Privacy Policy

Data we collect

We collect account information (name, email, company), property and vendor details you enter, certificate files you upload, reminder and notification settings, and basic usage data needed to operate the service.

How we use your data

We use your data solely to operate COI Guard: tracking certificate expirations, sending reminder emails, generating compliance reports, and providing customer support. We do not sell your data or use it for advertising.

Legal basis for processing

We process your data to perform our contract with you (providing the service you signed up for), to comply with legal obligations such as billing records, and based on your consent where required, for example for optional email communications.

Processors & subprocessors

We use Lovable Cloud, backed by Supabase, for application hosting, authentication, database, and file storage. We use Stripe to process subscription payments. We use Brevo to send transactional emails, such as account verification, password resets, subscription confirmations, and compliance reminders. These providers only process data on our behalf and under their own security and privacy commitments.

Document security

Uploaded COI documents are stored securely and are accessible only to authorized users belonging to the same organization.

Data retention

We retain your data for as long as your account is active. If you delete your account, your company data is kept for 30 days and then permanently removed, unless a longer period is required by law (for example, billing records).

Your rights (GDPR)

If you are located in the EU/EEA or another jurisdiction with similar protections, you have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us using the details below.

Cookies

COI Guard only uses essential authentication cookies required to keep you signed in. We do not use tracking cookies, advertising pixels, or third-party analytics scripts.

International data transfers

Some of our infrastructure providers may process data outside your country while applying appropriate legal safeguards.

Data controller

Contact

For privacy questions or to exercise your rights, email us at clienti@coi-guardian.com.