Privacy
ProductPorter handles other businesses’ buying records, which is about as sensitive as back-office data gets. This page says plainly what we store, where it lives, who else touches it, and how long we keep it.
Last updated 4 September 2026
What we store
Everything below belongs to your business. We hold it so the software can do its job.
- The documents you send us. Vendor invoices, purchase orders and packing slips, exactly as you sent them, whether that was a PDF, an email attachment or a photograph.
- What we read out of them. Line items, styles, colours, sizes, pack quantities, unit costs, freight, barcodes and the purchase orders they reconcile against.
- Your inventory and sales figures, synced from your store: stock levels by location, movements, and units sold per week for sell-through reporting.
- Your vendors’ business contact details, such as company name and the email address an invoice arrived from, so documents can be matched to the right supplier.
- Accounts for the people you give access to. Name, email address, a hashed password, role, and session records.
- Where to reach you. The intake address documents may be sent to, and whichever notification channels you switch on.
- Operational logs. Which alerts were sent, which edits were made and by whom, and questions asked of the in-product help.
What we do not store
Nothing about your retail customers. ProductPorter never receives shopper names, email addresses, shipping addresses or order histories. It works on the buying side of your business, not the selling side. There is no table in our database for customer records because the software has no use for one.
We also never see payment card details. Your store handles those, and they do not pass through us.
How your documents are read
Reading a vendor invoice is done with AI. The documents you send us, including their images, are transmitted to a third-party AI provider for processing. We think that is worth stating plainly rather than burying, because it is the part of the system most people would want to know about.
Two commitments hold no matter which provider we use:
- Your data is never used to train anyone’s models. We use commercial API tiers where that is the contractual default, and we do not opt in to any feedback or product-improvement programme that would change it.
- No provider gets any right to your data beyond processing the request in front of it. Not for analytics, not for their own product development, not for resale.
Today that provider is Anthropic, whose Claude API does the extraction. Anthropic states that data submitted through its commercial API is not used to train its models by default. If we ever add or change providers, the list below changes with it, and any new provider has to meet both commitments above before we send it anything.
Where it lives
On a private server in Manassas, Virginia, and in Cloudflare R2 object storage in the same region. Documents are stored in R2; structured records live in a PostgreSQL database on the server. Everything travels over TLS.
Your store’s API credentials are encrypted at rest with AES-256-GCM. Passwords are hashed, never stored in a readable form. Each business’s data is walled off from every other business’s at the query level, and that isolation is verified by an automated test suite rather than by good intentions.
Who else touches it
These are the services involved in running ProductPorter, current as of the date above. Some are optional and only apply if you switch them on. We keep this list accurate as the services change.
- Anthropic is our current AI provider, and reads your documents to extract their contents.
- Cloudflare stores documents and backups, and serves this website.
- netcup provides the server the software runs on.
- Resend delivers our email and receives documents sent to your intake address.
- Shopify is your own store, connected by you, using credentials you supply.
- Slack, Telegram, web push and Twilio deliver notifications, if you enable them.
We do not sell your data, share it with advertisers, or use it to train anything of our own.
How long we keep it
Your business records and documents are kept for as long as your account is active, because they are the record of what you bought and what it cost. There is currently no automatic expiry on stored documents.
Backups are taken daily and deleted after thirty days.
Getting your data out, and getting it deleted
Your records are yours. Ask and we will export them for you, including the original documents. Ask us to delete your account and we will delete your records and documents, and deactivate the intake address so mail sent to it stops being accepted. Backups containing your data age out within thirty days of deletion.
Asking us anything
Questions about any of this, or a request to see, export or delete what we hold, go to .