Privacy Policy
Effective Date: February 20, 2026 | Last Updated: February 20, 2026
InvestigatePro ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information.
1. Who We Are
Data Controller: InvestigatePro
Contact: [email protected]
Address: Villanueva del Pardillo, Madrid, Spain
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, company name, job title
- Payment Information: Processed securely through Stripe (we do not store card details)
- Investigation Data: Content you create including incident reports, analyses, and documents
- Communications: Emails, support requests, and feedback
2.2 Information Collected Automatically
- Usage Data: Pages visited, features used, time spent on Service
- Device Information: Browser type, operating system, IP address
- Cookies: See Section 7 for cookie details
3. How We Use Your Information
| Purpose | Legal Basis |
|---|---|
| Provide and maintain the Service | Contract performance |
| Process payments | Contract performance |
| Send service communications | Legitimate interest |
| Provide customer support | Contract performance |
| Improve our Service | Legitimate interest |
| Send marketing (with consent) | Consent |
| Comply with legal obligations | Legal obligation |
4. AI Processing
4.1 How AI Uses Your Data
Our AI features analyze investigation content to provide:
- Suggested root causes
- 5-Whys analysis assistance
- Recommendation drafts
- Pattern recognition across incidents
4.2 AI Data Retention
AI analysis is processed in real-time. We do not use your investigation data to train our AI models without explicit consent.
5. Data Sharing
We share your data only with:
| Recipient | Purpose | Location |
|---|---|---|
| Supabase | Database hosting | EU (Frankfurt) |
| Stripe | Payment processing | US (Privacy Shield) |
| Resend | Email delivery | US (Privacy Shield) |
| Anthropic | AI processing | US (DPA in place) |
| Cloudflare | CDN & Security | Global |
We do NOT: Sell your personal data • Share data with advertisers • Use your data for purposes other than providing the Service
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data | Duration of account + 90 days |
| Investigation data | Duration of account + 90 days |
| Payment records | 7 years (legal requirement) |
| Support communications | 3 years |
| Usage analytics | 2 years (anonymized) |
7. Cookies
7.1 Essential Cookies
Required for the Service to function: Session authentication, Security tokens, User preferences
7.2 Analytics Cookies
Help us understand how you use the Service (can be disabled): Page views, Feature usage, Error tracking
7.3 Managing Cookies
You can control cookies through your browser settings. Disabling essential cookies may affect Service functionality.
8. Your Rights (GDPR)
You have the right to:
| Right | Description |
|---|---|
| Access | Request a copy of your personal data |
| Rectification | Correct inaccurate data |
| Erasure | Request deletion of your data |
| Portability | Export your data in machine-readable format |
| Restriction | Limit how we process your data |
| Objection | Object to processing based on legitimate interest |
| Withdraw Consent | Withdraw consent for marketing |
To exercise these rights, contact: [email protected]. We will respond within 30 days.
9. Data Security
We implement:
- Encryption: TLS 1.3 in transit, AES-256 at rest
- Access Controls: Role-based access, MFA available
- Monitoring: 24/7 security monitoring, intrusion detection
- Audits: Regular security assessments
10. International Transfers
Your data may be processed outside the EU. We ensure adequate protection through Standard Contractual Clauses (SCCs), Data Processing Agreements, and Privacy Shield certification (where applicable).
11. Changes to This Policy
We will notify you of material changes via email to your registered address, in-app notification, or website banner.
12. Contact Us
Data Protection Inquiries: [email protected]
Data Protection Officer: Devon Turner - [email protected]
If you're unsatisfied with our response, you may contact the Spanish Data Protection Agency (AEPD) or your local supervisory authority.