Contracko privacy & data

We are the controller for the processing described here.

Account and profile data: name, email, password or authentication data, job title, organisation, contact preferences.

Business-contact data (name, job title, organisation, business email, LinkedIn profile)

Billing data: billing contact and address. Card details are entered directly with our payment processor and are not stored by us.

IP address, approximate location inferred from IP, browser and device type, operating system, referring URLs, pages viewed, and actions taken

Communications: messages you send us (support, sales, email).

Provide, operate and secure the platform; manage your account and authentication

Billing and payments

Product and website analytics, service improvement, fraud and abuse prevention

Advertising measurement and retargeting

Business-to-business sales outreach to prospects

Marketing and lifecycle email

billing and tax records are retained for the statutory period (7 years under Dutch law)

Our hosting and primary storage are in the EU.

For those transfers we rely on an adequacy decision or the EU-US Data Privacy Framework where the recipient is certified

the EU-US Data Privacy Framework where the recipient is certified

otherwise on the EU Standard Contractual Clauses with supplementary measures

The sub-processors that handle customer content are listed separately in the sub-processor list referenced in our DPA.

governed by our Data Processing Agreement (DPA), not this policy

When personal data is no longer needed, we delete or anonymise it; residual copies in backups are purged on the normal backup cycle.

Under the GDPR you have the right to access, rectification, erasure, restriction, data portability, and objection

Where we rely on consent, you may withdraw it at any time (without affecting prior processing).

the right not to be subject to solely automated decisions with legal or similarly significant effects

you have the right to lodge a complaint with the Dutch supervisory authority

We do not sell personal data, and we do not use it to train AI models .