Skip to main content

Privacy Policy

Last updated: 14 May 2026

Pointee s.r.o. ("the Company," "we," "us," or "our") (Na Prikope 22, Nove Mesto, Prague 110 00, Czech Republic) is the data controller for personal data processed through pointeehq.com. The Company builds and operates a process-automation orchestration platform designed specifically for finance and insurance operations teams. Because those clients operate in regulated environments, we treat data stewardship as an operational baseline, not an afterthought.

1. Scope of This Policy

This policy applies to personal data we process when you visit pointeehq.com, submit an access request, contact us, or use the Pointee platform. It does not cover data that our clients collect and process using Pointee's automation layer within their own environments; clients acting as independent data controllers are responsible for their own GDPR compliance in that context.

2. Personal Data We Process

When you interact with the Company through this site, we may process the following categories of personal data:

  • Identity and contact data you submit (name, email address, phone number, employer, job title);
  • Communications content (messages sent through our contact form or by email);
  • Technical data collected automatically (IP address, browser type, operating system, pages visited, timestamps);
  • Usage and analytics data, where you have given prior consent through our cookie banner.

We do not process special categories of personal data (Article 9 GDPR) through this site, and we do not knowingly collect data from persons under 16.

3. Purposes and Legal Bases (Article 6 GDPR)

The table below sets out each processing purpose and the legal basis we rely on.

Purpose Legal basis
Responding to access requests, inquiries, and pilot assessments Pre-contractual steps / legitimate interest (Art. 6(1)(b)/(f))
Operating and securing the platform and website Legitimate interest (Art. 6(1)(f))
Fulfilling legal and regulatory obligations (including GDPR record-keeping) Legal obligation (Art. 6(1)(c))
Service communications to registered platform users Contract performance (Art. 6(1)(b))
Analytics cookies (measuring site usage) Consent (ePrivacy Directive + Art. 6(1)(a))

4. Recipients and International Transfers

Personal data is shared only with processors acting on our behalf under Article 28 GDPR data-processing agreements. These include providers in categories such as hosting infrastructure, transactional email delivery, and analytics. Where any such transfer goes outside the EU/EEA, the Company relies on Standard Contractual Clauses (Article 46 GDPR) and carries out a transfer impact assessment where required following the Schrems II ruling. We do not sell personal data.

5. Retention

We retain personal data only for as long as necessary for the purposes described above. Inquiry and access-request data is retained for 24 months after last contact. Registered platform account data is retained for the duration of the contract and for a further 12 months after account closure, unless a shorter period is requested. Server access logs are retained for 90 days. Where applicable, financial transaction records are retained as required by Czech accounting law (Act No. 563/1991 Coll.).

6. Your GDPR Rights

As a data subject under the GDPR, you have the following rights:

  • Right of access (Art. 15) -- confirm whether the Company processes your personal data and obtain a copy;
  • Right to rectification (Art. 16) -- correct inaccurate personal data we hold about you;
  • Right to erasure / "right to be forgotten" (Art. 17), subject to limited exceptions (such as our legal retention obligations);
  • Right to restriction of processing (Art. 18) -- ask us to limit how we use your data while a dispute is resolved;
  • Right to data portability (Art. 20) -- receive your data in a structured, commonly used, machine-readable format;
  • Right to object (Art. 21) -- object to processing based on legitimate interest, including to direct marketing, without further conditions;
  • Right not to be subject to automated decision-making (Art. 22) -- the Company does not engage in automated decision-making with legal or similarly significant effects.

To exercise any of these rights, email us at [email protected]. The Company will respond within one calendar month, extendable by two further months for complex or numerous requests (with notice to you within the first month).

7. Right to Lodge a Complaint

If you believe the Company has processed your personal data in violation of the GDPR, you have the right to lodge a complaint with a supervisory authority. The lead supervisory authority for the Company is the Office for Personal Data Protection of the Czech Republic (Urad pro ochranu osobnich udaju, uoou.cz). You may also contact the supervisory authority in the EU member state of your habitual residence or place of work. A full list of EU/EEA authorities is available at edpb.europa.eu.

8. Cookies

See our Cookie Policy for full details. The Company operates a prior-consent model: non-essential cookies (analytics, preferences) are not placed on your device until you give explicit consent through the cookie banner on this site. Strictly necessary cookies (session management, consent record) are set without consent as they are essential to the site's operation.

9. Security

The Company implements technical and organisational measures appropriate to the risk of processing, including TLS encryption in transit, restricted access controls, and regular review. We are a bootstrapped team at an early stage, and we are honest that our security posture scales with the size of our operations. We do not claim certifications we have not obtained.

10. Changes to This Policy

Material changes to this policy will be reflected by an updated "Last updated" date at the top of this page. Where required by law or where the change materially affects your rights, the Company will request renewed consent.

11. Contact

For any data-protection matter, including to exercise your rights:

Pointee s.r.o.
Na Prikope 22, Nove Mesto
Prague 110 00, Czech Republic
Email: [email protected]
Phone: +420 234 567 890