Privacy Policy

How Pro Contact processes the personal data of professional users (administrators of the CRM).

1. Data controller

Pro Contact is operated by Bouncy Boring ESHL Tech SRL, registered in Belgium. For any data protection request, contact [email protected].

2. What data we process

Data	Purpose	Lawful basis (GDPR Art. 6)
Name, first name, email, phone	Creating and managing your account	Contract performance
Password (hashed) / OAuth identifier	Authentication	Contract performance
Contacts, appointments, notes, activities you create	Providing the CRM service	Contract performance
Login timestamps, IP address	Security and abuse prevention	Legitimate interest
Consent timestamp at sign-up	Proof of consent (GDPR Art. 7)	Legal obligation

3. Retention

• Account data: kept for as long as your account is active.
• After account deletion: most data is erased immediately; anonymized audit entries may be retained for legal compliance (Art. 17(3)(b)).
• Expired tokens (email verification, password reset, OTP): purged automatically.

4. Your rights

Under the GDPR (Art. 15–22), you have the right to access, rectify, erase, restrict, and port your data, and to object to processing. You can exercise these rights at any time from your profile page:

• Export my data — /profile/export
• Delete my account — /profile (Delete account section)

You also have the right to lodge a complaint with the Belgian Data Protection Authority (APD/GBA, www.autoriteprotectiondonnees.be).

5. Recipients & sub-processors

• Hosting: Hetzner Online (Germany / Finland) — within EEA.
• Email delivery: Resend (EU region).
• Authentication providers (optional): Google, Apple — used only if you choose to sign in with them.

6. International transfers

All processing occurs within the European Economic Area. No transfers to third countries occur.

7. Contact

For any privacy-related question, write to [email protected].

Last updated: May 2026.