Privacy Policy

Last updated 8 August 2026 · Pharoah Technology Ltd

Who we are

PortalForge is operated by Pharoah Technology Ltd, the data controller for this service. Questions, access requests or deletion requests: hello@attoh.digital.

There is no account

PortalForge has no sign-up, no password and no user database. You can build a portal without telling us who you are. If you buy a licence, that licence is a signed token your own browser stores — we do not keep a server-side account record tied to you.

What you type into the builder

To generate your portal, you give us business details — things like your business name, the services you offer, and your preferred tone. That input is:

• Sent to an AI provider to write the copy. Depending on how the service is configured, that is either our own AI gateway or OpenRouter, which routes the request to a large language model (currently models such as Meta Llama, DeepSeek or Google Gemini). Your input is processed by that provider under their own terms and privacy policy.
• Not stored by us as part of generation. The generated portal is returned to your browser for you to download; we do not keep a copy of your inputs or your generated page.

If no AI key is configured, the service falls back to a deterministic local template and your input never leaves our servers at all.

Please don't paste anything confidential or personal about your clients into the builder. It is a copywriting tool, and what you type goes to a third-party model.

The free daily limit

To keep the free tier usable, we count how many portals have been generated from your connection. That counter is keyed on your IP address and today's date and is used for nothing else — no profiling, no marketing, no linking it to anything you typed. It exists only to enforce the daily limit.

Document exchange

Where the secure document exchange is enabled by the operator, files uploaded to a portal are stored under keys scoped to that portal, and access is by a signed, portal-scoped link token — not a login. Anyone holding a valid token for a portal can list and download the files in it, so treat portal links as you would treat the documents themselves. The owner can delete files at any time. This feature is off unless it has been explicitly configured.

Payments

Payments are handled by Stripe on Stripe's own hosted checkout. We never see or store your card details. Stripe processes your payment information as its own controller under its privacy policy; we receive confirmation that a payment succeeded and which plan it was for.

Cookies, analytics and trackers

• We set no cookies on this site, and there are no analytics, advertising or social-media trackers.
• Your licence token, if you buy one, is kept in your own browser's storage. Clearing your browser data removes it.
• This policy page and the builder load nothing from a third party at all — system fonts, no external scripts. Our landing page does load its fonts from Google Fonts, which means Google's font server sees your device's IP address, as it would for any site using it.
• Stripe's checkout pages set their own cookies under Stripe's policy while you are on them.

Your rights

Under UK GDPR you can ask what we hold about you, ask for it to be corrected or deleted, and object to processing. Because there is no account and we don't retain your builder inputs, in most cases we simply hold nothing about you. Where we do — for example a payment record — email hello@attoh.digital and we will respond within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.

Changes

If this policy changes we will update this page and the date at the top.