Privacy Policy

In this section we will explain everything that, as our User, you need to know about our Privacy Policy and how your data is managed and used. We would also like to inform you that we are completely GDPR-compliant, so your data is as safe with us as it can be.

Please take a moment to read the following paragraphs. They are important as they concern you.

1. Definitions

In the process of getting you acquainted with our Privacy Policy we will use the following definitions. Whenever you read "we," "us," "our," and "Stillio" we are referring to Stillio B.V. (Arnhemseweg 2, 3817 CH Amersfoort, The Netherlands). We provide you with an automated screenshot and web archiving service that, among other purposes, allows you to easily archive important web pages, keep records for regulatory compliance, track competitors, improve SEO ranking insights, verify ads, monitor copyright infringements, track trends and capture your online digital heritage ("the Service" or "our Service"). When we say "User", we are referring to the person or entity that is registered with us to use the Service. When we say "you," we are referring either to a User or to any other person who makes use of our website. "Third parties" are entities that do not make part of the Stillio-User relationship, but are linked to the service provided by us.

We offer the Services on our website https://www.stillio.com to which this Privacy Policy applies (the "Website"). The "Website" includes the Website itself, and any web pages, interactive features, applications, widgets, blogs, social networks, or other online, mobile, or wireless offerings that post a link to this Privacy Policy, whether accessed via computer, mobile device, or other technology, manner or means.

2. What is the GDPR and what does it say?

GDPR stands for General Data Protection Regulation. It's a new European rule that ensures a high level of protection of personal data when any operation is performed on it (processed) by the companies and businesses.

The GDPR requires us to inform you about which data do we collect, how we manage it, handle and process it, and what your rights are in this regard.

2.1 Which personal data do we collect?

We only ask you for the data that we deem necessary in order to provide you with the best service, and in particular:

1. your full name
2. email address
3. (Company) details that need to be included on the invoice

As for the financial details, we collect and store:

1. credit card issuer
2. last four digits of the credit card number
3. credit card country

We do not hold the full credit card number nor any other financial data. Stripe, our payment processor, holds a GDPR-compliant certification.

We rely on your express consent to process all the above mentioned data.

2.2 How do we manage your data?

Once you provide us with your personal data, we include it in a secure database. Then we use it for the following purposes:

1. Identify the User that is signing up to our service
2. Users log in service
3. Add, edit and delete URLs and settings
4. Store the user's preferences
5. Contact the User with payment and subscription info
6. Send invoices
7. Provide you with transactional notifications such as (un)subscribing, registration confirmations, confirmation of account changes, or emails relating to a User's account or changes in the site terms or policies.

In addition, we would like to make you aware of the fact that upon certain events, such as sign up or the e-mail exchange when you contact us we collect that data as well.

Only the Chief Executive Officer and the Chief Technical Officer of Stillio can access your personal data, and they would only do so if it is strictly necessary.

2.3 What are your rights as our User?

The GDPR grants you the following rights.

You have the right to:

1. ask us whether your personal data is being used or processed by us and which type (e-mail, full name, address, etc.), for which purpose, and if we're disclosing it or we will in the future it and to whom.
2. have the inaccurate data that concerns you rectified.
3. "be forgotten": this means that we will erase your personal data, and you can request us to do so if:

1. we don't need it anymore,
2. you withdraw your consent,
3. it has been unlawfully processed,
4. there is such a legal obligation upon us, which arises from a national or EU norm.

1. restrict the processing of your personal data if:

1. you think that the data that we hold or process is inaccurate (only during the time that would take us to verify and fix the issue),
2. the processing of your personal data is unlawful, and you prefer to restrict the use instead of erasing it,
3. we no longer need your personal data, but you need us to have it for the establishment, exercise or defence of legal claims.

1. object to the processing your personal data: we will no longer be able to use your personal data for the purposes for which we collected them. You can also object to the use of your personal data for direct marketing purposes.
2. to not be subject to a decision based solely on automated processing: if a decision that has binding effects and concerns you is made, you have the right of this not to happen.
3. be informed, in case of personal data breach (security breach in our systems), of what happened and which measures we have implemented to fix or alleviate the problem.
4. lodge a complaint with a supervisory authority. Each Member State of the European Union appoints an institution as the supervisory authority, and you can address them concerning a complaint.

Furthermore, if you make use of the above mentioned rights, we have to provide you with a response within one month.

We would like you to know that your personal data will be automatically erased from our databases after 3 years in case of inactivity of if you cancel your subscription with us.

3. Third parties

In order to provide you with a better service, we work with the following parties, out of which, some collect data for us. All of them hold a GDPR compliant certification:

1. Google
2. Bing
3. Amazon
4. HelpScout
5. Helpwise
6. Stripe
7. SparkPost
8. Mailgun
9. Postmark
10. MailChimp
11. Mixpanel
    
12. LogDNA
13. Datadog
14. Albacross
15. Dropbox
16. Encharge
17. Pipedrive
18. Facebook
19. Linkedin
20. Twitter
21. Quora
22. Hotjar

We do not disclose your personal data with any third party without your express consent. The above list of Third Parties may be amended from time to time.

4. Further questions?

Do you have any further questions about how your data is handled, or you would like to know more about your rights and how you can exercise them? Contact us via our official web form and we will get back to you shortly.

‍