GDPR

This page summarizes the legal bases we rely on, your rights under the GDPR, the providers involved and how to reach us. The Privacy Policy has the full detail.

We rely on these legal bases:

• Contract: we process account and business data to provide the service you signed up for.
• Legitimate interests: keeping the service secure and preventing fraud and abuse, including keeping a record of actions taken in the app.
• Consent: analytics and advertising measurement on our website and app, for visitors in the European Union, the EEA, the United Kingdom and Switzerland. You can accept or reject them in the cookie banner.

Under the GDPR you have these rights:

• Right of access: get a copy of the personal data we hold about you.
• Right to rectification: have inaccurate or incomplete data corrected.
• Right to erasure: ask for your personal data to be deleted. Closing your account follows the retention timeline in the Privacy Policy.
• Right to portability: ask for your data in a structured, commonly used, machine-readable format.
• Right to object: object to processing based on our legitimate interests.
• Right to restriction: ask us to restrict processing while a dispute is resolved.
• Right to withdraw consent: withdraw your cookie consent at any time.

Write to us using the contact details below. We reply within 30 days. If you are not satisfied with our answer, you can complain to your supervisory authority. In France, this is the CNIL.

• French data protection authority: cnil.fr

We rely on these providers to run Epidom. Some act on our behalf, others have their own responsibilities under their own policies. The Privacy Policy explains what each one does.

• Vercel Privacy policy
• Neon Privacy policy
• Cloudflare (R2) Privacy policy
• Stripe Privacy policy
• Xendit
• Resend Privacy policy
• Inngest Privacy policy
• Google Privacy policy
• Meta Privacy policy
• OpenAI Privacy policy
• Pusher
• MagicBell Privacy policy
• Browser push services
• OpenStreetMap (Nominatim) Privacy policy

Some of our providers, and the servers they use, are outside the European Union and the European Economic Area. When personal data is transferred outside the EU or the EEA, the transfer has to rely on a mechanism the GDPR recognizes, such as an adequacy decision or standard contractual clauses.

• We do not list the safeguards of each provider on this page. Each provider describes its own data processing terms and transfer mechanisms in its own documentation, linked above.
• If you want to know more about a specific provider, contact us.

For any data protection question or request:

• Full details: Privacy Policy

Email: cro@prionation.io, ceo@prionation.io, consult@prionation.io

This page is a summary and does not replace the Privacy Policy.