Privacy · privacy-2026-07-10
Prokkari SaaS Privacy Notice
How personal data is processed in the Prokkari cloud service.
Updated 2026-07-10
1. Controller and contact
The provider's official controller details will be completed before public launch.
For internal organization project data, the subscriber is usually the controller and Prokkari acts as a processor.
2. Data we process
We process user name, email, role, organization, login and security data, and service data related to projects, time entries, resourcing and offers.
Payment data is processed by Stripe. Prokkari stores Stripe customer and subscription identifiers to connect billing to the organization.
With consent, Google Ads may process the page URL and title, browser and device data, online identifiers, and visit and conversion data for advertising measurement.
3. Purposes and legal bases
Data is used to provide the service, manage users, secure the service, handle billing, provide support and meet legal obligations. With consent, data is also used to measure Google Ads advertising and conversions.
Legal bases include contract performance, legitimate interests in securing and improving the service, and legal obligations where applicable. Google Ads measurement is based on consent, which can be withdrawn in cookie settings.
4. Retention
Account and organization data is kept for the duration of the service relationship. Billing and accounting material is retained as required by applicable law.
Project data from an ended subscription is deleted or returned according to the agreed process when retention is no longer needed.
5. Recipients and transfers
Data may be processed by trusted providers such as hosting, email, logging and payment services. With consent, Google processes advertising measurement data under its own terms.
If data is transferred outside the EU/EEA, appropriate safeguards such as EU Standard Contractual Clauses are used where required.
6. Data subject rights
Data subjects may have rights to access, rectify, erase, restrict or object to processing, and to lodge a complaint with a supervisory authority. Consent can be withdrawn at any time through the website's cookie settings.
Requests concerning organization content are primarily handled through the subscriber organization.
