PRIVACY POLICY

This Privacy Policy describes how personal data is collected, used, processed, stored and protected in connection with the use of the TRAVERF platform, website, software application, APIs, integrations and related services available through https://traverf.com (the "Services").

This Privacy Policy applies to website visitors, business clients, authorized users, prospective customers, contractors, business partners and other individuals whose personal data may be processed by the Provider.

  1. DATA CONTROLLER

The controller of personal data is:

For privacy-related requests please contact: eryk.bebynek@traverf.com

  1. CATEGORIES OF PERSONAL DATA

Depending on your interaction with the Services, Provider may collect and process:

  1. Account Data: full name, business email, phone number, company name, job title, login credentials.

  2. Billing Data: billing address, VAT number, payment details, transaction history.

  3. Platform Usage Data: login logs, IP addresses, browser data, device identifiers, API usage logs, feature usage, activity history.

  4. Client Uploaded Data: files, prompts, documents, customer records, communications, operational data.

  5. Marketing Data: newsletter subscriptions, demo requests, marketing preferences and information submitted through forms integrated with Brevo.

  6. Support Data: customer service communications, support tickets, troubleshooting logs.

  1. SOURCES OF DATA

    1. Personal data may be collected directly from: users, clients, website forms, integrations, API connections, cookies, sales processes, support communications.

    2. Personal data may also be received from third-party service providers where legally permitted.

  2. PURPOSES OF PROCESSING

Provider may process personal data for the following purposes:

  1. Account Creation and Administration

  2. Service Delivery

  3. Billing and Commercial Operations

  4. Security and Abuse Prevention

  5. Customer Support

  6. Product Development and Analytics

  7. Legal and Regulatory Compliance

  8. Marketing Activities

  1. LEGAL BASIS FOR PROCESSING (GDPR)

Where GDPR applies, Provider processes personal data based on: contract performance, legal obligations, legitimate interests, consent, defense of legal claims.

  1. AI PROCESSING

    1. Certain platform features may involve automated processing, AI-supported functionalities or integrations with third-party AI providers.

    2. Users remain responsible for reviewing outputs.

    3. Provider does not guarantee accuracy of AI-generated outputs.

    4. Users should avoid uploading unnecessary sensitive personal data.

    5. Certain AI-powered functionalities are provided through Google Gemini API services.

    6. Where paid Google Gemini API services are used, prompts, uploaded files and generated outputs are processed in accordance with Google's applicable enterprise and paid-service terms.

    7. Based on information provided by Google for applicable paid Gemini API services, prompts, uploaded content and generated outputs are not used by Google to train its foundation models, except as otherwise stated in Google's applicable documentation or legal requirements.

  2. COOKIES AND TRACKING TECHNOLOGIES

    1. The Provider may use cookies, pixels, SDKs, tags, local storage technologies and similar tracking technologies in connection with the website, platform and Services.

    2. These technologies may be used to: enable core website functionality, maintain user sessions, authenticate users, remember user preferences, improve website performance, analyze traffic, measure platform usage, detect fraud, improve security, personalize user experience, support marketing activities where legally permitted.

    3. Strictly Necessary Cookies: These cookies are required for proper functioning of the Services and may include: login authentication cookies, session cookies, security cookies, load balancing cookies, fraud prevention tools, platform functionality cookies. These cookies may be used without consent where permitted under applicable law.

    4. Analytics Cookies: Provider may use analytics technologies to understand how users interact with the Services, including: page visits, feature usage, traffic sources, session duration, conversion tracking, product analytics. This may include services provided by entities such as Google, Mixpanel, Amplitude or similar analytics providers where implemented.

    5. Performance Cookies: These technologies may be used to improve speed, stability and performance of the Services, including: caching tools, performance monitoring tools, error tracking systems, uptime monitoring tools.

    6. Marketing and Advertising Technologies: Where applicable and legally permitted, Provider may use marketing technologies for: remarketing campaigns, advertising measurement, lead generation campaigns, campaign optimization, audience analytics. This may include services provided by entities such as Meta Platforms, LinkedIn, Google or similar advertising providers. Such cookies may be subject to user consent where required by law.

    7. Certain third-party integrations embedded in the Services may independently place cookies or collect technical identifiers. The Provider is not responsible for independent cookie practices of third-party services that operate under their own privacy policies.

    8. Cookies may remain stored for different periods depending on their purpose: session cookies may expire when browser sessions end, persistent cookies may remain for longer periods, retention periods may vary depending on third-party providers.

    9. Users may manage cookie preferences through: browser settings, cookie banners, consent management tools, third-party opt-out tools where available. Disabling certain cookies may negatively affect functionality of the Services.

    10. The Services may not respond to browser "Do Not Track" signals unless required under applicable law.

    11. Provider may introduce new tracking technologies, analytics tools or advertising tools as the Services evolve, subject to applicable legal requirements.

  3. DATA SHARING AND DISCLOSURES

Provider may disclose personal data where necessary to:

  1. Infrastructure Providers

  2. Payment Providers

  3. Technology Providers, including Google LLC (Google Gemini API), marketing automation providers including Brevo, analytics providers and communication service providers

  4. Professional Advisors

  5. Corporate Transactions

  6. Legal Requirements

  1. INTERNATIONAL TRANSFERS

Personal data may be transferred outside the EEA/UK where legally permitted. Appropriate safeguards may include: SCCs, adequacy decisions, other lawful mechanisms.

  1. DATA RETENTION

    1. Provider retains personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy.

    2. Retention periods may vary depending on: account activity, legal obligations, tax obligations, contractual obligations, dispute resolution needs, fraud prevention requirements.

    3. Following account termination: certain account data may be deleted, certain billing records may be retained, certain technical logs may be retained, backup retention periods may apply.

    4. Provider may anonymize certain datasets for analytics, product development and operational improvement.

    5. Once retention periods expire, personal data may be permanently deleted or anonymized.

  2. DATA SUBJECT RIGHTS

    1. Depending on applicable law, individuals may have the right to: access personal data, correct inaccurate personal data, request deletion, request restriction of processing, object to processing, request portability, withdraw consent, lodge complaints with supervisory authorities.

    2. Provider may request identity verification before fulfilling requests.

    3. Certain rights may be limited where processing is required by law, contract performance or legitimate legal interests.

    4. Requests may be submitted to: eryk.bebynek@traverf.com

    5. Provider will respond within legally required deadlines.

  3. THIRD-PARTY LINKS

Provider is not responsible for third-party websites.

  1. COMPLAINTS

    1. If an individual believes that the Provider processes personal data in violation of applicable data protection laws, such individual may contact the Provider first in order to seek clarification or resolution of the matter. Privacy-related complaints may be submitted to: eryk.bebynek@traverf.com or through other contact channels made available by the Provider via Traverf.

    2. The Provider may request additional information necessary to verify the identity of the individual submitting the complaint and to properly investigate the request.

    3. The Provider will review complaints and privacy-related concerns within commercially reasonable timeframes and may request additional information where necessary.

    4. If an individual believes that their rights under applicable data protection laws have been violated, they may also file a complaint with a competent supervisory authority in their country of residence, place of work or place of the alleged infringement.

    5. For individuals located in Poland, complaints may be submitted to: President of the Personal Data Protection Office (Poland).

    6. Nothing in this Privacy Policy limits any statutory rights available to individuals under applicable data protection laws.

  2. CHANGES TO POLICY

Provider may update this Privacy Policy. Updated versions may be published on https://traverf.com.