Legal
Privacy Policy
What we collect through this website, why we collect it, how long we keep it, and how to make us stop.
Who we are
PumaDoc B.V. ("PumaDoc", "we") is the controller for personal data collected through pumadoc.com. Our registered address and company number are set out at the foot of this page. For data you put into the PumaDoc application about your own prospects, you are the controller and we act as your processor under a separate Data Processing Agreement.
What we collect
| Data | Where from | Why |
|---|---|---|
| Name, email, company, role | The PumaDoc app, when you create an account | To run your account and respond to you. This website has no forms and collects none of it |
| The idea you describe | The PumaDoc app | To generate your artifacts. Treated as confidential; never used for model training |
| Page views, clicks, scroll depth, events | Analytics, after consent | To understand which parts of the site work |
| UTM parameters, referrer, landing page | Your browser and the URL you arrived on | To attribute where contacts come from |
| IP address and user agent | Our servers and security tooling | Security, abuse prevention and rate limiting |
Legal bases
- Contract or steps before a contract — handling your trial or account request in the app.
- Consent — analytics and marketing cookies. You can withdraw consent at any time, and withdrawing is as easy as giving it.
- Legitimate interests — securing the site, preventing abuse, and understanding aggregate traffic where we can do so without cookies. We have balanced these against your rights and record that assessment.
- Legal obligation — keeping records we are required to keep.
Your idea and AI
Ideas you submit are confidential. They are encrypted at rest and in transit and are accessible only to you and the limited staff who need access to support you.
We do not use your idea, artifacts or prospect data to train AI models — ours or a provider's. We use zero-retention model endpoints, so prompts and completions are not retained by the provider. If this ever changes, we will tell you in advance and ask for your consent rather than relying on a policy update.
How long we keep it
- Contact records: for as long as you are a customer, then 24 months, unless you ask us to delete them sooner.
- Ideas submitted without an account: 90 days, then deleted.
- Analytics events: 14 months.
- Consent records: 5 years, because we have to be able to prove consent was given.
- Security logs: 12 months.
Who we share it with
We share personal data with the sub-processors listed on our security page — hosting, CRM, email delivery, scheduling, analytics and our AI model provider — each under a data processing agreement. We do not sell personal data and we do not share it with advertisers beyond the conversion signals you consent to.
International transfers
Some sub-processors are outside the EEA. Where that happens we rely on an adequacy decision or on Standard Contractual Clauses with supplementary measures, and we assess each transfer before it begins. EU data residency is available on the Scale plan.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to someone else. Where we rely on consent you can withdraw it at any time. Write to privacy@pumadoc.com and we will respond within one month.
If you are unhappy with our response you can complain to your local supervisory authority. In the Netherlands that is the Autoriteit Persoonsgegevens.
Cookies
We set no analytics or marketing cookies until you consent. What each category does, and how to change your mind, is set out in the Cookie Policy. You can reopen the consent panel at any time from the link in the footer.
Changes
If we make a material change we will tell the people it affects by email or with a notice on the site before it takes effect, and we will not apply a change retroactively to data we already hold.
Questions about this document: privacy@pumadoc.com. PumaDoc B.V., Amsterdam, The Netherlands.