Tuttiva

Draft — the final text will be published before the paid launch. Last updated: November 12, 2026

Privacy Policy

1. Controller

[Company name] sp. z o.o., [Street and number], [Postal code] [City], Poland, KRS [number], NIP [number], REGON [number], is the controller of the personal data described here. Contact: support@tuttiva.si.

2. What we process and why

  • Account data — name, e-mail address, password hash, two-factor settings, sign-in sessions: to provide your account (contract, Art. 6(1)(b) GDPR).
  • Workspace data — organisations, members, roles, settings, business context, rules, alerts and the audit log of changes: to provide the service (contract).
  • Data from connected platforms — advertising and analytics data from Google and Meta that you connect, and the access tokens (stored encrypted): to show, monitor and change your campaigns on your instruction (contract).
  • Billing data — company name, address, VAT number and payment details, handled by Stripe; we keep the plan and invoice references: to bill you and meet tax obligations (contract, legal obligation, Art. 6(1)(c)).
  • Technical data — IP address, browser, security logs: to keep the service secure (legitimate interest, Art. 6(1)(f)).

3. Google user data

Tuttiva’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google data only to provide the features you request; we do not sell it, use it for advertising, or let people read it except with your consent, for security, or where the law requires.

4. Who receives data

  • Hosting: OVHcloud ([data centre location]).
  • Payments: Stripe Payments Europe, Ltd.
  • Google and Meta — only the requests needed for the features you use, under your authorisation.
  • AI assistants you connect receive the data they request through Tuttiva, under your authorisation and their own terms.

Where data is processed outside the EEA, we rely on adequacy decisions or standard contractual clauses.

5. How long we keep data

While your account or workspace exists, and up to 30 days after it is closed; invoices and tax records as long as the law requires; security logs for up to 12 months.

6. Cookies

We use only cookies needed for the service: the sign-in session, sign-in protection, and your language and theme choice. We use no advertising or analytics cookies.

7. Your rights

You can ask for access, correction, deletion, restriction, portability, and object to processing based on legitimate interest. Write to support@tuttiva.si. You can also complain to the President of the Personal Data Protection Office (UODO) in Poland.