Privacy Notice — Dotify Online S.L.
Last Updated on November 25, 2024.
1. Scope
This Notice explains how we collect, use, share, and protect personal data when you use Dotify and the GenSuite tools.
2. What we collect
Account & identity: name, work email, password hash, company, role, country.
Usage data: pages viewed, searches, clicks, shortlisted items, device/browser info, IP (approximate location), timestamps.
Workspace content: saved notes, preferences, stacks, uploads.
Interactions with Sellers: requests for demo/quote/intro; messages sent via the platform.
Billing: plan, transaction IDs, limited payment metadata (handled by our payment processor).
Support: tickets, recordings (if consented), diagnostics.
Cookies/SDKs: essential cookies; with consent, analytics and performance cookies (see Cookie Notice).
3. Purposes & legal bases (GDPR)
- •Provide the Services (account, core functionality, security, payments). Legal basis: Contract (Art. 6(1)(b)).
- •AI features & recommendations (GenMatch/GenStack/GenDash/GenChat; compute GenScore; prevent abuse). Legal basis: Legitimate interests (Art. 6(1)(f)) to operate and improve a B2B platform; where required, Consent for certain cookies/SDKs.
- •Company-level vendor signals (no personal data): share company name and non-personal engagement with Sellers for relevance. Legal basis: Legitimate interests (Art. 6(1)(f)).
- •Introductions (on your request): share your name, company, work email with the selected Seller to arrange a response. Legal basis: Contract.
- •Marketing (our own): send product updates or offers to your work email; you can opt out anytime. Legal basis:Legitimate interests (B2B). For non-essential emails in certain jurisdictions we may rely on Consent.
- •Compliance & fraud prevention. Legal basis: Legal obligation (Art. 6(1)(c)) and Legitimate interests.
4. Sharing your data
We share personal data with:
• Processors (hosting, email, analytics, support, payments) under GDPR Art. 28 agreements.
• Sellers you select for introductions (name, company, work email). For passive alerts we share company-onlysignals (no names/emails).
• Professional advisors and authorities where legally required.
We do not sell personal data.
5. International transfers
We may transfer personal data outside the EEA/UK using approved safeguards (e.g., EU Standard Contractual Clausesand UK Addendum) plus supplementary measures where needed. You can request a copy of relevant safeguards.
6. Retention
We keep personal data only as long as necessary:
• Account data: life of the account + up to 24 months.
• Logs & telemetry: 12–24 months.
• Contracts/billing: 6–10 years (legal obligation).
• Support records: up to 24 months.
We may anonymize data for analytics.
7. Your rights (EEA/UK)
You can request access, rectification, erasure, restriction, portability, or objection (including to profiling for direct marketing). Where processing is based on consent, you can withdraw it at any time. To exercise rights: privacy@dotify.example. You may lodge a complaint with your data protection authority (in Spain: AEPD).
8. Automated decision-making & profiling
Dotify uses algorithmic systems to rank listings, suggest matches/stacks, and compute GenScore. These processes affect information display but do not make binding decisions about you. You can request meaningful informationabout logic, factors considered, and human review for significant concerns.
9. Security
We apply administrative, technical, and organizational measures appropriate to the risk (encryption in transit/at rest where applicable, access controls, logging). No system is 100% secure; report issues to security@dotify.example.
10. Children
Our Services are for business users and not intended for children under 16. We do not knowingly collect their personal data.
11. Cookies & similar tech
We use essential cookies for authentication and security. With your consent, we use analytics/performance cookies. See our Cookie Notice for details and controls.
12. Third-party links
Links to third-party sites/services are outside this Notice; their privacy terms apply.
13. Changes
We may update this Notice. Material changes will be communicated in-product or by email.
14. Contact
Controller: Dotify Online S.L.
Address: Calle Sand 10, #37, 29603 Marbella, Spain
Privacy: privacy@dotify.online.com
