1. Who We Are

We are Paymeet (“Paymeet”, “we”, “our”), a data processing service provider. This Privacy Policy explains how we collect, use, share, and protect your personal data when you use DrivePlan and our applications, website, and related services.

In accordance with the General Data Protection Regulation (GDPR) and other applicable laws, Paymeet acts as a data controller when collecting and processing your personal data. This means we are responsible for deciding how your data is used and safeguarded.

If you have questions about this Privacy Policy, please contact us at support@driveplan.net.

2. How We Collect Your Data

We collect personal data in the following ways:

Directly from you: When you register for an account, complete forms, or communicate with us (e.g., via email or support tickets).
Automatically: When you use our website or applications, we collect information via cookies and similar technologies. These help us remember your preferences, track sessions, and measure usage.
From third parties: For example, when you make payments through Stripe®, or when you connect external services (e.g., Zoom).

3. What Data We Collect

We collect two main categories of information:

Personal Data

Information that identifies you as an individual, such as:

Name, company name, and contact details (email, phone number, mailing address).
Account login details (username, password).
Payment details (processed by Stripe®, we do not store full card or bank account numbers).
Communications you send to us (support emails, tickets).

Non-Personal Data

Data that does not identify you directly, such as aggregated usage statistics, device/browser information, and anonymized analytics.

4. Why We Use Your Data (Legal Basis)

We process your personal data only when we have a valid legal basis to do so:

Contractual necessity: To provide you with our services, manage your account, and process transactions.
Consent: For specific purposes such as marketing communications (you may withdraw consent at any time).
Legitimate interests: To improve our services, prevent fraud, ensure security, and support business operations.
Legal obligations: To comply with applicable laws, tax, and accounting requirements.

5. Who We Share Your Data With

We do not sell, rent, or trade your personal data. However, we may share it with trusted third parties when necessary to provide our services, including:

Hosting & Infrastructure: Google Cloud Platform (data centers may be located in the U.S.).
Payment Processing: Stripe® (to process payments securely).
Analytics & Website Features: Google Analytics, Twitter®, and similar services.
Customer Support: Zendesk (for handling support tickets).
Integrations: Zoom Video Communications, Inc. (if you connect your Zoom account).

We ensure all third parties implement appropriate safeguards, including EU Standard Contractual Clauses (SCCs) and other GDPR-compliant measures.

In rare cases, we may disclose data if required by law, court order, or government authority, or in connection with a business transfer (e.g., merger, acquisition, restructuring).

6. International Data Transfers

If we transfer your data outside the European Economic Area (EEA), we use appropriate safeguards such as SCCs, encryption, and compliance with the EU–U.S. Data Privacy Framework where applicable.

7. Data Retention

We retain your personal data only as long as necessary to provide services and fulfill legal or contractual obligations. For example:

Account data: Retained while you have an active account.
Billing and transaction records: Retained for up to 7 years, as required by financial regulations.
Support communications: Retained as long as necessary for service and compliance purposes.

You may delete your account at any time in your account settings. Upon deletion, we remove your personal data from active systems, but may retain limited information in backups or for legal compliance.

8. Your Rights Under GDPR

As a data subject, you have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Request deletion of your data (“right to be forgotten”).
Withdraw consent at any time (for example, unsubscribe from marketing emails).
Object to processing based on legitimate interests.
Restrict processing under certain circumstances.
Request a copy of your data in a structured format (data portability).
Lodge a complaint with your national Data Protection Authority.

To exercise your rights, contact us at support@driveplan.net. We will respond within one month in accordance with GDPR.

9. Security

We take data security seriously and apply industry best practices to protect your information, including:

Encryption of data in transit and at rest.
Hosting in secure, audited data centers with physical and procedural safeguards.
Regular vulnerability scanning and independent penetration testing.
Confidentiality agreements and background checks for employees (where legally permitted).

Please note: If you choose to share information in public areas of our services, that information may be visible to others. Email is not always a secure communication method; avoid sending sensitive data via email.

10. Children’s Data

Our services are not directed to children under 16. We do not knowingly collect personal data from minors. If we learn that we have inadvertently collected such information, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or business changes. If we make material changes, we will notify you (for example, via email or a notice on our website) before they take effect.

Continued use of our services after changes take effect indicates acceptance of the revised policy.

12. Contact Us

For questions, requests, or complaints about this Privacy Policy, please contact our Data Protection Officer:

📧 support@driveplan.net

If you are located in the EU, you also have the right to contact your local Data Protection Authority.