Effective Date: June 13, 2025
CEPRA (“we”, “us”, or “our”) is committed to protecting the privacy of our clients and users (“you”, “your”). This Privacy Policy explains how we collect, use, store, and disclose personal data in connection with your use of the CEPRA Platform and related services.
1. Who We Are
https://cepra.app/
2. Data We Collect
We collect and process the following types of personal data:
a. User-Provided Data
- Name, email, phone number
- Company details (name, address, VAT ID)
- Billing and payment information
- Job title and department
- Uploaded documents or content
b. Automatically Collected Data
- IP address
- Browser and device information
- Log data (pages visited, timestamps)
- Cookies and usage analytics (via tools like Google Analytics)
c. Third-Party Data
- Data received from third-party integrations or services authorized by you
3. Purpose of Data Processing
We use your personal data to:
- Provide and maintain the CEPRA Platform
- Authenticate users and secure the Platform
- Process payments and manage subscriptions
- Offer onboarding and customer support
- Send system updates and service-related notices
- Analyze Platform usage to improve performance
- Comply with legal obligations (e.g., tax, accounting)
4. Legal Bases for Processing
We rely on the following legal bases under GDPR:
- Contractual necessity – to provide our services
- Legitimate interest – to ensure platform security and service improvement
- Consent – for optional features like newsletters or marketing
- Legal obligation – for compliance with laws
5. Data Sharing and Disclosure
We may share personal data with:
- Authorized employees and contractors
- Sub-processors (e.g., cloud hosting, analytics tools)
- Payment processors (e.g., Stripe)
- Legal authorities, when required by law
We ensure that all third-party processors meet GDPR standards and are bound by data processing agreements.
6. International Transfers
If personal data is transferred outside the EU/EEA, we ensure appropriate safeguards such as:
- Standard Contractual Clauses (SCCs)
- Transfers to countries with adequate protection (per EU Commission)
7. Data Retention
- Client Account Data: Retained for the duration of the contract + 75 days after termination (unless legally required otherwise)
- Analytics and logs: Typically retained for up to 12 months
- Backups: Maintained securely and deleted within 30 days
8. Your Rights
Under the GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate or incomplete data
- Delete your data (“right to be forgotten”)
- Restrict or object to processing
- Port your data to another service
- Withdraw consent at any time
You can exercise these rights by contacting us at
9. Security Measures
We implement industry-standard technical and organizational measures:
- Data encryption in transit and at rest
- Access controls and user authentication
- Regular security audits and penetration testing
- Sub-processor risk assessments
10. Cookies Policy
We use cookies for:
- Platform functionality (e.g., login sessions)
- Analytics (e.g., Google Analytics)
- Performance tracking
You can manage cookies through your browser settings.
11. Changes to This Policy
We may update this Privacy Policy periodically. Clients will be notified of significant changes at least 14 days in advance via email or platform notification.
12. Contact Us
For questions or requests, contact:
https://cepra.app/
