LEGAL

Privacy Policy

This policy explains what data Primeportal collects, why we collect it, and how we protect it.

Last updated April 27, 2026

1. Who we are

Primeportal is a Brand Operations System that helps teams structure, use and improve brand context across projects, Marshi, Brand Studio, SoMe and Brand Site surfaces.

Questions about privacy can be sent to legal@primeportal.no.

2. Data we process

  • Account data, such as name, email, authentication state and workspace membership.
  • Workspace and billing context, such as tenant, role, plan and subscription status.
  • Brand and project data that users add to Primeportal, including brand profiles, assets, drafts, instructions and feedback.
  • AI inputs and outputs, such as prompts, generated content, reviews, job results and usage metadata.
  • Operational data, such as audit events, security logs, error events, request metadata and product usage signals.

3. Why we process data

  • To provide the Primeportal product and keep each workspace tenant-safe.
  • To authenticate users, enforce roles and permissions, and protect accounts.
  • To make Marshi and AI-powered workflows brand-aware and useful.
  • To measure product reliability, usage, abuse patterns and performance.
  • To support billing, customer communication, legal obligations and security operations.

4. AI processing

Primeportal uses AI providers to process prompts, brand context, uploaded/source material and generated outputs when users ask Marshi or a module to perform an AI-assisted task. Users should avoid submitting sensitive personal data unless it is necessary for their intended use.

Primeportal is designed around data minimisation: AI jobs should receive the context needed for the task, not an unrestricted copy of the workspace.

5. Subprocessors and infrastructure

Primeportal relies on trusted service providers for hosting, database, authentication, storage, email, billing, analytics and AI. This currently includes Vercel, Supabase, OpenAI, Stripe and Resend where those services are enabled for your workspace or environment.

6. Analytics, cookies and logs

Primeportal may use product analytics and Vercel Web Analytics to understand usage and improve reliability. Authentication, locale, theme and security flows may use cookies or similar browser storage. See the Cookie Notice for more detail.

7. Retention and deletion

Customer content is retained while the workspace is active, unless it is deleted earlier by the customer or removed through support. Operational logs, audit events and backups may be retained for a limited period for security, compliance and recovery purposes.

8. Your rights

Depending on where you are located, you may have rights to access, correct, export, delete or restrict processing of personal data. Workspace owners can also request assistance through legal@primeportal.no.