Privacy Policy

1. Who we are

Pranory is operated by Pranory Technologies. We provide an AI-powered opportunity intelligence platform for commercial sales teams. All personal data is processed and stored on EU infrastructure.

For data protection questions, contact us at privacy@pranory.com.

2. Data we collect

We collect only the data necessary to provide the service.

• Account data: Name, email address, and password (hashed) when you register.
• Workspace data: Workspace name and settings you configure.
• Usage data: Actions you take within the product (territories created, discoveries run, leads enriched) — used to improve the service and calculate usage against your plan limits.
• Provider credentials: API keys for your connected discovery and AI providers, stored encrypted and never shared.
• Billing data: Processed by Stripe. We store only a Stripe customer reference — no raw card data.
• Business data you discover: Information about third-party businesses discovered through the product. This is publicly available business data, not personal consumer data.

3. How we use your data

• To provide the service: Processing your requests, running discoveries, storing your leads and pipeline.
• To manage your account: Authentication, billing, plan enforcement, and support.
• To improve the product: Aggregate usage analytics to understand which features are used and where the experience can improve.
• To communicate with you: Transactional emails (account, billing, security alerts). Marketing emails only with explicit consent.

4. Legal basis (GDPR)

• Contract performance (Art. 6(1)(b)): Processing necessary to deliver the service you signed up for.
• Legitimate interest (Art. 6(1)(f)): Product analytics, security monitoring, and fraud prevention.
• Consent (Art. 6(1)(a)): Marketing communications. You can withdraw consent at any time by unsubscribing.
• Legal obligation (Art. 6(1)(c)): Compliance with financial regulations and tax law.

5. Data storage and transfers

All data is stored on EU infrastructure. We do not transfer personal data outside the European Economic Area unless required by law or covered by appropriate safeguards (Standard Contractual Clauses).

Third-party processors we use (Stripe for billing, Postmark for transactional email) are contractually bound by data processing agreements and operate GDPR-compliant infrastructure.

6. Data retention

• Active accounts: Data is retained for as long as your account is active.
• Deleted accounts: Personal data is deleted within 30 days of account deletion. Anonymised usage data may be retained for analytics.
• Billing records: Retained for 7 years to comply with financial regulations.

7. Your rights (GDPR)

Under GDPR you have the right to:

• Access (Art. 15): Request a copy of the personal data we hold about you.
• Rectification (Art. 16): Correct inaccurate data.
• Erasure (Art. 17): Request deletion of your personal data ("right to be forgotten").
• Portability (Art. 20): Receive your data in a structured, machine-readable format.
• Restriction (Art. 18): Restrict how we process your data in certain circumstances.
• Objection (Art. 21): Object to processing based on legitimate interest.

To exercise any of these rights, email privacy@pranory.com. We will respond within 30 days.

You also have the right to lodge a complaint with your local supervisory authority (in Spain: AEPD).

8. Cookies

We use cookies for authentication and basic product functionality. For details, see our Cookie Policy.

9. Changes to this policy

We will notify you by email of any material changes to this policy at least 14 days before they take effect. Continued use of the service after that date constitutes acceptance of the updated policy.

10. Contact

For privacy questions: privacy@pranory.com