Your data and your customers' data are stored on servers in the European Union. We don't sell it or pass it to anyone for advertising. We only use it to provide you the service and to meet our legal obligations. You can export it or ask us to delete it whenever you want.
The controller is Prieto Global Innovation Ventures OÜ, MISSING: registered office, Estonia (European Union). You can write to us at hola@prieto.one for anything to do with your data.
We are the controller of your account data: your name, your email, your tax details, your payment method and what you do inside the platform.
We are the processor of the data you store about your own customers. That data is yours, not ours: we merely host it and process it following your instructions. Section 9 sets out the terms of that arrangement.
About you, as a customer:
Your account data, for as long as the account is active. If you cancel, we keep it for 90 days in case you want to come back or export something, and after that we delete or anonymise it.
Invoices and tax records are kept for 7 years, because the law requires it.
Access and security logs, 12 months.
We don't sell data or pass it on for advertising. It's only processed by the companies that provide us services, contractually bound to do so for that purpose alone:
| Who | What for | Where |
|---|---|---|
| Hostinger International Ltd. | Hosting of the service and the database | Lithuania (EU) |
| Stripe Payments Europe Ltd. | Collecting subscriptions and handling card details | Ireland (EU) |
| Cloudflare | Checking that whoever comes in isn't a bot | United States, under standard contractual clauses |
| DB-IP | Geolocation database, queried locally | France (EU) |
We also disclose data when a competent authority requires it under the law.
The service and the database are hosted in the European Union. Your business data and your customers' data don't leave it.
The only exception is the anti-bot verification service, whose company is in the United States. It merely checks that whoever fills in a form is a person; it receives no data about your business. That transfer relies on the standard contractual clauses approved by the European Commission.
You can ask us, at any time and free of charge, to:
Write to us at hola@prieto.one. We reply within a month at the latest.
If you think we haven't done it right, you can complain to the Estonian data protection authority (Andmekaitse Inspektsioon) or the one in your country of residence.
We encrypt communications and sensitive data, require two-factor authentication, isolate each business's data and limit who can access what.
We take regular backups. If there were ever a breach affecting your data, we'd tell you and report it to the authority within the timeframes the law sets.
This section governs our processing of the data that you, as controller, store in the platform about your own customers. It serves as a data processing agreement for the purposes of Article 28 of the General Data Protection Regulation. We undertake to:
The subject of the processing is the provision of the contracted service; its duration is that of the subscription; and it covers the data you choose to store in the platform.
The service is aimed at professionals and businesses. Don't sign up if you're under age, and don't use it to process minors' data without the appropriate consent.
If we change this policy in any significant way, we'll let you know by email. The date it was last updated appears above.