1. Who we are
Datafuel S.r.l. [registered office · VAT IT00000000000] is the data controller for the processing described here. Data Protection Officer: dpo@datafuel.ai.
2. Data we collect
| Item | Details |
|---|---|
| Account data | Name, email, company, password hash, billing address, VAT number |
| Billing data | Invoices, payment status, last four digits of card (full card data is held by our payment processor) |
| Usage data | Requests per product, bandwidth, success rate, target domains, timestamps, exit country |
| Technical data | IP address, browser, device, cookies and similar identifiers |
| Support data | Messages you send us and their attachments |
| SDK data (device owners) | Device identifier, app, consent record, bandwidth contributed, coarse location |
3. Why we process it
- Providing and securing the service — contract performance.
- Billing, invoicing and tax obligations — legal obligation.
- Preventing abuse and enforcing the Acceptable use policy — legitimate interest.
- Product analytics and service improvement — legitimate interest, with aggregation wherever possible.
- Marketing emails — consent, withdrawable at any time.
- Compensating SDK device owners and honouring their consent — contract performance and consent.
4. Traffic passing through the network
Datafuel relays customer requests but does not store request or response bodies. We keep request metadata (timestamp, target domain, exit country, IP class, status code, bytes) for up to 90 days for billing, abuse prevention and support. Where customer traffic contains personal data, the customer is the controller and Datafuel processes it under the DPA.
5. Retention
| Item | Details |
|---|---|
| Account data | Life of the account + 12 months |
| Billing records | 10 years (Italian tax law) |
| Usage metadata | 90 days detailed · 24 months aggregated |
| Support tickets | 36 months |
| SDK consent records | Life of the device on the network + 24 months |
7. Your rights
You can access, correct, delete or export your data, object to or restrict processing, and withdraw consent at any time by emailing privacy@datafuel.ai. We answer within 30 days. You may also lodge a complaint with the Italian supervisory authority (Garante per la protezione dei dati personali) or your local authority.
9. Changes
We will notify account holders by email at least 14 days before material changes to this policy take effect. The date at the top shows the current version.