Last updated: October 15, 2026
1. Who this notice applies to
This notice explains information processed when you use Portunus by Eleantris, including the public planner, account, checklist, documents, support and Professional Handoff.
2. Information Portunus collects
Depending on how you use the service, this includes your account name and sign-in email; citizenship, residence, intended filing month and route; household configuration and optional household member names; work relationship labels and optional type, country, start month and applicant-reported income; checklist statuses, notes and professional-review flags; document metadata and uploaded files; activity events; support messages; and technical information needed to operate authentication, security and the service.
3. How information is used
Information is used to create and maintain your plan, generate organizational checklist prompts, associate documents with checklist items, provide your live handoff and PDF, secure account access, respond to support requests, and operate and protect Portunus.
4. Account and authentication information
Your name and email are associated with your account. Portunus uses passwordless one-time email codes. Codes are stored hashed, expire after five minutes and have limited verification attempts. Cloudflare Turnstile is used as an abuse-protection challenge before OTP send and resend; it is not identity verification.
Your sign-in email cannot currently be changed from Portunus. You may update your display name in Account settings.
5. Plan and household information
Your plan includes residence, citizenship, intended route and filing month, household composition and work arrangement. If you add household details, dependent roles and optional names are stored with your plan. The principal applicant name is taken from your account rather than duplicated.
6. Work and income information
Work relationship type, country, month started, and optional reported amount, currency, frequency and variability are provided by you. Income is not independently verified and is not used by Portunus to determine eligibility. Do not enter information you do not want included in your Professional Handoff.
7. Uploaded documents
Documents are associated with checklist items. Their metadata is stored in the application database and original file bytes are stored in non-public object storage. Authenticated, owner-scoped operations issue short-lived access URLs. Portunus preserves original bytes and does not claim to review or certify document contents. Malware scanning is not currently implemented.
8. Activity information
Portunus records selected account and preparation events to show recent activity. Household names and income values are not included in activity events. Activity entries are associated with your plan and removed when the account is deleted.
Portunus also uses PostHog EU Cloud to understand how people move through the planner and use core workspace actions. Product analytics uses explicit events rather than broad interaction capture. Its event properties do not include applicant names, email addresses, household names, citizenship or residence, income values, notes, filenames, document contents, storage identifiers, signed URLs, one-time codes, Turnstile values or authentication tokens. Before sign-in, PostHog uses its browser-generated identifier; after sign-in, events are associated with the opaque internal account ID, without name or email properties. The identity resets after successful sign-out. Session replay, automatic page capture, surveys and heatmaps are disabled. PostHog browser state is stored in first-party localStorage; Portunus does not add an analytics cookie. Standard connection metadata may be processed when the browser sends requests; Portunus does not add an IP address to event properties. Applicable consent and storage policy is subject to release review.
9. Feedback and support messages
If you submit feedback, the message and selected topic are sent to Portunus support through the configured email provider. Your sign-in email is included only if you give permission for contact. Messages may contain information you choose to write; avoid sending document contents, passwords, one-time codes or sensitive identifiers.
10. Service providers
Portunus uses service providers to deliver email, bot-abuse protection, database hosting, application hosting and private object storage. These providers process the information needed to provide their services. Current authentication email is delivered through Resend, Turnstile is provided by Cloudflare, and uploaded originals use AWS S3-compatible object storage. Product analytics is provided by PostHog EU Cloud. Provider locations depend on deployment configuration; the configured document storage region is selected by Portunus’s operator.
11. Security
Portunus uses server-side authentication, owner-scoped database operations, non-public object storage and short-lived document URLs. No internet service can guarantee absolute security. Production malware scanning, shared deployment-grade rate limiting and some retention automation remain outstanding.
12. Retention and deletion
Account and workspace information is retained while your account is active. When you request account deletion, Portunus first attempts to remove the account’s stored document objects; if object removal fails, deletion is stopped so it can be retried. After successful cleanup, the account and related application records are deleted. Infrastructure backups and provider operational logs may persist until their normal lifecycle expires; no fixed backup-expiration period is promised here.
13. Account deletion
Account deletion requires an active signed-in session, exact sign-in email confirmation and a fresh confirmation link sent to your email. Deletion cannot complete if storage cleanup fails. After confirmation and successful cleanup, Better Auth invalidates sessions and the owner’s account data is removed.
14. International processing
Service providers may process information in locations outside your country. The actual locations depend on the providers and deployment configuration selected by the operator.
15. Your choices and rights
You can review and update plan details in My Plan, update your display name in Account settings, remove documents or personal checklist items, request account deletion, or contact support. Applicable privacy rights depend on your circumstances and the service’s operating location; contact Portunus to make a privacy request.
16. Children
Portunus accounts are intended for adults organizing their own visa preparation. Household member names may include family members, but the service is not designed for children to create accounts.
17. Changes to this notice
This notice may be updated as the service changes. The date above indicates the current version.
18. Contact
For privacy or product questions, use the Contact / Feedback form.