Privacy Policy

Data controller

prod2buy is operated by [Company name placeholder], with registered office at [Address placeholder], VAT [Placeholder]. Contact: privacy@prod2buy.com.

Data we collect

• Registration data — first name, last name, email, role (buyer or supplier), company name, VAT number, phone, business sector, address. Suppliers also provide selected sectors of interest.
• Usage data — requests posted, proposals sent, messages exchanged, login timestamps.
• Cookies — strictly technical session cookies issued by Supabase to keep you signed in. No analytics or advertising cookies are used.
• Payment data — for suppliers, billing information is collected and processed by Stripe; prod2buy never stores card numbers.

Legal basis for processing

Processing is based on (a) performance of the contract you accept by creating an account, (b) compliance with legal obligations (tax, accounting), and (c) our legitimate interest in operating and securing the platform.

Data retention

Account data is kept while your account is active. After deletion, residual data tied to issued invoices or legal disputes is retained for the period required by Italian law (typically ten years for tax records).

Your rights

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — request deletion when there is no legal reason to keep your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection and restriction — limit how we process your data in specific cases.
• Complaint — lodge a complaint with the Garante per la protezione dei dati personali (https://www.garanteprivacy.it).