Privacy Policy
Effective:
This Privacy Policy describes how Pactaly ("we", "us", "our") collects, uses, and safeguards personal data in connection with the Pactaly website (pactaly.com) and our waitlist form. A separate Data Processing Addendum applies once you become a paying customer of the Pactaly service.
1. Who is the data controller?
The data controller responsible for processing your personal data is:
Pactaly — operated as a sole trader (empresário em nome individual)
Contact: [email protected]
Country of establishment: Portugal
2. What personal data do we collect?
- Waitlist signup: email, company (optional), team size, role (optional), IP address, user agent, timestamp.
- Email correspondence: the content of messages you send to us.
- Analytics: anonymous, cookieless visit data collected via Plausible Analytics (EU-hosted). No personal data is stored.
3. Why do we process it?
- To operate the waitlist and email you product updates (consent, GDPR Art. 6(1)(a)).
- To answer your questions by email (legitimate interest, Art. 6(1)(f)).
- To understand aggregate traffic patterns and improve the site (legitimate interest, Art. 6(1)(f)).
- To comply with legal obligations, such as tax and accounting rules (Art. 6(1)(c)).
4. Who processes your data on our behalf?
We use the following sub-processors, all EU-based:
- Cloudflare (EU edge) — website hosting and DNS.
- Resend (EU region) — transactional email (waitlist welcome and updates).
- Plausible (EU-hosted) — privacy-first analytics, no cookies.
We do not transfer personal data outside the European Economic Area.
5. How long do we keep your data?
- Waitlist email: until the earlier of (a) your unsubscribe request or (b) 24 months of inactivity after launch.
- Email correspondence: up to 36 months, then deleted unless relevant to an ongoing matter.
- Aggregate analytics: retained indefinitely in anonymised form.
6. Your rights
Under GDPR you can, at any time:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion (we execute within 48 hours).
- Withdraw consent for marketing emails.
- Object to processing based on legitimate interest.
- Request data portability (machine-readable export).
- Lodge a complaint with your national Data Protection Authority.
Send requests to [email protected]. We respond within 30 days.
7. Cookies
The marketing site sets no cookies. Analytics is cookieless (Plausible). When you eventually log into the Pactaly application, strictly necessary session cookies will be set.
8. Changes to this policy
Material changes will be announced by email (for waitlist members) and posted here with a new effective date.
Last updated: