1. Scope and roles
In this policy, “Prodeonco”, “we”, “us”, and “our” refer to the Prodeonco service. “You” refers to a visitor, account holder, or person whose information is included in an organization’s Prodeonco workspace.
We handle account, authentication, support, and subscription information to provide the service to you. When an organization enters information about its customers, vendors, employees, or other contacts into Prodeonco, that organization is responsible for having a lawful basis to use and share that information. In those circumstances, Prodeonco handles the information to provide the service to the organization.
This policy does not replace a customer organization’s own privacy notice or its responsibilities to the people whose information it enters into the service.
2. Information we handle
We handle information that you provide, that an authorized user enters, or that is created while the service operates.
Account and organization information
- name, email address, organization name, country, base currency, and timezone;
- password data stored as a protected password hash, not as readable password text;
- email-verification and account-session information used to secure access; and
- organization membership, role, and active-workspace information.
Organization and accounting information
The service is designed for organizations to record accounting activity. Depending on the features you use, this can include customer and vendor contact details, items, quotes, invoices, bills, expenses, payments, credit notes, bank and cash account information, statement and transaction information that you enter or import, journal entries, and reports derived from those records.
Communications and support information
If you email us or ask for support, we handle the information in your message and the details needed to investigate and respond to the request.
Subscription information
Payments are completed through Stripe-hosted Checkout and billing management is completed through the hosted Stripe Customer Portal. Stripe collects payment and billing details under its own policies. Prodeonco keeps only the limited subscription and billing status information needed to operate access, such as opaque Stripe customer, subscription, and price identifiers, plan, payment state, and subscription dates. We do not store your full card number, card security code, payment-method details, Stripe receipt URL, or raw Stripe webhook payload.
3. How we use information
We use information to:
- create and secure accounts, verify email addresses, and manage organization access;
- provide, maintain, and support the accounting features you choose to use;
- operate billing, local trial access, subscriptions, payment recovery, and receipts through Stripe;
- communicate about account, support, security, and service matters;
- detect, prevent, investigate, and respond to fraud, abuse, security incidents, and technical problems; and
- meet legal obligations and enforce our Terms of Service.
We use organization accounting information to provide the workspace and its accounting workflows. We do not use your organization’s accounting records to provide another organization access to them.
5. Retention and security
We retain information for as long as it is needed to provide the service, maintain security and reliable billing operations, meet legal obligations, resolve disputes, or enforce agreements. Retention can vary by the kind of information and the organization’s use of the service.
We use reasonable technical and organizational measures designed to protect information, including authenticated access controls, role-based organization access, protected credential storage, and signed Stripe webhook verification. No method of transmission or storage is completely secure, so please use a unique password and keep your account credentials confidential.
6. International processing
Prodeonco and its service providers may process information in countries other than the country where you live or operate. Where required, we will use appropriate safeguards for those transfers. By using the service, you acknowledge that this processing may occur as described in this policy and as permitted by applicable law.
7. Your choices and rights
Subject to applicable law, you may ask us to access, correct, update, export, restrict, or delete personal information we handle about you, or to withdraw a consent where our processing is based on consent. Organization users should first contact their organization administrator for requests involving organization-entered accounting data.
To make a request, email info@prodeonco.com with enough information for us to identify the relevant account or organization. We may need to verify your identity and authority before acting on a request.
If you are an organization customer making a request about information in your workspace, please do not send passwords, full payment-card data, or other unnecessary sensitive information by email.
9. Changes and contact
We may update this policy when the service, our practices, or applicable requirements change. We will post the revised version here and update the effective date. Your rights under applicable law are not affected.
Questions about this policy or our handling of personal information can be sent to info@prodeonco.com.