Privacy Policy
Legal · 2026-05-10
1. Controller
System One Software LLC, operating quitivo.com. Contact: support@quitivo.com.
2. Data we collect
To send the cancellation letter we collect: first name, last name, postal address, email address, telephone (optional), customer number (optional), and the cancellation reason if provided. Plus payment metadata (Stripe session ID, payment status) and operational logs (timestamps, IP address for fraud prevention, error logs).
3. Why we use it (legal basis)
(a) Performance of contract — to draft and send the cancellation letter and to send the invoice and reminders. (b) Legitimate interest — to protect against fraud, monitor service quality, and respond to support enquiries. (c) Legal obligation — to retain accounting and tax records.
4. Sharing — sub-processors
We use the following sub-processors. Each receives only the minimum data needed for their function:
| Sub-processor | Purpose | Data location |
|---|---|---|
| Stripe | payments | EU/US |
| Postmark | transactional email + inbound support mail | EU |
| Bird.com | SMS notifications | EU |
| Anthropic (Claude) | AI-assisted support replies | EU/US |
| Neon (Vercel Postgres) | database storage | EU (Frankfurt) |
| Vercel | hosting | EU |
| Justus Collect (planned) | debt collection at +21d | EU |
We share your name and address with the provider you are cancelling — this is required for them to identify you. Payment data is processed by Stripe; we never see your card details.
5. Data location
Database is hosted on Neon Postgres in the EU (Frankfurt, Germany). Email and SMS providers also operate within the EU. Stripe processes payments in EU/US in compliance with EU Standard Contractual Clauses.
6. Retention
Dossier data: up to 7 years for accounting and tax purposes (EU/UK requirement). Email correspondence: 3 years. Form drafts: 30 days. Suppression list (unsubscribes): retained indefinitely to honour your preference. You may request earlier deletion of personal data, subject to retention obligations.
7. Your rights
Under GDPR (EU/UK) you have the right to: access, correction, deletion, data portability, restriction of processing, and objection. You also have the right to lodge a complaint with your national supervisory authority. To exercise any of these, email support@quitivo.com.
8. AI-assisted replies
Replies to support emails may be drafted with assistance from Anthropic Claude. The customer email content is processed by Anthropic for the sole purpose of generating the reply and is not used to train any model. We retain the AI-generated draft alongside the original mail in our database.
9. Cookies
See our separate Cookie Policy.
10. Contact
support@quitivo.com