P80Privacy notice
Last updated 15 October 2026
This notice explains what personal data P80 collects, why, and your rights under the EU General Data Protection Regulation (GDPR).
Who is responsible
The data controller is P80 Technology, 10136, Italy. Contact for any privacy question: hello@p80.io.
What we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Account details: name, work email, company, role, password (stored only as a secure hash by our authentication provider) | Create and run your account, sign you in, reset your password, send service emails | Contract (Art. 6(1)(b) GDPR) |
| Hall data you enter (racks, stages, crews, dates, test results) on paid plans | Store your workspace so you can use it on any device | Contract |
| Billing details on paid plans | Take payment and keep accounting records. Card details are handled by Stripe; we never see them. | Contract and legal obligation (Art. 6(1)(c)) |
| Messages you send us | Answer you, run a pilot | Legitimate interest (Art. 6(1)(f)) |
| Basic server logs (IP address, time, page) | Security and preventing abuse | Legitimate interest |
Data that stays on your device
On the Free plan your hall data is kept only in your browser's local storage and is never sent to us. If you use the AI assistant, your API key and your questions go directly from your browser to the AI provider you choose (for example Anthropic, OpenAI or Google) under that provider's terms. P80 never receives your key or those messages.
Who processes data for us
- Supabase: account sign-in and database, hosted in the European Union (Frankfurt, Germany).
- Cloudflare: website hosting and delivery.
- Stripe: payments, for paid plans only.
- Resend: account emails such as confirmation and password reset.
Each acts on our instructions under a data processing agreement. Where a provider may transfer data outside the EEA, the transfer is covered by the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
Cookies and storage
P80 uses no advertising or tracking cookies and no analytics that profile you. It uses your browser's local storage only for what the service needs: keeping you signed in and, on the Free plan, saving your hall. Fonts and scripts are served from our own site.
How long we keep data
Account and workspace data: while your account is open, and deleted within 30 days after you close it. Billing records: as long as tax law requires (usually up to 10 years). Server logs: up to 30 days.
Your rights
You can ask to access, correct, delete or export your data, to restrict or object to processing, and to withdraw consent where we rely on it. Write to hello@p80.io. We answer within one month. You can also complain to a data protection authority, for example the Italian Garante (garanteprivacy.it) or the Spanish AEPD (aepd.es).
Security
Data is encrypted in transit (HTTPS) and at rest. Each account can only read its own data, enforced in the database itself.
Changes
If we change this notice in a way that matters, we will tell signed-up users by email before the change takes effect.