Terms of service

These terms are the agreement between you and {{PLACEHOLDER:LEGAL_ENTITY_NAME}} ("Porticol", "we") for the Porticol desktop application, the Porticol Cloud service, the Porticol Team Server and the material published on this website.

They take effect on 21 Oct 2026 and replace any earlier terms.

1. Who you are contracting with

The contract is with {{PLACEHOLDER:LEGAL_ENTITY_NAME}}, whose registered address is {{PLACEHOLDER:LEGAL_ENTITY_ADDRESS}}.

"Customer" is whoever signs up. It is you personally if you use Porticol for yourself, and the organisation you represent if you sign up for an organisation. You confirm that the organisation has authorised you to bind it, and that you are at least 16 years old.

Notices to us go to legal@porticol.app. Notices to you go to the address on your account, or to the address you gave us for billing.

2. What Porticol is

Porticol is a workbench for HTTP and six other protocols, in four forms:

a desktop application that works with no account and keeps its data on your machine;
Porticol Cloud, the hosted service that stores and synchronises shared workspaces, runs scheduled monitors and provides the account, billing and identity features;
the Porticol Team Server, one binary you install and run yourself for a single organisation; and
this website and its documentation.

Requests you send from the desktop application leave from your machine. Our servers do not proxy them. The exceptions are scheduled monitors, which run on our servers behind an egress guard and a per-organisation script sandbox, and the server-side sending an administrator can enable on a self-hosted server; both are described in the acceptable use policy.

The desktop application, the Team Server and the command-line tool are also offered under the licences in the project's repository. Where those licences and these terms differ, the licences govern the code and these terms govern the service we operate.

3. Your account

You sign up with an email address and a password, or with Google or GitHub. Access tokens are short-lived; refresh tokens are held in your operating system's keychain. Each device you sign in on is listed in your account and can be revoked by you or by an administrator.

You are responsible for what happens under your account and for keeping your sign-in details to yourself. Tell us promptly if you think someone else has used it.

You can sign in to the desktop application with an OAuth authorization code and PKCE over a loopback redirect, against Porticol Cloud or against a Team Server you name.

4. Plans, trials, subscriptions and prices

Porticol Cloud is sold on the plans Free, Pro and Enterprise. Each plan sets limits on seats, workspaces, synchronisation, shared secrets, single sign-on, audit export, retention days, monitor runs and mock calls. The limits are enforced on the server, and the desktop caches a signed entitlement token so paid features keep working for up to 14 days without a network.

An organisation's first subscription to Pro starts with a free trial of 14 days. Nothing is charged during the trial. When it ends, the subscription is billed, unless an owner ended it before then, in which case the organisation moves to Free.

Paid plans are billed in advance, monthly or annually, and run for the period paid for; there is no longer minimum term. A subscription bought on the billing page is billed through our payment provider, Stripe, and an annual contract we sign with you can be billed by invoice instead. You can change plan, change the number of seats, update payment details and cancel from the billing page; an owner can do so at any time.

Prices are those on the pricing page when a period starts. We tell an organisation's owners about a price change at least 30 days before it applies, and it applies from the first renewal after that.

If a renewal fails, the organisation enters a grace period with a banner for its owners. When the grace period ends, paid entitlements turn off. Your data is not deleted.

We do not refund part of a period: cancelling ends a subscription when the period paid for ends. We refund the prepaid, unused part of a period, pro rata, in two cases only: when we end the agreement or a service without a breach of yours, under section 12 or 13, and when you cancel because of a change to these terms or the service that you do not accept, under section 14.

The Team Server is not billed here. It takes a signed installation licence with seats, entitlements and an expiry, and the licence governs what it may do.

5. Your content

Your collections, requests, environments, examples, variables, mocks, monitors and workspace settings are yours. You keep ownership of them and you grant us only the rights needed to store, synchronise, back up, display and export them for you, and to operate the service for you. You are responsible for having the rights to the content you put in it, and for its legal use.

Secret values in shared environments are encrypted on your devices before they are sent. We store the ciphertext and the keys wrapped for each device, and we cannot read a value you have stored that way. A variable that points at a secret held in HashiCorp Vault, AWS Secrets Manager, Azure Key Vault or Google Secret Manager is resolved on your device when you send, and we never store it.

We do not use your content to train artificial intelligence or machine learning models, and we do not let anyone else use it to.

If you share a collection or an environment with a member, a group or everyone in a workspace, that person can read it under the permissions you choose, and it stays shared while they hold them. Removing a member revokes their access and rotates the workspace key.

Leaving

You can export an organisation's data at any time from the admin console: it is a zip of JSON files with a manifest, kept for seven days and available for one download. You can export your own personal data as a JSON file from the account page, and delete your account there.

Deleting an organisation is permanent. It removes the organisation's data from every table, including its audit log, and ends the sessions and devices that used it. Deletion is recorded in our installation log. Invoices and tax records survive a deletion, for the period in section 9 of the privacy policy. Deleted data leaves our backups as they age out, within 35 days.

6. Acceptable use

Using Porticol means accepting the acceptable use policy. It applies to you, to anyone you give access, and to anyone using a Team Server you operate.

