This Privacy Policy explains how PortWall ("we", "us") handles personal information in connection with the portwall.net website and the PortWall Service. PortWall is a self-hosted product: the traffic it inspects and the logs it produces are processed on your own servers and stay under your control. This policy concerns the limited information we handle directly — for example, when you contact us, buy a plan, or use our website.
1. Who is responsible for your data
For information you provide to us directly, PortWall is the data controller. For traffic and security data processed by the Service on your infrastructure, you are the controller and PortWall does not act as a processor unless we have a separate written agreement (for example, when you engage us for managed services or share logs for support).
2. Information we collect
- Contact details you submit — such as your name, email, company and message — when you use our contact form or email us.
- Account and billing information if you purchase a plan, such as your organisation name, billing contact and payment references (card details are handled by our payment provider, not stored by us).
- Support information you choose to share with us, which may include configuration files or logs you send when requesting help.
- Website assistant questions — what you type into the assistant on portwall.net and in our customer portal and the answers it gives, together with your IP address and its approximate location (country, region and city). We keep them for 90 days to answer you, to stop abuse, to see where questions come from and to improve our documentation, then delete them. Please do not enter passwords, licence keys or other secrets.
- Website usage data such as basic, aggregated analytics and server logs (for example, IP address and browser type) needed to operate and secure portwall.net.
3. How we use information
- To respond to your enquiries and provide the Service and support.
- To process orders, billing and account administration.
- To operate, secure and improve our website and the Service.
- To send service-related communications, and — only where permitted — occasional product updates you can opt out of.
- To comply with legal obligations and enforce our Terms and Acceptable Use Policy.
4. Legal basis
We process personal information where it is necessary to perform a contract with you, where you have consented, where we have a legitimate interest (such as securing our website), or where required by applicable law.
5. Sharing
We do not sell your personal information. We share it only with trusted service providers who help us operate — such as payment processing, email and hosting — under appropriate confidentiality and data-protection terms, or where required by law or to protect our rights. Questions you type into the website assistant are sent to our AI provider, Anthropic, to generate the answer. To protect every customer, each licensed PortWall server sends PortWall summaries of the addresses that attacked it: the attacking IP address, when and how often, and the kind of attack (for example SQL injection or password guessing). No visitor data, URLs, request contents or site names are sent, and private addresses and your allowlist are never sent. PortWall keeps these summaries for up to 90 days and uses them to build threat intelligence shared with other PortWall servers. You can stop contributing on the console's Herd Immunity page, and anyone can ask for an address to be reviewed or removed at [email protected].
6. Retention
We keep personal information only for as long as necessary for the purposes described above, to meet legal, accounting or reporting requirements, and to resolve disputes. When it is no longer needed, we delete or anonymise it.
7. Security
We use reasonable technical and organisational measures to protect the information we hold. No method of transmission or storage is completely secure, but we work to safeguard your information and to limit access to those who need it.
8. International transfers
We are based in the United Arab Emirates. Where information is transferred to or processed in other countries by us or our service providers, we take steps to ensure an appropriate level of protection consistent with applicable law.
9. Your rights
Subject to applicable law, you may request access to, correction of, or deletion of your personal information, and may object to or restrict certain processing. To exercise these rights, contact us at [email protected]. We may need to verify your identity before acting on a request.
10. Cookies
Our website uses only the cookies necessary to operate it and, where applicable, basic aggregated analytics. You can control cookies through your browser settings.
11. Children
Our website and Service are intended for businesses and are not directed to children. We do not knowingly collect personal information from children.
12. Changes
We may update this policy from time to time. The version published at portwall.net with the most recent "last updated" date applies. Material changes will be communicated where appropriate.
13. Contact
For privacy questions or requests, contact [email protected], or write to PortWall, Ajman Free Zone, Block A, Office A-1203, P.O. Box 16000, Ajman, United Arab Emirates.