product

Privacy and Cookie Policy

Last updated: March 16, 2026

At Prduct, we take your privacy seriously. This Privacy and Cookie Policy explains who we are, what personal data we collect, why we collect it, how we use it, and what rights you have. Please read this policy carefully. If you have any questions, contact us at legal@prduct.com.

1. Who We Are

This policy applies to personal data processed by:

  • Company: Prduct ApS
  • Address: Universitetsbyen 71, Aarhus C, DK8000, Denmark
  • Phone: +45 5020 8844
  • Email: legal@prduct.com

Prduct ApS is the data controller for personal data we process about visitors and users of our Platform. Where we process personal data on behalf of our Customers (e.g. data uploaded to the Platform), we act as a data processor — in those cases, our Data Processing Agreement at prduct.com/data-processing-agreement applies.

2. What Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

a) Information you provide to us

  • Account registration: name, email address, password (hashed), and any optional profile information you choose to provide.
  • Billing information: billing name, address, and payment method details (processed securely via our payment provider — we do not store full card numbers).
  • Communications: messages you send us via email, support tickets, or contact forms, including any personal data contained in those messages.
  • User-generated content: any data, files, or content you upload or create within the Platform.

b) Information collected automatically

  • Usage data: pages visited, features used, time spent on the Platform, clicks, and navigation paths.
  • Device and technical data: IP address, browser type and version, operating system, screen resolution, and device identifiers.
  • Log data: server logs including access times, error logs, and referring URLs.
  • Cookie and tracking data: data collected via cookies and similar technologies (see Section 8 below).

c) Information from third parties

  • If you sign in using a third-party service (e.g. Google or Microsoft), we may receive basic profile information such as your name and email address from that provider.
  • We may receive information about you from integration partners if you connect third-party tools to your Prduct account.

3. How We Use Your Personal Data

We use your personal data for the following purposes:

  • Providing the Services: to create and manage your Account, authenticate you, provide the features you use, and process transactions.
  • Customer support: to respond to your enquiries, troubleshoot issues, and improve your experience.
  • Service communications: to send you important notices about the Services, such as security alerts, billing updates, or changes to our Terms.
  • Product improvement: to understand how the Platform is used, identify bugs, and develop new features.
  • Marketing (with your consent): to send you newsletters, product updates, or promotional content where you have opted in. You can unsubscribe at any time.
  • Security and fraud prevention: to detect, investigate, and prevent fraudulent activity and other abuse of the Platform.
  • Legal compliance: to comply with applicable legal obligations, including tax, accounting, and regulatory requirements.

4. Legal Basis for Processing (GDPR)

We process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):

  • Contract performance (Art. 6(1)(b)): processing necessary to provide the Services you have requested and to manage your Account.
  • Legitimate interests (Art. 6(1)(f)): processing for product improvement, security, fraud prevention, and service communications, where our interests are not overridden by your rights.
  • Consent (Art. 6(1)(a)): processing for marketing communications and non-essential cookies, where you have given your explicit consent. You may withdraw consent at any time.
  • Legal obligation (Art. 6(1)(c)): processing required by applicable law, such as tax and regulatory compliance.

5. How We Share Your Personal Data

We do not sell your personal data. We may share your data in the following circumstances:

  • Service providers: we engage trusted third-party service providers to support our operations (e.g. hosting, payment processing, analytics, email delivery). These providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection law.
  • Customers who invited you: if you joined the Platform via a Customer’s invitation, that Customer may have access to your activity and content within their workspace.
  • Business transfers: if Prduct is involved in a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.
  • Legal requirements: we may disclose your data where required by law, court order, or to protect the rights, property, or safety of Prduct, our users, or others.

6. International Data Transfers

Prduct is based in Denmark and our primary data infrastructure is located within the European Economic Area (EEA). Some of our third-party service providers may be located outside the EEA.

Where personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses (SCCs) or reliance on an adequacy decision. For more information about the safeguards we use, please contact us at legal@prduct.com.

