PoreStore (the "Service") is run by Porolytics Inc. ("we", "us", or "our"), a company incorporated in Canada. This page explains what we collect when you use PoreStore, why, and what you can do about it. It goes together with our Terms of Service.
1. The Short Version
- We collect what we need to run PoreStore: your account details, your team, the images you upload and the results of your analyses.
- Your images and results are yours. We process them only to provide the Service to you.
- We don't sell your data, and we don't use advertising or analytics trackers.
- You can download your data, fix it, or ask us to delete your account at any time.
2. What We Collect
Your account. Your email address, your name, your password (stored only as a secure hash), and, if you add them, a profile picture, your language and time zone, and two-factor authentication settings.
Signing in with Google or GitHub. If you choose to, the provider shares your name, your email address and whether it has verified that address, along with the basic profile it sends with them. We never see your Google or GitHub password.
Your team. Team names, who belongs to which team and with what role, and the email addresses of people you invite.
Your work. The 3D images you upload, the names and descriptions you give them, the analyses you run, and their results and exports.
Credits and payments. Your team's credit balance and history. If you buy credits, Stripe processes the payment; we keep the order reference, amount and status, but never your card or bank details.
API keys. If you create one, we keep its name and a hash of the key, never the key itself.
Technical data. Like most websites, our servers log the requests they receive, including IP addresses, to keep PoreStore secure and working. When something breaks, an error report is sent to Sentry, our error-monitoring service; it describes what went wrong and can include your account ID. We filter passwords and credentials out of these reports.
3. How We Use It
- To run PoreStore: store your images, run the analyses you ask for, show you the results, and charge the right number of credits.
- To keep your account secure and to fix problems.
- To email you about your account, your jobs and your purchases, and, as the Terms describe, to ask for feedback during the beta.
- To improve our pricing, using measurements of past jobs: the type of analysis, the image's size and statistics, the hardware, the run time and the cost.
PoreStore staff can see your account and data when it is needed to run the Service or to help you.
4. Where Your Data Lives
We are based in Canada, and our infrastructure spans several countries, as the Terms describe:
- Storage. Your account, your files and your results are stored with Amazon Web Services (AWS) in its US East (N. Virginia) region. Everything travels between your browser and PoreStore over encrypted connections. Images and previews may pass through AWS's worldwide network on their way to your browser.
- Computing. Analyses run on AWS in the same region, on RunPod's cloud computers in data centres in several countries, including the United States, Canada and Europe, and on computers in a research lab at the University of Waterloo, in Ontario, Canada, run by the PoreStore team.
5. Who We Share It With
We share data only with the services that help us run PoreStore, and only what each needs:
- Amazon Web Services: hosting, storage and computing.
- RunPod: computing for analyses.
- University of Waterloo: the lab computers described above.
- Stripe: payments, if you buy credits.
- Google and GitHub: sign-in, if you choose it.
- Google Workspace: sending our emails and receiving yours.
- Sentry: error monitoring.
We don't sell your data or share it for advertising. We would disclose it to anyone else only if the law requires us to.
6. Cookies
We use only a few cookies, all for PoreStore itself: one keeps you signed in, one protects forms against cross-site request forgery, and others remember your language and your light or dark theme. We use no advertising or analytics cookies.
7. How Long We Keep It
While you use PoreStore, we keep your data for as long as your account and teams exist. We keep each uploaded file as long as the image made from it exists, and move it to lower-cost archival storage about 30 days after upload. If an upload is never completed, we delete its file after 7 days.
When you delete an image or a team, it is deleted straight away. Our storage keeps a backup copy of anything deleted for up to 90 days to protect against accidental loss, then erases it for good.
When you delete your account, there is a 30-day grace period in which you can change your mind. After that, we delete your name, email addresses, password, sign-in connections and API keys, and everything stored for teams where you are the only member: images, results, exports and previews. Images and jobs you added to a team other people still use stay with that team, shown as added by "Deleted user". A deletion waits while a refund or payment dispute is open, while a team that would be deleted still has credits you bought, or while you own or are the last admin of a team other people use; we'll tell you what has to happen first.
What we keep after that: anonymised records of the analyses that were run (the type of analysis, the image's size and statistics, the hardware, run time and cost), which we use to improve our pricing, and the credit and payment records that accounting and tax law require us to keep, for six years. None of these includes your name, email address, files or results. Copies in our database backups age out on their own.
8. Your Choices
- See and take your data. You can download your images, results, reports and exports from PoreStore at any time. For a copy of anything else we hold about you, email us.
- Correct it. You can change your name, email address and profile in your account settings, and rename or edit your images and teams.
- Delete it. You can delete images and teams yourself. To delete your account, email us from the address on the account; we'll confirm the deletion date and how to undo it.
- Fewer emails. You can opt out of non-essential emails by telling us. Emails about your account, jobs and purchases still arrive.
For any other question or request about your data, email us and we'll help.
9. Changes to This Policy
When we update this policy, we change the effective date at the top of this page. If the changes are material, we will tell registered users by email.
10. Contact Us
Questions about your privacy or this policy? Email us at [email protected].