Privacy policy summary
Data collection
- Personal data
- Sensitive personal data for event purposes
- Log files
Location
- Some data may be processed outside of the EU. Our list of subprocessors and data locations can be found in our Trust Center.
Purpose
- Site and Service maintenance and improvement
- Information request
- Marketing
- Customer support
- Technical issue prevention and detection
- Fraud and abuse prevention and detection
Duration
- Information relating to customer accounts is retained for as long as necessary to provide our services and comply with legal obligations.
- Usage data is retained for up to 14 months except for compliance and legitimate business reasons.
Data sharing
- Affiliate and subsidiaries
- Third-party service providers
- Regulators
- Law enforcement
- Fraud prevention agencies
Legal grounds
- Consent
- Contractual obligation
- Legitimate interest
- Vital interest
- Legal obligation
Your rights
- Right to access the information
- Right of rectification
- Right of deletion
- Right to object
- Right to withdraw consent
- Right to data portability
- Right to be subject to automated decisions including profiling
- We do not sell data
Cybersecurity
- SOC 2 and PCI Level 1 certification
- Transport layer security
- Two-factor identification
- Encryption at rest and in transit
- 24/7 incident coverage
Further information
If you have any questions, please consult our Trust Center.
If you want to exercise your rights, please contact us, or send an email to dpo@platform.sh.