Last updated: March 18, 2026
Privacy Policy
1. Data Controller
Proviqa is operated by Piotr Klosinski Web and Mobile Development, Krakow, Poland.
Contact: hello@proviqa.com
2. What We Collect
| Data | Purpose | Legal Basis |
|---|---|---|
| Email address | Account creation, alerts | Contract (Art. 6(1)(b)) |
| Company name | Account personalization | Contract (Art. 6(1)(b)) |
| Vendor monitoring preferences | Service delivery | Contract (Art. 6(1)(b)) |
| Session cookie | Authentication | Legitimate interest (Art. 6(1)(f)) |
| IP address (server logs) | Security, abuse prevention | Legitimate interest (Art. 6(1)(f)) |
3. How We Use Your Data
- To provide the monitoring and alerting service you signed up for
- To send you change alerts and reports about your monitored vendors
- To maintain security and prevent abuse of the service
4. Data Processors
| Processor | Purpose | Location |
|---|---|---|
| Resend | Transactional email delivery | USA (EU SCCs) |
| LLM API provider | AI-powered change summarization | Processing on EU-region endpoints where available |
| Hetzner | Infrastructure hosting | Germany (EU) |
5. Data Retention
- Account data: retained while your account is active, deleted within 30 days of account closure
- Server logs: 90 days
- Vendor monitoring data (public ToS snapshots): retained indefinitely as part of the public record archive
6. Your Rights (GDPR)
Under GDPR, you have the right to:
- Access: request a copy of your personal data
- Rectification: correct inaccurate data
- Erasure: request deletion of your data (“right to be forgotten”)
- Portability: receive your data in a machine-readable format
- Restriction: limit how we process your data
- Objection: object to processing based on legitimate interest
- Complaint: lodge a complaint with your supervisory authority (in Poland: UODO — Urząd Ochrony Danych Osobowych)
To exercise any of these rights, email hello@proviqa.com. We respond within 30 days.
7. International Transfers
Where data is processed outside the EU/EEA (e.g., Resend in the USA), we rely on EU Standard Contractual Clauses (SCCs) as the legal transfer mechanism under GDPR Art. 46(2)(c).
8. Cookies
We use a single essential session cookie for authentication. We do not use analytics cookies, tracking pixels, or third-party advertising cookies. No consent is required for essential cookies under the ePrivacy Directive, but we inform you via our cookie banner.
9. Changes to This Policy
We will notify registered users by email of material changes to this policy. The “Last updated” date at the top reflects the most recent revision.
10. Contact
For privacy-related inquiries: hello@proviqa.com
Data controller: Piotr Klosinski Web and Mobile Development, Krakow, Poland