At Redsuite.io, we are committed to protecting your privacy. This policy outlines the personal data we collect from you as a user of our service, why we collect it, how it is used, and your rights concerning that data. We will never sell your personal information.

For information on how our service processes public Reddit data on your behalf, please see our Data Policy and Data Processing Agreement (DPA).

1. Data Controller

Redsuite.io SRL, located at Via del Corso, 101 - 00186 Rome (RM), Italy, is the data controller for the personal information you provide when you sign up for and use our service.

2. Data We Collect and Legal Basis for Processing

We only collect the minimum information necessary to provide our service to you.

Account Information: When you sign up, we collect your Email Address. Legal Basis: Performance of a Contract. We need this to create your account, for login, for billing, and for essential service communications.
Billing Information: If you subscribe to a paid plan, we collect Company & Billing Information (such as name, address, and VAT number). Our payment processor, Stripe, will collect your payment details. We do not store your credit card information. Legal Basis: Performance of a Contract and Legal Obligation.
Security & Usage Data: For security purposes, we may log your IP address and login times. Legal Basis: Legitimate Interest. We need this to protect our service from malicious activity.

3. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights regarding your personal data:

The right to access: You can request a copy of the personal data we hold about you.
The right to rectification: You can request that we correct any inaccurate or incomplete data.
The right to erasure (the "right to be forgotten"): You can request that we delete your personal data. You can do this at any time by deleting your account from the dashboard.
The right to restrict processing: You have the right to request the restriction of your personal data processing under certain conditions.
The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
The right to object to processing: You have the right to object to our processing of your personal data, under certain conditions.

To exercise any of these rights, please contact us at [email protected].

4. International Data Transfers

While our primary servers are located in the European Union, we use sub-processors (like Stripe for payments and Brevo for emails) that may process your data outside of the EU. For any such transfers, we ensure that appropriate legal safeguards are in place, such as Standard Contractual Clauses (SCCs), to protect your data in accordance with GDPR requirements.

5. Data Retention

We will retain your account information as long as your account is active or as needed to provide you with our services. If you delete your account, all of your personal data will be permanently and immediately removed from our systems. We may retain certain information for a longer period if required to comply with our legal obligations.

6. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by sending an email to the address associated with your account or by posting a prominent notice on our website.

7. Contact Us

If you have any questions about this policy, please do not hesitate to contact our Data Protection Officer at [email protected].