name, email, role, firm, answers to booking questions | Cal.com, when you book a call | To schedule and prepare for the call |
| Billing details | Stripe, for paid services only. We don't store full card numbers. | To charge and invoice for paid services |
| Emails you send us | You | To respond |
How we share it
We don't sell personal information. We share it only with service providers that run the Service for us, under their own terms and security commitments:
- Cloudflare: hosting, DNS, the connector, email routing
- Supabase: database
- Google: Google Analytics, Search Console and Workspace email; also the PageSpeed and Chrome UX Report APIs, which we use only for company data
- PostHog: product analytics
- Resend: transactional email
- Instantly: outreach email sending
- Cal.com: call booking
- Stripe: payments
- Anthropic and OpenAI: AI models that draft answers to your questions, only when the Service uses them to answer you. [Confirm which providers are actually used at launch.]
We may also disclose information when required by law, to protect our rights or users, or as part of a merger or sale of the business.
AI and your questions
When you ask a question, the question and the relevant scorecard data are sent to an AI model provider to produce the answer. We don't use your questions to train AI models, and we use provider settings and terms under which your data is not used for their model training. [Confirm against each provider's current terms before launch.]
Outreach and public data
We compile publicly available business contact information for private equity professionals and email them about AskPortco.
Every outreach email identifies us, includes our mailing address, and has an unsubscribe link. Unsubscribe requests are honored within 10 business days, and usually much sooner, as the US CAN-SPAM Act requires. You can also email [CONTACT EMAIL] to ask that we delete your contact information and stop all outreach.
Scorecards use only public information collected passively. We don't log into, probe or test the security of any company's systems.
Retention (proposed)
| Data | Kept for |
|---|---|
| Outreach contact data | Until you unsubscribe or ask for deletion, or 24 months without engagement. Unsubscribed addresses are kept only on a do-not-contact list. |
| Questions and answers | 24 months, then deleted or anonymized |
| Technical logs | 90 days |
| Analytics data | Per GA4 and PostHog retention settings, at most 14 months |
| Booking and billing records | As long as needed for the relationship, and as required for tax and accounting |
Cookies
askportco.com and report pages use cookies and similar technologies for analytics (GA4 and PostHog) and to keep you signed in. You can block cookies in your browser; the site will still work, except for sign-in. [Add a cookie banner if we target regions that require consent.]
Security
We use access controls, encryption in transit, and per-firm access tokens, so each firm sees only its own data. We limit who on our team can access data. No system is perfectly secure. Report security issues to [CONTACT EMAIL] (see the Connector Data Policy).
Your choices
You can ask us to access, correct or delete your personal information, or to stop contacting you, by emailing [CONTACT EMAIL]. We will respond within 30 days. Depending on where you live, you may have additional rights under local law, and we will honor them as required.
Children
The Service is for business professionals and isn't directed at anyone under 18.
Changes
We will post updates here with a new effective date, and notify active users of material changes where practical.
Contact
[LEGAL ENTITY NAME], [MAILING ADDRESS], [CONTACT EMAIL]