Pavoot

The clause allows indefinite, perpetual, or necessity-based retention.

“Email correspondence: kept for as long as necessary to handle your request, then archived for up to 3 years. Demo and form submissions: retained while we evaluate the opportunity and for up to 2 years afterwards, unless you ask us to delete them sooner. Analytics data: aggregated and retained for up to 14 months. Server logs: retained by our hosting provider for up to 30 days for security and abuse prevention.”

The clause permits sale of personal data or information.

“We process personal data for the following purposes and legal bases: To operate and improve the website (legitimate interest, Art. 6(1)(f) GDPR): aggregate analytics, performance monitoring, and security. To respond to you (legitimate interest or pre-contractual measures, Art. 6(1)(b) and (f) GDPR): handling your emails, demo requests, and form submissions. To send you information you asked for (consent, Art. 6(1)...”

The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.

“We share personal data only with service providers who help us run the website and our business. Each provider is bound by a data processing agreement and may only process data on our documented instructions. Cloudflare : website hosting, DNS, and edge security (USA / global edge). Google (Workspace, Apps Script, Sheets) : email inbox, form delivery, and storing form submissions (EU / USA). Cal.com : scheduling de...”

The clause permits using submitted content for training, development, or model/service improvement.

“We apply appropriate measures to protect personal data, including sensitive personal data such as names, email addresses, and phone numbers: Encryption in transit: all data is transmitted over encrypted TLS/HTTPS connections. Encryption at rest: personal data is encrypted at rest on our infrastructure. Credential protection: passwords and OAuth tokens are hashed or encrypted at rest, never stored in plaintext. Acc...”

Latest stance: sale or sell on privacy data use

“We process personal data for the following purposes and legal bases: To operate and improve the website (legitimate interest, Art. 6(1)(f) GDPR): aggregate analytics, performance monitoring, and security. To respond to you (legitimate interest or pre-contractual measures, Art. 6(1)(b) and (f) GDPR): handling your emails, demo requests, and form submissions. To send you information you asked for (consent, Art. 6(1)(a) GDPR): event invitations, updates, or follow-ups you specifically requested. To comply with legal obligations (Art. 6(1)(c) GDPR): accounting, tax, and responding to lawful requests from authorities. We do not sell your personal data and we do not use it for automated decisions that have legal or similarly significant effects on you.”

Latest stance: third party or vendor sharing on privacy data use

“We share personal data only with service providers who help us run the website and our business. Each provider is bound by a data processing agreement and may only process data on our documented instructions. Cloudflare : website hosting, DNS, and edge security (USA / global edge). Google (Workspace, Apps Script, Sheets) : email inbox, form delivery, and storing form submissions (EU / USA). Cal.com : scheduling demo calls (EU / USA). Ploy : first-party website analytics and site hosting platform. YouTube (Google) : embedded launch video playback. When you click play, YouTube may set its own cookies under its privacy policy . For our product (the Pavoot platform) we use additional sub-processors. Those are listed in our Data Processing Agreement .”

Latest stance: training permitted on training use

“We apply appropriate measures to protect personal data, including sensitive personal data such as names, email addresses, and phone numbers: Encryption in transit: all data is transmitted over encrypted TLS/HTTPS connections. Encryption at rest: personal data is encrypted at rest on our infrastructure. Credential protection: passwords and OAuth tokens are hashed or encrypted at rest, never stored in plaintext. Access controls: access is restricted under least-privilege controls and data is logically isolated per organization. Minimization: we do not collect financial, health, or precise-location data through this website. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we work to protect your information and to limit access to it. Limited Use. Pavoot's use and transfer of information received from Google APIs, including any raw or derived user data, will adhere to the Google API Services User Data Policy , including the Limited Use requirements. We do not transfer Google user data to third-party AI services to train or improve generalized AI or machine-learning models.”

Latest stance: indefinite or necessity based on data retention

“Email correspondence: kept for as long as necessary to handle your request, then archived for up to 3 years. Demo and form submissions: retained while we evaluate the opportunity and for up to 2 years afterwards, unless you ask us to delete them sooner. Analytics data: aggregated and retained for up to 14 months. Server logs: retained by our hosting provider for up to 30 days for security and abuse prevention.”