7. Data Retention

We retain your personal data only for as long as necessary for the purposes described in this policy, or as required by applicable law.

  • Account data: retained for as long as your Account is active, plus a further period following closure to comply with legal obligations and resolve disputes (typically up to 3 years).
  • Billing records: retained for up to 5 years following the relevant transaction to comply with Danish accounting requirements.
  • Support communications: typically retained for up to 3 years from last contact.
  • Analytics and log data: generally retained for up to 13 months.

When data is no longer needed, we securely delete or anonymise it.

 

8. Your Rights

Under GDPR and applicable Danish data protection law, you have the following rights regarding your personal data:

  • Right of access: you have the right to request a copy of the personal data we hold about you.
  • Right to rectification: you can ask us to correct inaccurate or incomplete personal data.
  • Right to erasure: you can request deletion of your personal data in certain circumstances (e.g. where it is no longer necessary for the original purpose, or where you withdraw consent).
  • Right to restriction: you can ask us to restrict the processing of your data in certain situations.
  • Right to data portability: where processing is based on consent or contract and carried out by automated means, you can request a copy of your data in a structured, commonly used, machine-readable format.
  • Right to object: you can object to processing based on our legitimate interests, including for direct marketing purposes.
  • Right to withdraw consent: where we rely on consent as a legal basis, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at legal@prduct.com. We will respond within one month. You also have the right to lodge a complaint with the Danish Data Protection Authority (Datatilsynet) at www.datatilsynet.dk.

9. Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, or disclosure. These include encryption in transit and at rest, access controls, regular security assessments, and staff training.

However, no method of transmission or storage is completely secure. If you believe your Account has been compromised, please contact us immediately at legal@prduct.com.

 

10. Cookie Policy

This section explains how Prduct uses cookies and similar tracking technologies on our website and Platform.

What are cookies?

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work correctly, remember your preferences, and provide information to site owners.

Types of cookies we use

Category Purpose Required?
Strictly necessary Essential for the Platform to function — for example, keeping you logged in, remembering your session, and processing secure transactions. Yes — cannot be disabled
Functional / preference Remember your settings and preferences (e.g. language, region, display preferences) to personalise your experience. No — optional
Analytics / performance Collect aggregated information about how users navigate the Platform so we can improve performance and usability. We may use tools such as Google Analytics or similar privacy-conscious alternatives. No — optional
Marketing / targeting Used to deliver relevant advertisements and track campaign effectiveness. These cookies may be set by us or by third-party advertising partners. No — optional, consent required

Managing your cookie preferences

When you first visit our website, you will be shown a cookie consent banner. You can choose which categories of cookies to accept or decline. You can update your preferences at any time by clicking the “Cookie Settings” link in the footer of our website.

You can also control cookies through your browser settings. Most browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies may prevent the Platform from functioning correctly. For more information about managing cookies, visit www.allaboutcookies.org.

Third-party cookies

Some cookies on our Platform are set by third-party services. We do not control the use of these cookies and recommend reviewing the privacy policies of those third parties for further information.

 

11. Children’s Privacy

Our Services are not directed to children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us at legal@prduct.com and we will promptly delete it.

12. Links to Other Websites

Our Platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites and we encourage you to review their privacy policies before providing any personal data.

13. Changes to This Policy

We may update this Privacy and Cookie Policy from time to time. When we make significant changes, we will notify you by email or by posting a prominent notice on the Platform, at least 14 days before the changes take effect.

We encourage you to review this policy periodically. The “Last updated” date at the top of this page indicates when the policy was most recently revised.

 

14. Contact Us

If you have any questions, concerns, or requests regarding this policy or our data practices, please contact us:

  • Prduct ApS
  • Universitetsbyen 71, Aarhus C, DK8000, Denmark
  • Phone: +45 5020 8844
  • Email: legal@prduct.com

You also have the right to lodge a complaint with the Danish Data Protection Authority (Datatilsynet): www.datatilsynet.dk, Borgergade 28, 5, DK-1300 Copenhagen K.