Privacy Policy

Who is responsible for your data

Paqira, the operator of paqira.com and the Paqira services, is the controller of the personal information described in this Privacy Policy. You can contact us about privacy matters at [email protected].

This Privacy Policy applies to information collected through the Paqira website, applications, product communication, support channels and related services. It explains what we collect, why we use it, where it comes from, who receives it and the choices available to you.

Information we collect

We may collect information that you provide directly, such as your name, business email address, company details, messages, project requirements, files and other information needed to evaluate, provide or support the service.

When you sign in with Google or Microsoft, we receive an account identifier, email address, first name and last name from the provider. We use this information to create, find, link and secure your Paqira account. Paqira stores the provider account identifier with your account, but does not store the provider access token or refresh token after the sign-in request has completed. The information originates from the provider you select and is subject to the privacy settings of your Google or Microsoft account.

In limited cases, we may process billing, order or account information needed to manage paid services. Payment data may be handled by trusted payment providers and is processed only as required for payment, invoicing and compliance.

When a payment method is saved for future or automatic renewal payments, our payment provider stores the payment credentials. Paqira stores provider identifiers and limited card information, such as card brand, expiry date and last four digits, rather than the full card number or security code. We may also process the billing country, postal code, company name, tax identifier, automatic renewal preference and payment history needed to calculate taxes, initiate renewals, issue billing documents, handle payment failures and meet accounting or legal duties.

We also collect technical and usage information when you visit the website or use the service, including IP address, browser type, device information, operating system, language, referring pages, date and time of visits, feature usage, error data and similar log information.

Purposes and legal bases

We process personal information for the following purposes and legal bases:

• to create accounts, authenticate users, provide requested services, process purchases and provide support where processing is necessary to enter into or perform a contract with you;
• to issue invoices, maintain tax and accounting records and respond to binding legal requests where processing is necessary to comply with a legal obligation;
• to secure Paqira, prevent misuse, maintain service records, diagnose errors and improve essential service reliability based on our legitimate interests in operating and protecting the service;
• to measure website use with Google Analytics when you have given consent, which you may withdraw at any time through Cookie settings;
• to send marketing communication where permitted by law, based on consent where consent is required. Essential account, security, billing and legal messages are part of providing the service and are not marketing.

New accounts are subscribed by default to the Paqira newsletter, which may include product updates, tips and occasional offers. You can change this preference at any time in your account profile or unsubscribe using the link in a newsletter message. This preference does not affect essential account, security, billing or legal messages.

Where we rely on legitimate interests, we consider the effect of the processing on your rights and use the information only where those interests are not overridden by your rights and freedoms.

Product feedback

When you use the feedback form in Paqira, we collect the rating and comments you submit. We also associate the response with your Paqira account, workspace and workspace membership. We record the product used to submit the response and technical information such as your IP address, browser or application user agent, and submission date.

We use this information to understand how Paqira is used, identify problems, prioritize improvements and respond to your feedback. Please do not include confidential information or personal information about other people in free-text fields. Selecting the contact option allows us to contact you about that response and does not subscribe you to marketing communication.

Cookies and website analytics

We use cookies and similar technologies as described below. Strictly necessary technologies are used to provide security, authentication and consent management and do not require consent. Optional analytics is disabled until you consent. Refusing optional analytics does not affect access to the website or service.

Google Analytics may receive information such as a pseudonymous browser identifier, IP-derived location, device and browser details, language, visited page, referrer, events and timestamps. We use it to understand aggregate website use and improve the website. We do not send account names or email addresses to Google Analytics. Google Analytics is loaded only after consent to the Analytics category.

Cloudflare Web Analytics uses a beacon and browser Performance API information to measure page views and website performance. Cloudflare states that this product operates without cookies and does not collect or use visitors' personal data. Cloudflare may still receive ordinary network request information when its script and beacon are requested.

CookieYes provides the consent banner, stores your selections and may maintain a consent record. You can accept, reject or choose categories in the banner and can later withdraw or change your choice using the Cookie settings link in the website footer. Withdrawal does not affect processing that took place before it was withdrawn.

The Chatwoot support widget is loaded only after consent to the Functional category. If you use the widget, we process the messages and contact information you submit, together with conversation and technical metadata, to respond to your request and maintain support records.

Service providers and recipients

We disclose information only as needed to operate, support, secure and administer Paqira. Recipients may include:

• Google and Microsoft when you choose their authentication service;
• Google for consented website analytics;
• CookieYes for consent management;
• Cloudflare for website delivery, security, storage and privacy-focused web analytics;
• Chatwoot for the website support and communication widget;
• payment, accounting and invoicing providers for paid services;
• hosting, database, email, customer communication, security and technical support providers;
• employees, contractors, professional advisers and public authorities where access is necessary or legally required.

These providers may process information only for the relevant service and under applicable confidentiality, data protection and security obligations. We do not sell or rent personal information.

International transfers

Some providers, including Google, Microsoft, Cloudflare and CookieYes, operate internationally. Personal information may therefore be processed outside the European Economic Area. Where required, we rely on an adequacy decision, including the EU-US Data Privacy Framework for participating US organisations, or appropriate safeguards such as the European Commission's Standard Contractual Clauses. You may contact us for information about the safeguard relevant to a particular transfer.

Retention

We keep account and service information while an account or service relationship remains active and afterwards only for as long as needed for support, security, dispute handling and legitimate business records. Authentication provider identifiers are retained until the provider is unlinked or the account is deleted, subject to records we must retain by law. Login and security records are retained only for a period proportionate to fraud prevention, incident investigation and system security.

Billing, invoice and transaction records are retained for the period required by tax and accounting law. Feedback and its technical context are retained only for as long as reasonably necessary to analyse and act on it. Consent records and analytics cookies follow the periods listed above. When no fixed period applies, we determine retention using the purpose, sensitivity, security risk and applicable legal duties.

Data protection

We apply appropriate technical and organisational measures designed to protect information. No method of transmission or storage is completely secure, so we review and improve safeguards over time.

Your rights

Subject to the conditions in applicable law, you may request access to, correction or deletion of your information, restriction of processing, or a portable copy of information you provided. You may object to processing based on legitimate interests and may withdraw consent at any time. You also have the right to lodge a complaint with the data protection authority in the country where you live or work, or where you believe an infringement occurred. In Poland, the supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO).

To exercise a right or ask a privacy question, contact [email protected]. We may need to verify your identity before completing a request. Some information may need to be retained where required by law or where another lawful exception applies.

Paqira does not use the personal information described in this policy to make decisions based solely on automated processing that produce legal or similarly significant effects.

Children

Paqira is intended for business users and is not directed to children. We do not knowingly collect personal information from children. If you are under 18, please do not create an account or send personal information to us.

Third-party privacy information

You can learn more about the providers' own processing in the Google Privacy Policy, Microsoft Privacy Statement, Google Analytics privacy information, Cloudflare Privacy Policy, CookieYes Privacy Policy and Chatwoot Privacy Policy. Those providers' notices supplement this policy and do not replace Paqira's responsibilities for its own processing.

Changes to this policy

We may update this Privacy Policy as Paqira, our services or legal requirements evolve. The current version and its update date will be published on this page. We will provide additional notice where a change materially affects how we use personal information.