# PortAbleRI · Privacy Policy · v0.1

**Status:** **v0.1 — HOST-prepared · COUNSEL ACK PENDING** · interim F&amp;F notice · not legal advice  
**Product:** PortAbleRI · KaiRis Systems  
**Date:** 2026-10-03  
**Public URL:** https://portableri.com/privacy.html  
**Related:** [Subscriber Service Agreement (v0.1)](2026-10-03_PortAbleRI_Subscriber-Service-Agreement_Draft-v0.md) · counsel pass worksheet

---

## Counsel gate (read first)

| Item | HOST direction (2026-10-03) |
|------|-----------------------------|
| Entity | KaiRis Systems LLC (NH) before paid tier · confirm with counsel |
| Min age | **18+** only · no COPPA / under-13 path |
| Cookie banner | **Minimal interim:** disclose coord + static host · full banner before paid tier if counsel requires |
| B2B / DPA | Separate pass when org Studio tier ships |

**F&amp;F preview:** this policy may be linked from onboarding as **interim privacy** until counsel ACK and **v0.1+**.

---

## 1. Who we are

**Provider** (preview): **KaiRis Systems LLC (New Hampshire)** operating **PortAbleRI** at https://portableri.com/.

**Privacy contacts (to be provisioned):**

- **Legal / privacy requests:** `legal@reconnect0.com`
- **Operations:** `kairis@reconnect0.com`

---

## 2. Scope

This notice describes the **Friends &amp; Family preview** ring: static site, trust manifest, onboarding that runs **in your browser**, and optional calls to **coord.portableri.com** for metadata (not full conversation bodies by design).

**Not in scope here:** HomeTill ZIP product (separate host **hometillzip.com** when live) · third-party AI vendors you choose in Cursor or other tools.

---

## 3. What we aim **not** to collect

By product design for Phase 1 preview:

- **Full conversation bodies** from your Prime sessions on Provider servers (HOST-local export is your custody).
- **Training on your Subscriber Content** without a **future written opt-in** (none offered in this preview).

Design intent ≠ guarantee. You still control what you export, mirror, or paste into third-party tools.

---

## 4. What may be processed

| Category | Examples | Purpose |
|----------|----------|---------|
| **Static delivery** | IP address, user-agent, TLS logs | GitHub Pages / CDN operation · security |
| **Trust &amp; provenance** | Manifest fetches, hash verification in browser | Pin constitution + publish anchors |
| **Coord metadata** | Entitlement-shaped tokens, audit beacons **you trigger**, HomeTill staging JSON | F&amp;F coordination · verify/export parity |
| **Onboarding export** | Bootstrap JSON **downloaded locally** — not uploaded to Provider by default | Your studio record |

Provider does **not** operate a production subscriber login on the public ring during this preview.

---

## 5. Third parties

You may use **separate services** under their own terms:

- **Cursor** and **model providers** (when you run a Prime)
- **Google Drive / MCP** (when you mirror artifacts you choose)
- **GitHub** (Pages hosting for portableri.com)
- **Fly.io** or successor (coord API host)

Provider does not control those processors. Link their policies before you connect accounts.

---

## 6. Cookies and similar tech

The static site uses **browser storage only where pages explicitly write it** (e.g. local onboarding/bootstrap). We do **not** deploy third-party advertising cookies on portableri.com in this preview.

**Coord API** requests from the browser may use standard HTTP headers; counsel may require a cookie/consent banner before paid tier.

---

## 7. Retention

- **Server logs** (hosting/coord): retained per host defaults unless counsel specifies shorter periods.
- **Metadata you send to coord:** retain only as long as needed for stated purpose · deletion requests to **legal@reconnect0.com** (subject to lawful hold).

---

## 8. Security

Provider uses industry-common practices for a static + API preview (TLS, least-privilege deploy keys). **No system is perfectly secure.** Use export, verify, and local backups for material records.

Data-breach commitments in the SSA (if any) are **counsel-tuned** with this policy.

---

## 9. Your choices

- **Do not onboard** if you disagree with this notice.
- **Export and verify** bundles locally; revoke mirrors you control.
- **Contact us** for access/deletion questions (preview may be manual).

---

## 10. Children

PortAbleRI preview is **18+** (or age of majority where you live). We do not knowingly collect data from children.

---

## 11. Changes

We will post updated versions with a new date. Material changes before paid tier will be flagged in onboarding when feasible. **Draft** label remains until counsel ACK + Crystal Record **v0.1+**.

---

## 12. Contact

**legal@reconnect0.com** · **kairis@reconnect0.com**  
Mailing address: `[COUNSEL: NH statutory agent / notice address]`

---

*Crystal Record standard · earliest user-visible form preserved · append corrections separately.*


---

## Counsel ACK (pending)

| Counsel | `[ ] Signed · v0.1` |
| HOST | Jeremy · 2026-10-04 · Brick 28 |
