Privacy Policy

1. Personal Data We Collect

• Identity and contact data: name, email address, and account credentials you provide when registering.
• Usage and telemetry data: how you interact with the Service, feature usage, meeting metadata, and device identifiers.
• Support data: messages and information you send when contacting support.
• Technical data: IP address, browser type and version, time zone setting, operating system, and platform.
• Content you create: meeting agendas, summaries, action items, and follow-up emails generated or stored via the Service.

2. Purposes and Legal Basis

• Account creation and service provision — legal basis: performance of a contract.
• Security, fraud prevention, and platform integrity — legal basis: legitimate interests and legal obligations.
• Product improvement and analytics — legal basis: legitimate interests (you may opt out of non-essential analytics).
• Customer support — legal basis: performance of a contract.
• Marketing communications — legal basis: consent (you can withdraw consent at any time).

3. Data Sharing and Recipients

We share your data only with categories of recipients necessary to operate the Service:

• Service providers and subprocessors: hosting, analytics, and customer support tooling.
• Merchant of Record (Paddle.com): for processing payments, managing subscriptions, handling tax compliance, and invoicing. Paddle acts as an independent data controller for payment-related data it collects directly.
• Professional advisers: legal and accounting professionals, bound by confidentiality.
• Authorities: where required by applicable law or regulation.

4. Data Retention

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. When data is no longer needed, we securely delete or anonymise it. Account data is retained while your account is active and for a reasonable period thereafter to resolve disputes, enforce agreements, and establish legal defences.

5. Your Rights

Depending on your jurisdiction, you may have the right to access, rectify, erase, restrict, or object to the processing of your personal data, as well as the right to data portability. You also have the right to withdraw consent where processing is based on consent, and the right to lodge a complaint with a supervisory authority. To exercise your rights, contact us at the details below.

6. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS), access controls, and regular security reviews. No system is completely secure, and we cannot guarantee absolute security.

7. Cookies

We use essential cookies to operate the Service (authentication, security) and analytics cookies to understand usage. You can manage non-essential cookie preferences through your browser settings.

8. International Transfers

Your data may be transferred to and processed in countries outside your jurisdiction. Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions recognised under applicable data protection law.

9. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at support@360degreesconsultants.org.