Privacy Policy

Controller: IDOTTA LIMITED, registered in England and Wales under company number 17478457, registered office Suite 11251, 5 Brayford Square, London E1 0SG, United Kingdom. Privacy questions: info@idotta.com.

• Contact and demo requests: your name, work email, company and message.
• Panel accounts: username, email address, role, the customer account you belong to, a hashed password, and security events such as sign-ins and password resets.
• SMS sign-in codes: if you choose them, your mobile phone number. We delete it when you turn SMS codes off.
• Billing: company name, balance top-ups and usage records. We do not store full card numbers; at most the last four digits are kept to identify a payment.
• Card payments: processed by Stripe on its own payment page; the card number never reaches our servers. For a card you save for automatic top-ups we keep only its brand, last four digits and expiry date.
• Technical data: IP address, browser user agent and request logs needed to deliver and secure the service.
• Preferences: the language and theme you choose in the panel, and your browser's time zone (so times show in your local time), stored in cookies.
• Correspondence: emails you exchange with us — addresses, subject, content and attachments.

• Answering enquiries and providing demos — our legitimate interest in responding to business requests, or steps taken before a contract.
• Providing the panel and the Services to our customers — our contract with the customer and our legitimate interest in administering its users.
• Securing our systems, preventing abuse and investigating incidents — legitimate interest and, where applicable, legal obligation.
• Billing and accounting — contract and legal obligation.
• Service and security emails such as invitations, password resets and service changes — contract and legitimate interest. We do not send marketing emails without consent.

We do not sell personal data and do not use advertising or cross-site tracking. Our websites use no analytics or advertising cookies.

We share personal data only with service providers acting on our instructions (listed on our Sub-processors page, such as our hosting and email delivery providers), with professional advisers, and with authorities where the law requires. If our business is reorganised or sold, data may pass to the successor under the same protections.

Our servers are in Germany (EU). Some providers, such as our email delivery provider, may process data in the United States. When data leaves the UK or the EEA, we rely on adequacy decisions or standard contractual clauses, including the UK International Data Transfer Addendum. Our payment provider Stripe may also process billing data in the United States.

• Contact requests: up to 24 months after our last exchange.
• Panel accounts: while the account is active, and up to 12 months after deletion for security purposes. The audit trail of actions taken in the panel (username, role, IP address and the action) is kept for 6 years and cannot be altered.
• Correspondence: 6 years after the email was sent or received, then deleted automatically.
• Billing records: as long as tax and accounting law requires (in the UK, generally 6 years).
• Server logs: kept for 12 months to detect and investigate security incidents, then deleted automatically. Access logs contain IP addresses; application logs contain no identity data.

Depending on where you live, you may have the right to access, correct, erase, restrict or port your data, to object to processing based on legitimate interests, and to withdraw consent. Write to info@idotta.com; we reply within one month. You can also complain to a supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk) — or to the authority where you live or work.

We protect personal data with the measures described on our Security page, including encryption in transit, access control and audit logging.

Our websites and panel are intended for business users and are not directed at children.

We publish updates on this page and change the date above. We announce material changes to panel users by email.