Privacy Policy

Who we are

Portia is operated by Verity Systems Limited, a company registered in England and Wales (company number 16884817). Our registered address is 5th Floor, 167-169 Great Portland Street, London, W1W 5PF.

Verity Systems Limited is the data controller for the personal data described in this policy. If you have any questions about how we handle your data, or you want to exercise any of your rights, you can reach us at privacy@useportia.ai.

What data we collect

Now (pre-launch)

Portia is currently in pre-launch. The only personal data we collect at the moment is what you give us through the waitlist form:

• your email address;
• where you are in the legal process;
• the nature of your dispute;
• whether you currently have legal representation;
• anything else you choose to add.

At launch

When Portia launches, we will also collect the information you need to use the service: your account details (such as your name and email), and the documents and case information you upload. Because that involves handling sensitive material, we will update this policy with the full detail before document uploads are enabled.

Why we collect it, and our lawful basis

Waitlist

We use your waitlist information to manage early access and to tell you when Portia is ready. Our lawful basis is legitimate interest: we need to know who has signed up so we can give them access. If we ever want to send you marketing beyond launch notifications, we will ask for your explicit consent first.

At launch

When you use the service, we will process your account information and documents to provide Portia to you, on the basis of our contract with you and our legitimate interest in operating and improving the service. We will set this out in full before launch.

In all cases: we do not sell your data, we do not use it to train any AI model, and we do not share it with advertisers.

Who processes your data (sub-processors)

Now (pre-launch)

Waitlist form submissions are processed through Formspree, a third-party form-handling service based in the United States. This means your waitlist data is transferred internationally; Formspree processes it under its own privacy policy and under appropriate safeguards for international transfers.

At launch

When the service is live, a small number of named providers will process your data so that Portia can work. Each is bound by contract to process it only to deliver the service, and none of them use it to train their own models:

Supabase stores your documents and case data, in the EU (Ireland).

Anthropic provides the AI model that reads your documents to help organise and draft. It does not train on your data, or keep it after processing.

Voyage turns your documents into the searchable form Portia works from. It does not train on your data.

Clerk manages sign-in and your account. It handles your account details, not your document content.

Railway runs the software that powers the service.

Sentry receives technical error reports only, scrubbed so that your document content and personal details are not included.

We will keep this list current as our providers change.

How and where we store it

Now

Waitlist data is held through Formspree (United States), as above.

At launch

Your documents and account data will be stored in the UK and the EU (Ireland). Some processing, such as generating a draft, takes place through providers outside the UK and EU (see the list above), protected by standard data-protection safeguards for international transfers. Your documents will be encrypted in transit and at rest.

We take reasonable steps to keep your data secure. No system is perfectly secure, and we would rather say that plainly than pretend otherwise.

Cookies

The Portia website does not use tracking cookies, analytics cookies, or advertising cookies. We do not use Google Analytics or any similar service. If essential cookies become necessary for basic site functionality in future, we will update this section. For now, there is nothing to opt out of.

How long we keep it (retention)

Waitlist

We keep your waitlist data until Portia launches and you have been offered access, or until you ask us to delete it, whichever comes first. You can ask us to remove it at any time by emailing privacy@useportia.ai, and we will action it promptly.

At launch

For documents and case data, if a case goes quiet for a year, its documents are automatically deleted, so your data does not sit with us indefinitely. You will also be able to delete your documents yourself at any time.

Your rights (UK GDPR)

Under UK GDPR, you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate data;
• ask us to delete your data;
• restrict how we process your data;
• receive your data in a portable format;
• object to our processing of your data.

To exercise any of these, email privacy@useportia.ai. We will respond within one month, as UK GDPR requires. If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, atico.org.uk.

Changes to this policy

We may update this policy from time to time, for example when Portia launches and we begin processing documents. When we make changes, we will update the "last updated" date at the top of this page. If the changes are significant, in particular before we enable document uploads, we will notify waitlist members by email.