7. Confidentiality

Each of us will keep the other's non-public information confidential and use it only for the agreement. That obligation ends for information that is or becomes public without breach, that you already held lawfully, that you develop independently without reference to it, or that you are required to disclose by law after telling the other party where the law allows. Personal data is handled under the data processing agreement.

8. Our licences to you

We grant you a non-exclusive, non-transferable, revocable licence to install and use the desktop application, the Team Server and the command-line tool, and to use the hosted service, for your own work and within your plan's limits. A Team Server licence is non-transferable and limited to one installation and the seats on it.

You may not resell, sublicense or provide Porticol as a service to others. If you run a Team Server for your organisation, you may let your own users and contractors in.

If you send us feedback, you allow us to use it without restriction or payment, and you confirm you have the right to.

The desktop application and Team Server include open source components. Their licences, and notices for every component, are in the application's About screen and in the Team Server image.

9. Third parties

Porticol is a tool for reaching other systems. You are responsible for the systems you reach, for the requests you send to them, and for obeying their terms. Porticol is not a party to any agreement between you and a third party.

10. Warranties and disclaimers

We warrant that we will provide the service with reasonable skill and care, that it will perform materially as described, and that we will not knowingly introduce malicious code into a release.

Except as stated, Porticol and the service are provided "as is". We do not warrant that the service will be uninterrupted or error-free, that every API you reach will respond, or that a feature marked experimental will be fit for a particular purpose. A feature marked experimental, preview or beta may change or be withdrawn, and is provided without any commitment to support it.

Nothing in these terms limits a warranty or right that cannot be limited by law.

11. Liability

To the fullest extent the law allows, neither of us is liable for indirect or consequential loss, or for loss of profits. For loss or corruption of data, neither of us is liable for more than the reasonable cost of restoring it from backups.

Subject to that, each party's total liability arising out of or in connection with these terms is limited to the fees you paid us in the 12 months before the event that gave rise to the claim. For a breach of the data processing agreement or of section 7, the limit is twice that amount.

Nothing in these terms limits liability for fraud, liability under the indemnities in section 12, or any liability the law does not allow to be limited.

Neither of us is liable for any failure to perform caused by something outside its reasonable control, including a natural disaster, a war, a labour dispute, a failure of a supplier's network or power, or a decision by a public authority.

12. Indemnities

Each of us will defend the other against a claim by a third party that the first party's materials infringe that third party's intellectual property rights, and will pay the damages and costs finally awarded, or agreed in a settlement it approves. Our materials are Porticol: the desktop application, the Team Server, the command-line tool, the service and their documentation. Your materials are your content.

The party claiming under this section must tell the other promptly in writing, give it sole control of the defence and of any settlement, and help it reasonably, at its cost. A settlement may not admit fault or impose an obligation on the protected party without its consent.

We are not responsible for a claim that arises from your content, from a change to Porticol we did not make, or from combining Porticol with something we did not supply. If Porticol is held to infringe, or we think it likely to be, we may get you the right to keep using it, change it so that it does not infringe, or end the affected service and refund the prepaid, unused part of your subscription.

13. Term, suspension and termination

These terms apply while you use Porticol. Sections 7, 11, 12, 15 and 16, and any payment you owe, survive the end of the agreement.

We may suspend an account immediately where necessary to stop abuse, a security incident, a breach of the acceptable use policy, or a legal requirement. Where a suspension is not an emergency we tell you why and how long we expect it to last.

We may end the agreement for convenience on 30 days' written notice, and refund the prepaid, unused part of your subscription. You may end it at any time by cancelling on the billing page or deleting your account. If you breach these terms, we tell you in writing, and you have 30 days to fix the breach before we may end the agreement for it.

On termination you may export your data for 30 days. After that we delete it on the schedule in the privacy policy.

14. Changes to these terms

We may change these terms. We will tell you at least 30 days before a change takes effect, by posting the change here and, for a material change, writing to the address on your account or to your organisation's owners. A material change that reduces a right you rely on, or that you cannot reasonably accept, lets you cancel before it takes effect and receive a refund of the prepaid, unused part of your subscription, as section 4 describes.

15. Governing law and disputes

These terms are governed by the laws of {{PLACEHOLDER:GOVERNING_LAW}}, without regard to its conflict-of-laws rules.

Disputes go to {{PLACEHOLDER:DISPUTE_FORUM}}. Before starting proceedings, each of us will give the other 30 days' written notice of the dispute and use the process in {{PLACEHOLDER:GOVERNING_LAW}} to try to settle it, where that process does not require either of us to start proceedings first. Nothing stops either of us seeking an urgent injunctive order.

Nothing in this section limits a right to bring proceedings in a court of competent jurisdiction that you cannot waive.

16. General

Porticol is licensed to you for your own use. You may not assign these terms without our written consent, except to a successor of the whole of your organisation. We may assign them as part of a sale of the business, on written notice.

If any provision is found unenforceable, the rest stays in force. A failure to enforce a provision once is not a waiver of it. "Including" means including without limitation.

These terms and any documents expressly incorporated into them are the whole agreement between us about Porticol and replace everything earlier. If you have a signed order form or a separate written agreement with us, that one wins where it conflicts.