Privacy Policy

1. Data Controller

2. Types of Data Collected

QuotigyDash collects and processes the following categories of personal data:

2.1 Data provided directly by the user

• Registration data: first name, last name, email, company name (optional)
• Billing data: address, tax ID/VAT number (if provided for purchase)
• Payment data: processed by third-party processors (Lemon Squeezy for purchases made on the website, Microsoft Store for purchases made through the Store) - QuotigyDash does not store credit card information

2.2 Automatically collected data

• Navigation data: IP address (anonymized), browser type, operating system, pages visited
• Analytics cookies: Google Analytics (only with prior consent)
• Server logs: access timestamps, requested URLs, HTTP response codes

3. Purpose of Processing

Personal data is processed for the following purposes:

3.1 Legal basis: Contract performance

• Provision of QuotigyDash service (Server Edition and Desktop Edition)
• Management of purchases and software licenses
• Technical assistance and customer support
• Sending service-related communications (order confirmations, software updates)

3.2 Legal basis: Consent

• Sending newsletters and marketing communications (only if explicitly consented)
• Statistical analysis via Google Analytics (with cookie consent)

3.3 Legal basis: Legal obligation

• Compliance with tax and accounting obligations
• Invoice retention according to applicable law

3.4 Legal basis: Legitimate interest

• Security and fraud prevention
• Service and website improvement

4. Cookies and Tracking Technologies

QuotigyDash uses cookies and similar technologies. For more details, please refer to our Cookie Policy.

5. Data Retention

Personal data is retained for the following periods:

• Active account data: for the duration of the contractual relationship
• Billing data: 10 years (Italian tax obligation)
• Marketing data: until consent withdrawal
• Server logs: 6 months
• Analytics data (GA): 26 months (Google Analytics default setting)

6. Data Sharing with Third Parties

QuotigyDash shares personal data exclusively with the following third parties:

6.1 Payment processors

• Lemon Squeezy: for processing payments of purchases made on the website (Desktop and Server Edition). Lemon Squeezy acts as Merchant of Record.
• Microsoft Store: for processing payments of purchases made through the Microsoft Store

6.2 Hosting and infrastructure services

• Web hosting provider (for service delivery)
• Cloud services for backup and storage

6.3 Analytics tools

• Google Analytics: for anonymous statistics (only with prior consent)

All third-party providers are selected based on GDPR compliance and are bound by Data Processing Agreements (DPA).

7. International Data Transfers

Some service providers (e.g., Google Analytics) may transfer data outside the European Economic Area (EEA). In such cases, we ensure that:

• Transfers occur to countries recognized as "adequate" by the European Commission, or
• Standard Contractual Clauses (SCC) approved by the European Commission are in place
• IP addresses are anonymized before transfer (Google Analytics)

8. Data Subject Rights (GDPR)

In accordance with EU Regulation 2016/679 (GDPR), you have the following rights:

8.1 Right of access (Art. 15 GDPR)

You can request a copy of your personal data in our possession.

8.2 Right to rectification (Art. 16 GDPR)

You can request correction of inaccurate or incomplete data.

8.3 Right to erasure (Art. 17 GDPR - "Right to be forgotten")

You can request deletion of your data, subject to legal retention obligations.

8.4 Right to restriction (Art. 18 GDPR)

You can request restriction of processing under certain circumstances.

8.5 Right to data portability (Art. 20 GDPR)

You can request your data in a structured, machine-readable format.

8.6 Right to object (Art. 21 GDPR)

You can object to processing based on legitimate interest or for marketing purposes.

8.7 Withdrawal of consent

When processing is based on consent, you can withdraw it at any time.

9. Right to Lodge a Complaint

You have the right to lodge a complaint with the Italian Data Protection Authority:

10. Data Security

QuotigyDash implements appropriate technical and organizational security measures to protect personal data, including:

• SSL/TLS encryption for communications (HTTPS)
• Data access limited to authorized personnel
• Regular backups and disaster recovery
• Access monitoring and logging
• Regular security updates

11. Minors

QuotigyDash does not knowingly collect personal data from individuals under 16 years of age. If we become aware of having collected data from a minor, we will proceed with immediate deletion.

12. Changes to Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Substantial changes will be communicated via:

• Email notification to registered users
• Notice on the website
• Update of the "Last updated" date at the top of this document

13. Contact

← Back to Home