Privacy Policy

The data controller is PD Studio — Prodotti-digitali.net, VAT ID IT02942000817, Italy. Contact: support@prodotti-digitali.net.

• Account data: your email address and an encrypted password, managed through our authentication provider.
• Vendor and COI data you enter: vendor names, trades, contact emails, and certificate details (policy type, carrier, coverage amount, effective and expiry dates).
• Documents you upload: the certificate files (PDF or images) you attach. These may contain personal or business data of third parties, such as your vendors and their insurers.
• Reminder settings: the notification email and the reminder timing you choose.
• Technical data: basic log and usage information needed to run and secure the service.

We use this data only to provide COIStack: to run your account, store your certificates, show your compliance dashboard, and send you expiry reminders. We do not sell your data and we do not use it for advertising.

We process your data to perform our contract with you (providing the service), on the basis of our legitimate interest in operating and securing the service, and, where required, on your consent. For the third-party data contained in the documents you upload, you act as the controller and COIStack acts as your processor, handling that data only on your instructions to provide the service.

Your data is stored primarily in the European Union. We use a small number of trusted providers (“sub-processors”) to run COIStack:

• Supabase— database, authentication, and document storage (EU region).
• Resend— sending transactional and reminder emails.
• Vercel— hosting the application.

These providers process data only to provide their service to us. Where any processing happens outside the EU, it is covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

We keep your data for as long as your account is active. If you delete a record, a document, or your account, we delete the associated data, subject to short technical backup cycles and any legal retention we are required to keep.

Under the GDPR you have the right to access, correct, delete, export, or restrict the processing of your personal data, and to object to certain processing. You can exercise these rights, or withdraw consent, by contacting support@prodotti-digitali.net. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

Access to your data is restricted to your own account through row-level security, and uploaded documents are kept in private storage that only your account can reach. No system is perfectly secure, but we take reasonable measures to protect your data.

COIStack uses only the essential cookies needed to keep you signed in. We do not use advertising or third-party tracking cookies. If we add analytics, we will use a privacy-friendly, cookieless option or ask for your consent first.

COIStack is a business tool and is not intended for anyone under 18. We do not knowingly collect data from children.

We may update this policy. If we make material changes we will notify you by email or in the app.

Questions or requests about your data: support@prodotti-digitali.net.