Privacy Policy

Effective Date: 10/06/2026

This Privacy Policy explains how our marketing automation platform ("we", "us", or "our") collects, uses, stores, and protects the personal data of our users and their customers. We are committed to ensuring compliance with the General Data Protection Regulation (GDPR) and safeguarding your privacy.

1. Information We Collect

We collect and process personal data to provide and improve our services. The types of data we collect include:

• Account Information: Name, email address, phone number, and billing details provided during registration.

• Usage Data: Information about how you interact with our platform, including IP addresses, browser types, and access times.

• Customer Data: Data uploaded by you regarding your clients or leads, which may include names, contact information, and interaction history. We act as a data processor for this information, while you remain the data controller.

2. Legal Basis for Processing

Under the GDPR, we process personal data based on the following legal grounds :

• Consent: When you have explicitly given us permission to process your data for specific purposes, such as receiving marketing communications.

• Contractual Necessity: When processing is necessary for the performance of a contract to which you are a party, such as providing our platform services.

• Legitimate Interests: When processing is necessary for our legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms. This includes improving our services and preventing fraud.

• Legal Obligation: When we are required to process data to comply with legal or regulatory requirements.

3. How We Use Your Data

We use the collected data for the following purposes:

• To provide, maintain, and improve our platform functionality.

• To process transactions and send related information, including confirmations and invoices.

• To communicate with you regarding updates, security alerts, and support messages.

• To analyze usage trends and optimize user experience.

• To facilitate the execution of marketing campaigns on behalf of our users.

4. Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share your data in the following circumstances:

• Service Providers: We may share data with trusted third-party vendors who assist us in operating our platform, such as hosting providers and payment processors. These providers are bound by strict confidentiality agreements and GDPR-compliant data processing addendums.

• Legal Requirements: We may disclose data if required by law, court order, or governmental request.

• Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of the business assets.

5. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by law. Account information is typically retained for the duration of your active subscription. Upon termination of your account, we will delete or anonymize your data within a reasonable timeframe, except where retention is required for legal or tax purposes.

6. International Data Transfers

If we transfer personal data outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place to protect your data. This may include utilizing Standard Contractual Clauses approved by the European Commission or ensuring the recipient is located in a country with an adequacy decision.

7. Your Data Protection Rights

Under the GDPR, you have the following rights regarding your personal data :

• Right to Access: You can request copies of your personal data.

• Right to Rectification: You can request that we correct any inaccurate or incomplete data.

• Right to Erasure: You can request the deletion of your personal data, subject to certain exceptions.

• Right to Restrict Processing: You can request that we limit the processing of your data.

• Right to Data Portability: You can request the transfer of your data to another organization or directly to you.

• Right to Object: You can object to our processing of your personal data under certain conditions.

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within one month.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the updated policy on our website and updating the effective date.

10. Contact Information

If you have any questions or concerns about this Privacy Policy or our data practices, or if you wish to contact our Data Protection Officer, please reach out to us at:

•Email: hello@valentinatocu.com

You also have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates the GDPR.