Privacy Policy

1. Information We Collect

Personal Information: Name, email, company details, and payment information (via Stripe) provided when you register or subscribe.
Usage Data: Automatically collected data like IP address, device info, and Service interactions.
Customer Data: Data you input into the Service, which may include personal information.

2. How We Use Your Information and Legal Bases

Service delivery and account management: To provide and operate the Service, authenticate users, provide support, and perform subscription administration. Legal basis: performance of a contract.
Security and reliability: To prevent fraud, secure accounts, monitor misuse, and maintain platform reliability. Legal basis: legitimate interests.
Billing and compliance: To process payments, maintain accounting records, and meet tax and legal requirements. Legal basis: legal obligation and, where applicable, performance of a contract.
Service communications: To send transactional and operational notices about your account or the Service. Legal basis: performance of a contract and legitimate interests.
Marketing communications: To send product updates and marketing emails where permitted. Legal basis: consent where required by law; you may unsubscribe at any time.
We do not sell your information.

3. Sharing Your Information

We share personal information with trusted service providers that help us operate the Service, such as payment processors, cloud infrastructure providers, analytics providers, and communications providers, only for legitimate business purposes and under contractual confidentiality and data protection obligations.
We may also disclose information where required by law, to protect rights and security, or in connection with a merger, acquisition, financing, or sale of assets.

We do not sell personal information. Additional information about categories of service providers can be requested by contacting contact@prochangeover.com.

4. Data Security and Retention

We use reasonable security measures. We retain Customer Data used to operate the Service for up to 24 months after subscription end to support reactivation, unless you request earlier deletion.

Where required by law, we retain billing and tax records for up to 7 years after subscription end. Security and access logs are generally retained for up to 12 months. Encrypted rolling backups are typically retained for up to 35 days.

After the reactivation period, we may delete Customer Data used to operate the Service after at least 30 days' prior email notice. You may request data export and/or deletion at any time, subject to legal retention obligations.

5. Your Rights

Depending on applicable law, you may request access to, correction of, deletion of, restriction of processing of, objection to processing of, and portability of your personal information. Where processing is based on consent, you may withdraw consent at any time.

To exercise rights, contact contact@prochangeover.com. We may need to verify your identity and/or account authority before completing a request. We aim to respond within 30 days where required by law.

You may also lodge a complaint with your local supervisory authority. For New Zealand, this is generally the Office of the Privacy Commissioner. For EEA/UK individuals, this is generally your local data protection authority.

6. International Transfers

Your personal information may be stored and processed in countries where we or our service providers operate.

Where required by applicable law, we apply appropriate contractual, technical, and organizational safeguards to protect personal information in cross-border processing.

7. Cookies and Tracking Technologies

We use essential authentication cookies to operate the Service securely, including auth_token (typically up to 1 hour), refresh_token (typically up to 90 days), and two_fa_challenge (typically up to 10 minutes during 2FA flows).

We also use analytics technologies (including PostHog cookies/local storage identifiers such as ph_*) to understand product usage and improve the Service. By accessing or using the Service, you consent to this analytics processing as described in this Privacy Policy. We store cookie notice acknowledgement preferences in local storage.

8. Changes

We may update this policy with 30 days' notice.

9. Contact Us

Questions or privacy requests? Email contact@prochangeover.com

For applicable data protection laws, the data controller for personal information processed through the Service is LFC Tech Limited, New Zealand.