Privacy

Privacy policy

How the website, customer portal and payment services handle your information, and how that differs from monitoring data in your own deployment.

Website, customer portal and your deployment

The marketing pages and customer portal share this website, but handle different information. Your self-hosted monitoring database is separate from both.

  • Marketing pages. Product information, documentation and the optional assistant.
  • Customer portal. Accounts, verification, billing, trial eligibility and licence activation at /licence/.
  • The software you run. Cleanwork by PTM installed on your own server. Your organisation controls that deployment. The licensing API does not receive employee screenshots, activity logs or captured URLs. See what we cannot see.

What this website collects

The static marketing pages do not run analytics or advertising tags. Web requests can appear in infrastructure logs with an IP address, user-agent and requested path. The connected customer portal uses an essential HttpOnly session cookie for sign-in; it does not store its session token in browser local storage.

Your browser will still make ordinary requests that any web server sees, and the marketing pages can contact the font and assistant providers listed below. Portal payment and email providers are described separately.

Customer account and licensing data

The portal stores your email address, organisation or display name, a bcrypt password hash, verification state, purchases, subscription status, trial eligibility, the server IDs of activated deployments with their last licence check-in time, and setup-code delivery records. Verification and password-reset tokens are stored as hashes and expire after 30 minutes. Setup codes are emailed and stored only as hashes; signed licence keys go to your server and the database keeps audit metadata rather than the key itself.

Zoho Mail delivers verification, recovery and activation messages to your address. Razorpay receives the email and checkout references needed to process your selected plan. Payment details are entered on Razorpay's checkout; the licensing service does not receive card numbers or CVVs.

Account, billing and trial-eligibility records persist beyond an individual session. Contact us about access, correction or deletion; required business records and the one-trial-per-account record need to be considered when processing a request. Monitoring-data retention in your own deployment is configured separately.

Third parties your browser contacts

ServiceWhyWhat it can see
Google Fonts
fonts.googleapis.com, fonts.gstatic.com
Serves the two typefaces this site uses. Your IP address and browser user-agent, as with any request for a file. Google handles these requests under its own policies.
Pollinations
text.pollinations.ai
Generates the answer when you type into the assistant in the corner of the page. Your question, a product summary, relevant knowledge-base excerpts and ordinary network metadata such as your IP address. The current assistant can retry using a URL containing the prompt. A private request flag is not a confidentiality guarantee; the provider controls its own logging and retention.

The assistant sends your question to a third-party model, so treat it like any public chat box: please do not type confidential details, credentials or personal data into it. If that request fails, the assistant answers from a knowledge base bundled with the page instead, entirely in your browser.

If you email us

Email to hello@ptmsoftware.live or sales@ptmsoftware.live reaches an ordinary mailbox. We keep the correspondence so we can answer you and to keep a record of the sale, and we do not use those addresses for marketing you did not ask for. Ask us to delete a thread and we will, unless we need it for tax or contractual records.

Purchases are processed through the customer portal and its configured payment providers. Support correspondence is separate from the portal account records described above.

Your rights over data we hold

Because the list above is short, so is this. You can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted, by writing to hello@ptmsoftware.live. Where the GDPR or a comparable law applies, our lawful basis for holding sales and support correspondence is legitimate interest and, where relevant, the performance of a contract.

If your own deployment of Cleanwork by PTM holds data about you as an employee, we cannot help with that request. Your employer runs that server and is the controller for it. Direct the request to them.