Privacy Policy

Driveon sp. z o.o. ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share and protect personal data when you visit our website or use our revenue intelligence platform (the "Service").

1. Data controller

The data controller is Driveon sp. z o.o., Jerzego Michałowicza 100, 02-495 Warsaw, Poland (KRS —, NIP —). For any privacy-related question contact us at [email protected].

2. Information we collect

• Account data — first name, last name, work email, encrypted password.
• Billing data — company name, billing address, VAT/NIP, payment method metadata (we do not store card numbers).
• Usage data — pages viewed, features used, IP address, browser, device, language.
• Conversation data — call recordings, transcripts, emails and meetings you choose to ingest into the Service.
• Cookies — see our Cookie Policy.

3. Lawful bases (Art. 6 GDPR)

• Performance of a contract — to deliver the Service you subscribed to.
• Legitimate interest — product analytics, security, anti-abuse.
• Consent — marketing communications and non-essential cookies.
• Legal obligation — accounting, tax, response to lawful authority requests.

4. How we use your data

• Provide, operate and improve the Service.
• Process orders, invoices and bank-transfer payments.
• Provide customer support and security monitoring.
• Send service updates and, with your consent, marketing.

5. Sharing

We share data only with vetted sub-processors (cloud infrastructure, transactional email, error monitoring) under data processing agreements. We never sell personal data. A current sub-processor list is available on request.

6. International transfers

Personal data is primarily processed inside the European Economic Area. Where transfers outside the EEA occur, we rely on Standard Contractual Clauses approved by the European Commission.

7. Retention

Account data is retained for the lifetime of your subscription and up to 12 months after termination. Invoices are retained for 5 years for tax purposes. Conversation data is retained according to the retention setting you configure in the workspace.

8. Your rights

• Access, rectification, erasure and portability of your data.
• Restriction or objection to processing.
• Withdrawal of consent at any time.
• Lodge a complaint with the Polish supervisory authority (UODO, uodo.gov.pl).

9. Security

We use TLS in transit, AES-256 at rest, role-based access control, audit logs, periodic penetration tests and SOC 2 / ISO 27001 aligned controls.

10. Changes

We may update this Policy. Material changes will be communicated by email or in-product notice at least 30 days before they take effect.