Legal Documents
Important information about your rights and our obligations
Introduction
Etropo ('the Service') is a budget management software. This Privacy Policy explains how we collect, use, and protect your personal information when you use our Service.
Information We Collect
Personal Information: Name and email address, organization details, user authentication data, payment information (processed through Stripe), usage data related to budget management activities. Technical Data: Performance and usage data through Vercel Analytics, technical information necessary for Service functionality, integration data when connecting with supported services (e.g., Slack).
How We Use Your Information
We use your personal information for: providing and maintaining the Service, processing your payments, sending transactional emails, improving the Service's performance and functionality, responding to your requests and support needs, and complying with legal obligations.
Data Storage and Security
Data Location: Primary data storage: Supabase (EU-central-1, Frankfurt, Germany), Email processing: Resend (North Virginia, us-east-1), Static files: Vercel Blob storage (encrypted at rest using AES-256 encryption). Security Measures: Data encryption at rest and in transit, secure authentication systems, regular security assessments, limited staff access to personal data.
Data Retention
We retain your personal data for: Active accounts - as long as necessary to provide the Service, Deleted accounts - up to 30 days after account deletion, Financial records - as required by applicable laws (typically 5 years), Backup data - up to 90 days.
Third-Party Services
We use the following third-party services: Stripe for payment processing, Slack for data integration (when enabled by users), Vercel for hosting and analytics, Resend for transactional emails, Supabase for database services. Each third-party service has its own privacy policy and data processing practices.
Your Rights Under GDPR
You have the rights to: Access your personal data, correct inaccurate data, request deletion of your data, object to data processing, request data portability, withdraw consent at any time. Contact team@etropo.com to exercise these rights.
International Data Transfers
We transfer data outside the EU to United States (for email processing via Resend). All transfers comply with GDPR requirements through: Standard Contractual Clauses (SCCs), appropriate safeguards, Privacy Shield certification (where applicable).
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you by: Posting the new Privacy Policy on our website, sending you an email notification for significant changes, requesting renewed consent where required.
Contact Information
For questions about this Privacy Policy, please contact us at team@etropo.com
Supervisory Authority
You have the right to lodge a complaint with a supervisory authority. In Poland, this is: Urząd Ochrony Danych Osobowych (UODO) ul. Stawki 2 00-193 Warsaw, Poland
Last updated: December 19, 2024
For questions or concerns, please contact us at team@etropo.com