Configo privacy & data

For the personal data described in Section 1 above — your own account, billing, and usage information — Configo acts as the data controller

Personal information : Includes data such as your name, email address, phone number, company name, address, and payment details.

Session data : When you sign in, we store the browser and device description (user agent) and the IP address from which you signed in

Usage data : Includes data related to your interactions with our Services, such as IP address, browser type, and pages visited.

Billing and business information : If you use our document template feature, we may collect your billing details, including company name, legal address, tax identification number, and payment details necessary for processing transactions.

Providing and improving the Services : Necessary for the performance of our contract with you (Art. 6 (1)(b) GDPR).

Analyzing usage patterns : Based on our legitimate interest to improve our service performance and user experience (Art. 6 (1)(f) GDPR), or your consent where required.

Ensuring security and integrity : Based on our legitimate interest to detect and prevent fraud, unauthorized access, and malicious activity (Art. 6 (1)(f) GDPR).

The user agent and IP address of a sign-in are kept only while the session is active and are deleted when it expires (at most 30 days after sign-in)

If you do not log in to your account for 12 consecutive months, we will email you a notice at your account address.

we retain them for the period required by the applicable jurisdiction (typically 5 to 10 years)

such transfers are safeguarded by Standard Contractual Clauses (SCCs) approved by the European Commission

and/or the provider's participation in the EU–US Data Privacy Framework

These providers act as data processors and are bound by strict contractual obligations (Data Processing Agreements).

You can erase your personal data at any time from your Account Settings, or request that we do so under certain conditions.

Right of access : You can request a copy of the personal data we hold about you.

Right to rectification : You can update most of your personal information directly from your Account Settings

Right to erasure ("right to be forgotten") : You can erase your personal data at any time from your Account Settings

Right to restriction of processing : You can request that we limit how we process your data.

Right to data portability : You can download a machine-readable export of your personal data directly from your Account Settings

Right to object : You can object to the processing of your data based on legitimate interests or for direct marketing.

Right to withdraw consent : If we process data based on your consent, you can withdraw it at any time.

We do not sell or rent your personal data to third parties.