Privacy policy

Controller and contact

Suite.coffee manages processing related to the public website, accounts, subscriptions and general platform security. You can ask privacy questions or exercise your rights through the contact form by selecting Privacy and data.

Data we may process

The categories depend on how you use the platform.

• Account and access data: name, email, protected credentials, language and authentication logs.
• Organization and billing data: company, tax identifier, address, country, province or region, currency, plan, invoices and payment references.
• Operating data entered in apps: customers, professionals, employees, appointments, documents, payments, bookings, tickets or other service entities.
• Communications and support: messages, incidents, email preferences and information you choose to attach.
• Technical and security data: IP address, browser, device, access dates, activity logs and events required to prevent abuse.

Purposes and legal bases

We use data to create and administer accounts, provide apps and perform the contract; comply with tax, accounting and legal duties; protect the platform and prevent fraud on the basis of legitimate interests; answer requests; and send optional communications where consent or another valid basis applies. You may withdraw consent without affecting earlier processing.

Data managed within an app

When a business uses Suite.coffee to manage information about its customers, employees, attendees or other third parties, that business will normally determine the purpose of the processing and must inform those people. Suite.coffee processes that information to provide the service under the account configuration and instructions, without using it for incompatible purposes of its own.

Recipients, providers and transfers

Information is shared only with providers needed to operate the platform—such as infrastructure, email, security or payment services—under suitable obligations; with connected services activated by the user; and with authorities where legally required. Where a provider processes data outside the European Economic Area, the required international-transfer safeguards will apply. We do not sell personal data.

Retention periods

Data is kept while an account or instance is active and for periods needed to comply with legal duties, resolve claims, maintain backups and protect security. Enquiries are kept for the time needed to resolve them; marketing preferences until withdrawn; and tax records for legally required periods. Information is then securely deleted or anonymized.

Your rights

You may request access, correction, erasure, restriction, objection and portability where applicable, and withdraw consent. You may also complain to the competent data protection authority. To protect the person concerned, we may request proportionate information needed to verify identity.

Security, children and changes

We apply technical and organizational measures designed to protect confidentiality, integrity and availability, although no system eliminates all risk. The service is not directed to children acting without the required authorization. This policy may change when features, providers or legal requirements change; the displayed date identifies the current version.