Privacy Policy

We process your personal data based on the following legal grounds according to Art. 6 GDPR:

• Consent (Art. 6(1)(a) GDPR): For feedback collection and marketing communications
• Contract Performance (Art. 6(1)(b) GDPR): To provide our services and process payments
• Legitimate Interest (Art. 6(1)(f) GDPR): For security, fraud prevention, and service improvement
• Legal Obligation (Art. 6(1)(c) GDPR): For tax reporting and compliance requirements

We share your data with the following trusted service providers:

We may also share data when:

• Required by law or legal proceedings
• Necessary to protect our rights or security
• Part of a business transfer or merger
• You have explicitly consented

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States. We ensure adequate protection through:

• EU-US Data Privacy Framework Adequacy Decisions
• Standard Contractual Clauses approved by the European Commission
• Binding Corporate Rules of certified service providers
• Other adequate safeguards under GDPR

We store your personal data only as long as necessary for the purposes outlined in this policy:

• Account Data: Until account deletion plus 30 days for security purposes
• Feedback Data: Until project deletion or upon request
• Payment Data: 7 years for tax and accounting purposes
• Marketing Data: Until consent withdrawal
• Log Files: 90 days for security and performance analysis

You have the following rights regarding your personal data:

• Right of Access (Art. 15): Request a copy of your personal data
• Right to Rectification (Art. 16): Correct inaccurate personal data
• Right to Erasure (Art. 17): Request deletion of your personal data
• Right to Restrict Processing (Art. 18): Limit the use of your data
• Right to Data Portability (Art. 20): Receive your data in structured format
• Right to Object (Art. 21): Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for consent-based processing

To exercise these rights, contact us at legal@prioai.co. We will respond within 30 days. You also have the right to file a complaint with your local data protection authority.

We use cookies and similar technologies for:

• Authentication and session management
• Security and fraud prevention
• Performance analysis and optimization
• User preferences and settings
• Analytics and usage statistics (Google Analytics)

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality. Detailed information can be found in our Cookie Policy.

We implement comprehensive security measures, including:

• End-to-end encryption for data transmission
• Encrypted data storage with industry-standard protocols
• Multi-factor authentication for administrative access
• Regular security audits and vulnerability assessments
• Employee training on data protection and security
• Incident response procedures and breach notification protocols

Our services are not intended for and not directed to persons under 18 years of age. We do not knowingly collect, use, or disclose personal data from children under 18 years of age.

If you are under 18 years of age, you are not permitted to use our services or create an account. If you believe we have inadvertently collected personal data from a person under 18, please contact us immediately at legal@prioai.co and we will take prompt action to delete such information.

Parents and guardians are encouraged to monitor their children's online activities and to help enforce this policy by instructing their children never to provide personal information through our services without parental permission.

For questions about this privacy policy or our data protection practices:

Email: legal@prioai.co

Data Protection Inquiries: legal@prioai.co

Website: https://www.prioai.co

EU Representative: If you are located in the EU and need to contact a local representative, please use the contact information provided above.