Privacy Center
Privacy is not an appendix to the service: it is part of how Firmato designs accounts, newsletters, documents, evidence and integrations. This page gives a readable overview of controls and links to the complete legal documentation.
Four principles across the data lifecycle
Minimisation
Collect what is needed for the service and security, avoiding unnecessary copies or data.
Control
Roles, permissions, 2FA and segregation between public surfaces, workspace and providers.
Purpose & retention
Use data consistently with purpose, contract, legal duties and applicable retention periods.
Transparency & rights
Accessible notices, manageable preferences, consent withdrawal and dedicated GDPR rights channels.
How Firmato governs data
Collection
Only data consistent with account, contract, support, security or the requested service.
Protection
Access controls, server-side secrets, audit and technical measures proportionate to risk.
Use
Processing for stated purposes with privacy roles defined across customers and providers.
Retention
Differentiated retention; deletion, return or blocking where applicable.
Your controls
- Access, rectification, erasure and restriction where applicable.
- Portability and objection in the cases provided by GDPR.
- Withdraw marketing consent without affecting prior lawful processing.
- Lodge a complaint with the competent supervisory authority.