Privacy Policy

Scope of this policy

This policy applies to personal data processed through the public website, account registration flows, product usage, support conversations, sales inquiries, and related business operations.

It does not replace any separate data processing agreement, order form, or enterprise contract. If such an agreement conflicts with this policy for customer account data, the signed agreement will control to the extent of the conflict.

Categories of personal data we collect

• Account and profile data, such as name, business name, email address, phone number, password hash, user role, and login metadata.
• Customer content and CRM data that you upload, import, submit through forms, or otherwise store in the platform, including lead contact details, notes, pipeline records, and communications.
• Transaction and billing data, such as subscription plan, invoices, payment status, billing contact details, and limited payment-related metadata processed with our payment providers.
• Technical and usage data, such as IP address, browser type, device identifiers, pages viewed, timestamps, referring URLs, crash data, and security logs.
• Support and communications data, such as emails, chat messages, recordings, attachments, and feedback you send to our team.
• Marketing preference data, such as newsletter consent, campaign responses, and event registrations.

How we use personal data and our legal bases

• To provide and administer the platform, authenticate users, maintain tenant environments, and perform the contract requested by you.
• To secure the service, prevent fraud, detect abuse, troubleshoot issues, and protect our systems based on our legitimate interests and legal obligations.
• To process subscriptions, invoices, renewals, refunds, and related financial records.
• To respond to support requests, onboarding inquiries, and product questions.
• To improve product performance, reliability, usability, and analytics based on legitimate interests, and where required, consent.
• To send service notices, transactional messages, and legal updates. Marketing emails are sent where permitted by law or based on consent and can be unsubscribed from.
• To comply with tax, accounting, law enforcement, consumer protection, and other legal requirements.

Customer data roles

When customers use MEDIAPRONET to collect and manage their own leads, contacts, and website submissions, the customer generally decides why and how that personal data is used. In those cases, the customer is typically the controller or business, and MEDIAPRONET acts as a processor or service provider on the customer's behalf.

Customers are responsible for making sure they have a valid legal basis to collect, upload, send, or otherwise process personal data through the platform, and for providing their own notices and obtaining any required consents.

If we process customer data under written instructions from a customer, we do so only as needed to provide the service, maintain security, comply with law, or as otherwise permitted by the applicable contract.

How we share personal data

• With hosting, infrastructure, analytics, communications, and payment service providers that process data for us under contractual safeguards.
• With professional advisers such as lawyers, auditors, insurers, and accountants where needed for legitimate business or compliance purposes.
• With competent authorities, courts, regulators, or law enforcement when required by law, legal process, or to protect rights, safety, and property.
• With a buyer, investor, or successor entity in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality protections.

International transfers

Your personal data may be processed in countries other than the one where you are located. Where transfer rules apply, we use appropriate safeguards, such as contractual protections, vendor assessments, and operational controls designed to protect transferred data.

If you need additional information about applicable transfer safeguards, contact us using the details in this policy.

Data retention

• Account and customer workspace data are kept for as long as the account remains active and for a reasonable period afterward to support reactivation, backups, security, dispute handling, and legal compliance.
• Billing and tax records are retained for the period required by accounting, tax, and audit laws.
• Security logs are retained only as long as reasonably necessary for security monitoring, investigations, and platform integrity.
• Support records and sales communications may be retained to maintain continuity, document instructions, and improve support quality.

Security measures

We maintain technical and organizational measures designed to protect personal data, including access controls, authentication safeguards, role-based permissions, logging, monitoring, backups, and other operational protections appropriate to the nature of the service.

No service is completely immune from risk. You are responsible for keeping your credentials confidential, using strong passwords, enabling additional security features where available, and notifying us promptly of any suspected unauthorized access.

Your privacy rights

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion where the law gives you that right.
• Request restriction or object to certain processing in specific situations.
• Request portability of data where applicable.
• Withdraw consent where processing depends on consent.
• Lodge a complaint with your local supervisory or consumer protection authority.

Cookies, analytics, and similar technologies

We may use cookies, local storage, and similar technologies to keep you signed in, remember preferences, preserve language settings, measure performance, understand usage trends, and improve the website and platform.

Where required by law, non-essential cookies or similar tools will be used only after the required notice or consent mechanism has been provided.

Children's privacy and sensitive data

The service is intended for business use and not directed to children. We do not knowingly collect personal data directly from children in violation of applicable law.

Customers should not use the platform to process highly sensitive personal data unless they have independently confirmed that such use is lawful, necessary, and supported by appropriate contractual and technical controls.

Changes to this policy

We may update this Privacy Policy from time to time to reflect product changes, legal requirements, or operational practices. The updated version will be posted on this page with a revised effective date.

If a change materially affects how we process personal data, we may also provide notice through the platform, by email, or by other reasonable means where required by law.