Privacy Policy

Last updated: April 2026

1. Data Controller

The data controller is [Full legal name] (VAT No.: [___], registered office: [___]), hereinafter "Adverse Group". For any privacy-related enquiry, please contact us at [email protected].

2. Data Collected

We collect the following personal data:

  • Name, surname, and email address provided through the authentication provider (Microsoft)
  • Country of residence, if available in the Microsoft profile
  • Billing and payment data managed by Stripe (we do not store credit card data)
  • Service usage data (access logs, pages visited) for security and service improvement purposes

3. Purpose of Processing

Data is processed for:

  • Providing the service and managing your account
  • Managing subscriptions and payments
  • Ensuring platform security and preventing unauthorised access
  • Complying with legal obligations

4. Legal Basis

Processing is based on the performance of the service contract (Art. 6(1)(b) GDPR), compliance with legal obligations (Art. 6(1)(c) GDPR), and, where applicable, the legitimate interest of the controller (Art. 6(1)(f) GDPR).

5. Data Retention

Personal data is retained for the duration of the contractual relationship and for the subsequent period required by applicable legal obligations (typically 10 years for tax records). Access logs are retained for 90 days.

6. Third Parties

We share only strictly necessary data with:

  • Microsoft — authentication via Entra ID
  • Stripe — payment and billing management
  • Microsoft Azure — cloud infrastructure (data stored in Europe)

7. Your Rights

Under the GDPR, you have the right to:

  • Access your personal data
  • Request rectification or erasure
  • Object to processing or request its restriction
  • Request data portability
  • Lodge a complaint with the supervisory authority (Garante per la protezione dei dati personali)

To exercise your rights, please write to [email protected].

8. Cookies

We use exclusively technical cookies necessary for the operation of the service (session cookies for authentication). We do not use profiling cookies or third-party cookies for advertising purposes.