Privacy Policy

1. Introduction

This Privacy Policy explains how Majolio ("we", "us", or "our") collects, uses, discloses, and protects personal information when you use our platform, websites, and related services. It applies to visitors, account holders, and individuals whose information is submitted by our customers.

We are committed to handling personal information responsibly and in line with applicable data protection law. By using the Service, you acknowledge the practices described in this policy.

2. Information We Collect

We collect information you provide directly, information generated as you use the Service, and limited information from cookies and similar technologies. The categories of information we handle include:

• Account information: your name, email address, organisation name, role, and login details.
• Business data: clients, contacts, deals, projects, invoices, expenses, and other records you enter.
• Payment and billing information: subscription plan, billing contact, and transaction records. Card payments are handled by our payment providers and are not stored by us.
• Usage and device data: IP address, browser and device type, pages viewed, and actions taken in the Service.
• Communications: messages you send to support and your preferences.

3. How We Use Information

We use personal information to provide, operate, and maintain the Service; to create and manage accounts; to process subscriptions and payments; and to provide customer support.

We also use information to improve and develop the Service, to send service and security notices, to prevent fraud and abuse, and to comply with legal and tax obligations.

• Provide and secure your account and the Service
• Process payments and issue invoices
• Respond to support requests
• Send important service and security updates
• Detect, prevent, and investigate misuse
• Meet legal, accounting, and tax requirements

4. Legal Bases for Processing

Where required, we rely on a valid legal basis to process personal information. Depending on the context, we process information because it is necessary to perform our contract with you, because we have a legitimate interest, because you have consented, or because we must comply with the law.

• Performance of a contract: to provide the Service you have requested.
• Legitimate interests: to secure, improve, and grow the Service.
• Consent: where you have agreed to a specific use, such as marketing.
• Legal obligation: to comply with tax, accounting, and other laws.

5. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, secure the Service, and understand how it is used. Some cookies are essential to the operation of the Service, while others are optional.

You can control cookies through your browser or device settings. Disabling essential cookies may prevent parts of the Service from working correctly. Where required by law, we will ask for your consent before setting non-essential cookies.

6. How We Share Information

We share personal information with service providers who help us run the Service, such as hosting, payment, email, analytics, and support providers. These providers process information on our behalf and under contract.

We may also share information with your organisation and its administrators where your account belongs to a workspace, with professional advisers, and with authorities where required by law. We do not sell your personal information.

We may disclose information as part of a merger, acquisition, or sale of assets, in which case we will take steps to protect the information and notify you where required.

7. Data Retention

We keep personal information for as long as your account is active or as needed to provide the Service. When you or your organisation close an account, we delete or anonymise information within a reasonable period, unless we are required to keep it.

We may retain limited information after account closure where necessary to comply with tax, accounting, and legal obligations, to resolve disputes, or to enforce our agreements.

8. Security

We use reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, or alteration. These measures include encryption in transit, access controls, and monitoring.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential and for telling us promptly if you suspect a security issue.

9. International Data Transfers

We may store and process information in countries other than the one where you live, including countries where our service providers operate. These countries may have different data protection laws.

Where we transfer personal information internationally, we take steps to ensure it receives an adequate level of protection, using appropriate safeguards such as contractual clauses, or as otherwise permitted by law.

10. Your Privacy Rights

Depending on where you live, you may have rights over your personal information. These may include the right to access, correct, delete, restrict, or object to processing, and the right to data portability.

To exercise these rights, contact us at support@majolio.com. We may need to verify your identity, and some rights are subject to legal exceptions. If your account was created by an organisation, we may refer your request to its administrators.

• Access a copy of the personal information we hold about you.
• Correct information that is inaccurate or incomplete.
• Request deletion of information we no longer need.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Request a portable copy of information you provided.

11. Children's Privacy

The Service is intended for businesses and professional use, and is not directed to children. We do not knowingly collect personal information from children, and we do not permit individuals under the age required to consent to data processing in their jurisdiction to create accounts.

If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

12. Third-Party Links

The Service may contain links to third-party websites, integrations, or services that we do not control. This Privacy Policy does not apply to them, and we are not responsible for their privacy practices.

We encourage you to review the privacy policies of any third-party service before connecting it to your account or providing personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or the law. When we make material changes, we will post the updated policy and, where appropriate, notify you by email or through the Service.

Your continued use of the Service after the changes take effect means you accept the updated policy. The date at the top of this page shows when it was last revised.