Privacy Policy

1. Data controller

Piklok S.r.l., Portici (NA), Italy, VAT 09545701212, is the data controller for the personal data described in this policy. You can reach us at hello@storadata.com for any privacy request.

2. What we collect

Account data: name, email address, and organization details you provide when signing up.

Content you upload: documents and the metadata you enter in folder forms (e.g. supplier names, dates, categories) — this may include personal data of third parties if you choose to include it in the documents or metadata you upload.

Usage data: basic technical logs (timestamps, IP address, browser type) generated automatically when you use the service, used for security and troubleshooting.

3. Why we process it (legal basis)

To provide the service you signed up for (performance of a contract): account data, uploaded content, authentication.

To keep the service secure and working correctly (legitimate interest): technical logs, abuse prevention.

Where you have given it (consent): any optional communications you opt into, such as product updates.

4. Who we share it with

We share personal data only with the infrastructure providers needed to run Storadata, acting as our processors under data processing agreements:

Supabase, Inc. — database, authentication, and backend functions.

Cloudflare, Inc. — object storage for uploaded files (Cloudflare R2).

Hetzner Online GmbH — hosting for the server that powers in-browser document editing.

We do not sell personal data, and we do not share it with third parties for their own marketing purposes.

5. International transfers

Where a provider processes data outside the European Economic Area, we rely on the safeguards recognised under GDPR (such as the European Commission's Standard Contractual Clauses) as implemented by that provider.

6. How long we keep it

Account and content data is kept for as long as your organization's account is active. After account deletion, content is retained for a limited grace period (to allow recovery from accidental deletion) and then permanently deleted, including from backups within a reasonable rotation period.

7. Your rights

Under the GDPR, you have the right to access, rectify, erase, or port your personal data, to restrict or object to certain processing, and to withdraw consent where processing is based on it. You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali).

To exercise any of these rights, contact us at hello@storadata.com.

8. Cookies

This website uses a single functional cookie (NEXT_LOCALE) to remember your language choice. It does not track you across other websites and is not used for advertising. We do not currently use analytics or advertising cookies.

9. Security

We rely on encryption in transit (HTTPS) and at rest where offered by our infrastructure providers, access controls scoped to each organization's data, and authenticated, logged access to production systems.

10. Changes to this policy

We will update this page if our practices change, and notify account administrators of material changes.

11. Contact

Piklok S.r.l. — Portici (NA), Italy — VAT 09545701212 — hello@storadata.com