This Privacy Policy describes how Blue Harbour (“Blue Harbour,” “we,” “us,” or “our”), the operator of Portal AI (the “Service”), collects, uses, discloses, and protects information in connection with the Portal AI website and dashboard.
If you have questions about this Policy, contact us at info@blueharbour.io.
1. Scope of This Policy
This Policy applies to anyone who visits our website or uses the Portal AI dashboard, including individuals signing up on behalf of an institution (“you”).
Portal AI is an AI-powered natural-language data querying service that integrates with an institution’s portal (a “Portal”). Portal AI processes and interprets the natural-language queries it receives, translates the user’s criteria into structured data queries, queries the Portal’s underlying database, and displays the records that meet those criteria on the Portal. In the course of providing this Service, we process certain information contained in an institution’s own records and search queries on behalf of, and under the direction of, that institution. With respect to that data, we act only as a service provider. The institution — not Blue Harbour — is responsible for that data and for its own privacy practices toward the individuals whose information appears in its records. This Policy does not describe, and is not intended to satisfy, an institution’s own privacy obligations to those individuals.
Portal AI accesses an institution’s connected database on a read-only basis. We query that database to answer natural-language queries submitted through the Portal; we do not write to, modify, or delete any record it contains.
2. Information We Collect
2.1 Information You Provide Directly
When you sign up for or use the dashboard, we collect:
- Institution name, institution type, portal type, and country
- Your organizational email address
- Your password (stored in hashed form; we never store or can retrieve your plaintext password)
- Any information you submit through support or help requests
2.2 Information Collected Automatically
When you visit our website or use the dashboard, we automatically collect certain technical information, including:
- IP address, browser type, device type, and operating system
- Pages visited, time spent, and navigation patterns
- Cookie identifiers and similar technical data (see Section 4)
We use third-party analytics providers to collect this information and better understand how our Service is used.
2.3 Information Processed on Behalf of Institutions
As part of operating an institution’s Portal, we process:
- Natural-language search queries submitted through the Portal
- Records and fields from the institution’s own connected database that are relevant to answering those queries
- Metadata about each query, such as timestamp, originating URL, and processing time
We use a third-party AI language-processing providerto interpret the natural-language search queries submitted through a Portal, so that query text may be transmitted to that provider for that limited purpose. We do not disclose the specific technical methods we use to interpret or map an institution’s database structure, as these are proprietary to Blue Harbour.
As explained in Section 1, this data belongs to and is controlled by the institution. We process it only as necessary to provide the Service to that institution and do not use it for any other purpose, including advertising.
2.4 Payment Information
We use a third-party payment processor to process payments. When you provide payment information, it is collected and processed directly by that payment processor. We do not store full payment card numbers on our own systems.
3. How We Use Information
We use the information described above to:
- Create and manage your account
- Provide, operate, and maintain the Service
- Process payments and manage billing
- Interpret and respond to search queries submitted through an institution’s Portal
- Monitor, secure, and improve the Service
- Communicate with you about your account or support requests
- Comply with legal obligations
4. Cookies and Tracking Technologies
We use cookies and similar technologies for:
- Authentication — to keep you signed in to the dashboard
- Preferences — to remember settings such as your light/dark mode selection
- Analytics — our analytics providers use cookies to help us understand usage of the Service
You can control cookies through your browser settings. Disabling certain cookies may affect your ability to use parts of the Service, such as staying signed in.
5. How We Share Information
We do not sell your information. We share information with the following categories of third-party service providers, each of which processes information only as necessary to provide their service to us:
- Infrastructure and hosting providers — to operate, host, and secure the Service
- Payment processors — to process billing and payments
- AI language-processing providers — to interpret natural-language queries submitted through a Portal
- Analytics providers — to help us understand usage of the Service
We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets.
6. Data Retention
We retain account and dashboard data for as long as your account remains active. If you request deletion of your account, we will delete your account data within 30 days of that request, except where we are required to retain certain information for legal, security, or fraud-prevention purposes.
Data processed on behalf of an institution (Section 2.3) is retained in accordance with that institution’s instructions and the terms of our agreement with the institution.
7. International Data Transfers
Your information may be stored and processed in countries where ourservice providers operate. By using the Service, you understand that your information may be transferred to countries that may have different data protection laws than your country of residence.
8. Data Security
We use reasonable administrative, technical, and physical safeguards to protect information, including encryption of stored database credentials and rate-limiting protections against abuse. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
9. Your Rights and Choices
Depending on your location, you may have rights to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your account and associated data
- Object to or restrict certain processing
To exercise any of these rights, contact us at info@blueharbour.io. We will respond within a reasonable time.
If your information appears in an institution’s records because you interacted with that institution (rather than because you have a Portal AI account yourself), please contact that institution directly, as described in Section 1.
10. Children’s Privacy
The Service is not directed to, and we do not knowingly collect personal information from, individuals under the age of 13. If we learn that we have collected personal information from someone under 13, we will delete that information.
11. Changes to This Policy
We may update this Policy from time to time. If we make material changes, we will update the “Last Updated” date above and, where appropriate, provide additional notice.
12. Contact Us
If you have questions about this Privacy Policy, contact us at:
Email: info@blueharbour.io