Privacy Policy
Privito is the privacy broker for online shopping: you register once and then order from connected stores without filling in your details again and again. The store sees your real details only for as long as you allow; outside that window the store works with an alias. This policy explains which data Privito processes, why, for how long, and what your rights are.
Who this policy is for. This policy is about you as a user of the Privito app. Stores that connect to Privito have their own agreement with us; what a store does with your order is covered by that store's privacy policy.
1. Who is responsible
Heimdallr B.V., Rijnzathe 12, 3454 PV Utrecht, the Netherlands, is the data controller for the Privito app and the Privito service. Privacy questions: support@privito.com.
For your order itself (the purchase, payment, delivery and invoice) the store is the controller. Privito processes your data for the store within the limits you set in the app. Two things Privito keeps on behalf of the store (the store is responsible for them, we are the processor): the invoice and your name and address as used for that order — see the table below.
2. What data we process
| Data | Purpose | Retention |
|---|---|---|
| Account: e-mail address, password (stored only as a secure hash), name, address, phone number (optional), language | Your account, signing in, passing your details to a store you connect | As long as your account exists |
| Connections: which stores you connected, an alias per store, the access window (when the store may see your real details) | The core of the service: the store sees your details only inside the window | As long as the connection exists; you can revoke any connection instantly |
| Orders: order lines, amounts, status, track & trace | Your overview in the app, returns, delivery alerts | As long as your account exists |
| Customer details at the time of an order: your name and address(es) as used for that order (no e-mail or phone) | On behalf of the store: it must be able to show who it delivered to and where | 7 years (the store's statutory retention duty) — also after you delete your account |
| Invoices (PDF) for your orders | On behalf of the store: the invoice is the store's document; you can view it in the app | In the app as long as your account exists; for the store 7 years (statutory retention) |
| Contact details at the time of an order: e-mail and phone as used for that order | Checking that later messages about that order belong to the same person | 1 year after the access window closes, then deleted automatically |
| Conversations with a store about an order (text, return requests) | Questions, returns and replies under one order | 90 days after the last message (longer while a return request is open), then deleted automatically |
| Alerts in the app (for example "order delivered") | Keeping you informed | 90 days, then deleted automatically |
| Push token of your device | Sending notifications through Apple | Until you sign out, turn notifications off or delete your account |
| Technical logs on the server (time, request, error codes; IP addresses only for security) | Security, abuse prevention, troubleshooting | Short; security data at most 90 days |
The app keeps a diagnostics log on your device (at most 24 hours and 500 lines, without personal data). It leaves your device only if you share it yourself via About Privito ▸ Diagnostics.
3. Why we may do this
- Performance of the contract: your account, connections, orders, conversations and alerts are needed to deliver the service you use.
- On behalf of the store (the store's statutory retention duty): the invoice and your name and address for an order are kept for 7 years. Questions about those go to the store; we assist the store.
- Legitimate interest: securing the service and your data, preventing abuse, resolving incidents.
Privito does not use your data for advertising, does not sell it and does not track you across other websites or apps. There are no third-party trackers in the app.
4. Who we share data with
- The store you connect: only inside the access window does the store see your real name, address and contact details; outside it the store works with an alias. The store uses those details for your order, delivery (through its carrier) and the invoice.
- Apple: for push notifications Apple receives only an alert id and your device's push token; never the content, the store or your details.
- Our e-mail provider: for transactional e-mails (registration, password reset).
Your data is stored and processed in the European Union. We do not transfer data outside the EU, except for push notifications through Apple (see above).
5. Your rights
- Access and correction: you can view and change your details in the app under Profile.
- Revoke: you can revoke any store connection instantly; the store then no longer sees real details.
- Delete: Profile ▸ Delete account erases your account, connections, orders, conversations and alerts immediately and irreversibly. Invoices and the customer details at the time of an order are kept for 7 years for the store (legal duty); they contain no e-mail address or phone number.
- Objection and portability: e-mail us at support@privito.com.
- Complaint: you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
6. Security
E-mail addresses are stored encrypted and passwords only as a hash. Stores reach Privito exclusively with their own certificate; the app verifies the server's certificate. A store's access to your details is limited to the access window and is logged, so the app shows you when a store viewed your details.
7. Website
The website privito.com measures visits anonymously (no IP address in the statistics, no third-party cookies, no profiles). Any choice you make in the notice bar is stored locally by your browser.
8. Changes
For material changes we update the date at the top and inform you in the app. This page is always the current version.