Data processing
Data Processing Addendum
These Early Access processing terms explain how Portaviq handles customer-controlled WordPress site and activity data. They are practical public terms and should be reviewed before relying on them as a signed legal agreement.
Roles
Portaviq has different roles depending on the data involved.
- For Early Access requests, account access, support, and security records, Portaviq generally acts as an independent controller.
- For organization records, site records, plugin heartbeat, and pageview activity submitted by a customer for managed sites, Portaviq generally acts as a processor or service provider on the customer's instructions.
- The customer remains responsible for site-owner, client, visitor, and legal notices needed for each connected WordPress site.
Customer instructions
Portaviq processes customer-controlled data to provide the service.
- Verify plugin connections and maintain site setup status.
- Receive plugin heartbeat and technical environment signals.
- Receive lightweight pageview activity when tracking is enabled.
- Provide dashboards, site summaries, support, security, and abuse prevention.
Data categories
The current Early Access product intentionally avoids unnecessary sensitive data.
- Account and contact data: email address, name, company, website, role, and feedback details when submitted.
- Customer workspace data: organization names, site names, WordPress site URLs, optional wp-admin URLs, setup status, and timestamps.
- Plugin data: public site ID, site URL, plugin version, WordPress version, PHP version, active theme, timestamps, and signatures.
- Activity data: page URL/path, page title, referrer, occurrence time, user agent, and basic request metadata.
- Security data: hashed OTP/session records, rate-limit records, and limited request metadata.
Subprocessors and transfers
Portaviq uses a small provider set for infrastructure and transactional email.
Current subprocessors are listed on the subprocessors page. If data is processed outside the customer's country or region, Portaviq should rely on appropriate contractual and provider safeguards for the relevant deployment.
Review subprocessorsDeletion and assistance
Customers can request deletion or assistance with data-rights requests.
During Early Access, Portaviq will use reasonable efforts to help customers access, correct, export, or delete account and workspace data. Some operational records may be retained for a limited period where needed for security, abuse prevention, or legal reasons.
Security measures
Current technical and organizational measures are described in the security disclosure.