Privacy Policy

1. Who We Are

Proa One is operated by Proa One Inc., a Delaware (USA) corporation incorporated via Stripe Atlas. Our representative in the European Union is JEK.MK SL, based in the Canary Islands, Spain.

Contact: hello@useproa.com

2. Data We Collect

We collect the following data when you interact with our website and service:

Waitlist

• >Email address
• >Preferred language
• >Date and time of registration
• >Industry (if provided)

Product usage (when available)

• >Account data (name, email, company)
• >Operational data you enter (work orders, costs, team, inventory)
• >Usage data and service logs

Automatic technical data

• >IP address (anonymized)
• >Browser and device type
• >Pages visited and time on site

3. How We Use Your Data

• >Provide the Proa One service
• >Send product updates (maximum 2 emails/month)
• >Improve the product and user experience
• >Comply with legal obligations

We will never sell or share your data with third parties for advertising purposes.

4. Legal Basis for Processing

For users in the European Union (GDPR):

• >Consent (Art. 6.1.a GDPR) — for waitlist and communications
• >Contract performance (Art. 6.1.b GDPR) — for service delivery
• >Legitimate interest (Art. 6.1.f GDPR) — for security and service improvement

For users in the United States:

We process your data in accordance with this privacy policy and applicable laws, including the CCPA (California), CPA (Colorado), VCDPA (Virginia), and other applicable state privacy laws.

For users in Spain:

In addition to the GDPR, we comply with the Spanish Organic Law 3/2018 on Personal Data Protection and guarantee of digital rights (LOPDGDD).

5. Where We Store Your Data

• >Database: Neon (neon.tech) — servers in the European Union
• >Web hosting: Vercel (vercel.com) — servers in Paris, France (cdg1)
• >Payments: Stripe (stripe.com) — PCI DSS Level 1 certified processor

Data transfers outside the European Economic Area are made under the European Commission Standard Contractual Clauses or equivalent mechanisms (Art. 46 GDPR).

6. Data Retention

• >Waitlist data: until you unsubscribe or we launch the product
• >Account data: as long as you maintain an active account
• >Billing data: 7 years (tax legal requirement)
• >Technical logs: 90 days

7. Your Rights

All users:

• >Access your personal data
• >Rectify incorrect data
• >Request deletion of your data
• >Export your data in a portable format
• >Withdraw consent at any time

Additional EU/Spain rights (GDPR/LOPDGDD):

• >Object to processing of your data
• >Request restriction of processing
• >File a complaint with your local data protection authority

Additional CCPA rights (California):

• >Right to know what personal data we collect and how we use it
• >Right to request deletion of your data
• >Right to non-discrimination for exercising your rights
• >We do not sell personal information. Ever.

To exercise any right: hello@useproa.com. We will respond within 30 days (EU) or 45 days (CCPA).

8. Cookies

This website does not use tracking or advertising cookies. We only use essential technical cookies for the site to function (language preference, session). We do not use Google Analytics or any other third-party tracking service.

9. Security

• >HTTPS/TLS encryption on all communications
• >Database encrypted at rest
• >Restricted access to personal data
• >HTTP security headers (HSTS, X-Frame-Options, CSP)
• >Payments processed by Stripe (PCI DSS Level 1)

10. Children

Proa One is not directed at children under 16. We do not knowingly collect data from minors. If we discover we have collected data from a minor, we will delete it immediately.

11. Changes to This Policy

If we modify this policy, we will update the date above. Significant changes will be communicated by email with 30 days notice.

12. Contact