1. Who we are
This website (pavoot.com) is operated by Pavoot Inc., 2261 Market Street STE 76439, San Francisco, CA 94114, United States of America. You can reach us at hello@pavoot.com. For the purposes of the GDPR and the Swiss FADP, Pavoot Inc. is the controller of the personal data described in this Privacy Policy.
2. Data we collect
2.1Information you provide directly
When you contact us or interact with our site, you may share:
- Contact emails: if you write to us at hello@pavoot.com or founders@pavoot.com, we receive your email address, the content of your message, and any attachments.
- Demo bookings: when you book a demo via our Cal.com link, you provide your name, email, company, and meeting details to Cal.com, which forwards them to us.
- Dinner interest form: if you complete the form at /dinner-interest, you provide your name, email, company, role, and any free-text context. This is delivered to us via Google Apps Script and stored in Google Sheets.
2.2Information collected automatically
When you visit pavoot.com we automatically receive:
- Website activity: pages and full URLs viewed, page titles, referrers, session timing, scroll depth, links and buttons selected, outbound destinations, and limited form metadata such as a form's name or action. If the site offers search, the search terms submitted may also be recorded.
- Browser and device data: browser user agent, language, screen and viewport dimensions, timestamps, and network information such as the IP address received when your browser connects to our hosting and analytics systems.
- Analytics identifiers: a randomly generated first-party identifier stored in the ploy_anon_id cookie and local storage, plus a session identifier stored locally in your browser.
- Business visitor insights: where available, website activity may be associated with a business or professional profile, including company, name, job title, LinkedIn profile, visit count, pages viewed, and first or last visit.
Ploy provides our first-party website analytics and business visitor insights. We use these tools to understand site performance and business interest in Pavoot. We do not use Google Analytics, Meta Pixel, LinkedIn Insight Tag, or other third-party advertising pixels on this website.
3. How we use your data
We process personal data for the following purposes and legal bases:
- To operate and improve the website (legitimate interest, Art. 6(1)(f) GDPR): website analytics, performance monitoring, security, and understanding which content is useful to business visitors.
- To respond to you (legitimate interest or pre-contractual measures, Art. 6(1)(b) and (f) GDPR): handling your emails, demo requests, and form submissions.
- To send you information you asked for (consent, Art. 6(1)(a) GDPR): event invitations, updates, or follow-ups you specifically requested.
- To comply with legal obligations (Art. 6(1)(c) GDPR): accounting, tax, and responding to lawful requests from authorities.
We may use business visitor insights to understand interest in Pavoot and prioritize relevant business development. We do not sell your personal data and we do not use it for automated decisions that have legal or similarly significant effects on you.
5. Data security & Limited Use
We apply appropriate measures to protect personal data, including sensitive personal data such as names, email addresses, and phone numbers:
- Encryption in transit: all data is transmitted over encrypted TLS/HTTPS connections.
- Encryption at rest: personal data is encrypted at rest on our infrastructure.
- Credential protection: passwords and OAuth tokens are hashed or encrypted at rest, never stored in plaintext.
- Access controls: access is restricted under least-privilege controls and data is logically isolated per organization.
- Minimization: we do not collect financial, health, or precise-location data through this website.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we work to protect your information and to limit access to it.
Limited Use. Pavoot's use and transfer of information received from Google APIs, including any raw or derived user data, will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer Google user data to third-party AI services to train or improve generalized AI or machine-learning models.
7. Retention
- Email correspondence: retained for as long as reasonably needed to handle your request, maintain relevant business records, resolve disputes, and meet legal obligations.
- Demo and form submissions: retained for as long as reasonably needed to evaluate and follow up on the opportunity, maintain relevant business records, and meet legal obligations.
- Analytics and business visitor data: retained for as long as reasonably needed for website measurement, security, business development, and legal obligations.
- Consent audit records: retained for as long as reasonably needed to demonstrate and manage privacy choices and related legal obligations.
- Server logs: retained as needed for site delivery, security, abuse prevention, and legal obligations.
8. International transfers
Pavoot Inc. is based in the United States, and some of our sub-processors operate globally. When personal data is transferred outside the EU/EEA or Switzerland, we rely on the European Commission's Standard Contractual Clauses (and the Swiss addendum where applicable) and assess each transfer to ensure an essentially equivalent level of protection.
9. Your rights
Subject to applicable law, you have the right to access, rectify, delete, restrict, or object to our processing of your personal data, and the right to data portability. Where we process your data based on consent, you can withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, email us at hello@pavoot.com. Requests are handled within the timelines required by applicable law, including any extension permitted for complex or multiple requests. You also have the right to lodge a complaint with your local data protection authority (in Switzerland, the FDPIC).
10. Children
This website is intended for business audiences. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.
11. Changes & contact
We may update this Privacy Policy from time to time. The "Last change" date at the top of this page reflects the most recent update.
Questions or requests? Email us at hello@pavoot.com.